Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/323830343a3432303a3a2f33322d313238203d3e20323635323634.roa
File:                     323830343a3432303a3a2f33322d313238203d3e20323635323634.roa (raw, json)
Hash identifier:          vzfzV/eXlTjHGB/m3t3t283oILE+nplEq8dP04BfrJY=
Subject key identifier:   A8:86:B9:E1:E5:A4:68:F6:4A:EF:AF:E3:D2:66:37:26:40:E3:C2:92
Certificate issuer:       /CN=9F56E183EE065A36D830C9D35441B87388A72126
Certificate serial:       5BC6F790AF3ADD8F45E6F61FDFE0E3279D95437B
Authority key identifier: 9F:56:E1:83:EE:06:5A:36:D8:30:C9:D3:54:41:B8:73:88:A7:21:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F56E183EE065A36D830C9D35441B87388A72126.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/323830343a3432303a3a2f33322d313238203d3e20323635323634.roa
Signing time:             Thu 23 May 2024 19:01:12 +0000
ROA not before:           Thu 23 May 2024 18:56:12 +0000
ROA not after:            Thu 22 May 2025 19:01:12 +0000
asID:                     265264
IP address blocks:        2804:420::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c6:f7:90:af:3a:dd:8f:45:e6:f6:1f:df:e0:e3:27:9d:95:43:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56E183EE065A36D830C9D35441B87388A72126
        Validity
            Not Before: May 23 18:56:12 2024 GMT
            Not After : May 22 19:01:12 2025 GMT
        Subject: CN=A886B9E1E5A468F64AEFAFE3D266372640E3C292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:c0:07:21:79:82:9f:17:0f:2f:ce:a6:51:
                    7d:e7:7e:9f:f4:a1:89:0c:6a:fa:27:c4:69:c4:82:
                    c3:3d:c5:6c:a0:81:10:74:5b:39:25:0b:de:92:83:
                    36:d3:43:14:b1:74:dc:67:61:58:6a:57:25:c4:41:
                    79:6f:1c:07:df:d5:ce:cf:6f:81:1d:62:27:6a:25:
                    1f:4a:bc:25:c5:c5:39:42:81:e3:70:df:d7:c8:a8:
                    b9:36:2f:25:92:c5:c0:95:15:a9:72:98:f4:e3:b6:
                    59:8e:63:f5:71:8f:04:13:62:72:83:5f:f5:33:b0:
                    8f:78:ae:6f:b9:22:2e:6f:a4:a2:8f:57:a3:b7:0c:
                    95:17:92:f5:53:eb:1c:a3:2b:37:1b:a6:da:50:6c:
                    0d:8c:df:c7:05:b8:bd:5d:80:97:6e:ca:88:a7:10:
                    aa:60:1f:fe:57:b0:bb:b3:8d:73:f5:e7:45:0e:d0:
                    d3:c9:2c:be:d6:65:c6:cc:40:db:ca:74:df:c7:b0:
                    e3:f2:8f:6b:e4:12:9a:78:d9:73:f3:b1:f5:8c:b6:
                    b9:5e:8d:eb:01:0a:15:06:ca:61:52:4b:61:ac:99:
                    48:31:6f:b8:46:70:d7:75:8e:8f:7e:28:f8:07:3d:
                    ad:f9:5a:2d:33:60:73:a4:b7:f4:21:c1:43:ec:76:
                    83:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:86:B9:E1:E5:A4:68:F6:4A:EF:AF:E3:D2:66:37:26:40:E3:C2:92
            X509v3 Authority Key Identifier:
                keyid:9F:56:E1:83:EE:06:5A:36:D8:30:C9:D3:54:41:B8:73:88:A7:21:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/9F56E183EE065A36D830C9D35441B87388A72126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F56E183EE065A36D830C9D35441B87388A72126.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/323830343a3432303a3a2f33322d313238203d3e20323635323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:420::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:e4:0f:f6:98:13:69:8f:7f:7d:36:52:bf:b0:53:27:9c:08:
         a5:90:4f:58:03:c5:d7:19:e9:3f:4b:3d:bd:c0:56:47:b4:29:
         5f:e0:9e:94:5f:ca:ed:0a:e9:c0:7a:2e:74:f9:91:61:f9:18:
         e3:40:29:83:46:54:ec:c4:e9:82:6c:51:91:86:2e:3d:33:5c:
         88:49:47:f8:2d:f4:8b:ec:dd:e1:bf:44:ce:53:a6:54:b7:87:
         2e:d2:66:1c:ef:4d:8b:0d:fc:d8:1f:27:73:19:d9:d0:13:96:
         c4:67:46:af:5c:b1:5b:8f:d5:69:15:53:cb:00:d4:79:31:af:
         07:c4:af:5d:00:65:ad:6c:80:d7:d1:a8:55:e2:ef:06:30:ff:
         17:4a:b7:d2:64:ab:7a:5b:1b:fd:14:5f:cb:71:36:a3:b6:64:
         62:ba:91:01:61:11:3f:4b:9b:30:a9:87:42:48:c5:be:8a:70:
         e9:a3:cb:93:36:f8:48:d9:f6:17:e2:1c:72:8e:e0:d6:99:c2:
         1b:fb:41:ff:ed:11:6d:26:5b:0f:64:2b:ea:74:48:2d:aa:57:
         90:94:c4:c4:c8:46:82:eb:aa:e2:cd:b2:50:a5:28:86:40:c2:
         56:69:ee:e8:5d:0f:55:05:31:2c:d4:21:c1:91:3c:f8:f9:5c:
         b5:fe:0c:dc
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUW8b3kK863Y9F5vYf3+DjJ52VQ3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY1NkUxODNFRTA2NUEzNkQ4MzBDOUQzNTQ0MUI4NzM4
OEE3MjEyNjAeFw0yNDA1MjMxODU2MTJaFw0yNTA1MjIxOTAxMTJaMDMxMTAvBgNV
BAMTKEE4ODZCOUUxRTVBNDY4RjY0QUVGQUZFM0QyNjYzNzI2NDBFM0MyOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ycAHIXmCnxcPL86mUX3nfp/0
oYkMavonxGnEgsM9xWyggRB0WzklC96SgzbTQxSxdNxnYVhqVyXEQXlvHAff1c7P
b4EdYidqJR9KvCXFxTlCgeNw39fIqLk2LyWSxcCVFalymPTjtlmOY/VxjwQTYnKD
X/UzsI94rm+5Ii5vpKKPV6O3DJUXkvVT6xyjKzcbptpQbA2M38cFuL1dgJduyoin
EKpgH/5XsLuzjXP150UO0NPJLL7WZcbMQNvKdN/HsOPyj2vkEpp42XPzsfWMtrle
jesBChUGymFSS2GsmUgxb7hGcNd1jo9+KPgHPa35Wi0zYHOkt/QhwUPsdoOlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUqIa54eWkaPZK76/j0mY3JkDjwpIwHwYDVR0j
BBgwFoAUn1bhg+4GWjbYMMnTVEG4c4inISYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODFGeU1NYUVyWE53VjZMM3dnd2dGc05lUEd5YWpoNkQxRW9RUWlkTFox
UG4vMC85RjU2RTE4M0VFMDY1QTM2RDgzMEM5RDM1NDQxQjg3Mzg4QTcyMTI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGNTZFMTgzRUUwNjVBMzZE
ODMwQzlEMzU0NDFCODczODhBNzIxMjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgxRnlNTWFFclhOd1Y2TDN3Z3dnRnNOZVBHeWFqaDZEMUVvUVFpZExaMVBuLzAv
MzIzODMwMzQzYTM0MzIzMDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjM1
MzIzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQEIDANBgkqhkiG9w0BAQsFAAOCAQEAL+QP9pgT
aY9/fTZSv7BTJ5wIpZBPWAPF1xnpP0s9vcBWR7QpX+CelF/K7QrpwHoudPmRYfkY
40Apg0ZU7MTpgmxRkYYuPTNciElH+C30i+zd4b9EzlOmVLeHLtJmHO9Niw382B8n
cxnZ0BOWxGdGr1yxW4/VaRVTywDUeTGvB8SvXQBlrWyA19GoVeLvBjD/F0q30mSr
elsb/RRfy3E2o7ZkYrqRAWERP0ubMKmHQkjFvopw6aPLkzb4SNn2F+Icco7g1pnC
G/tB/+0RbSZbD2Qr6nRILapXkJTExMhGguuq4s2yUKUohkDCVmnu6F0PVQUxLNQh
wZE8+Plctf4M3A==
-----END CERTIFICATE-----