Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a3a2f33332d3333203d3e20323635313430.roa
File:                     323830343a326233343a3a2f33332d3333203d3e20323635313430.roa (raw, json)
Hash identifier:          pYf4xkjefOmB6N1V89U/afG42Oj7qIavYMzXMP3x8hE=
Subject key identifier:   C0:17:E9:E4:1B:AA:CC:28:72:5E:F9:9D:34:6B:63:6E:F8:B9:04:D8
Certificate issuer:       /CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
Certificate serial:       3DE9E84043E3FA55C3D22ADE1DEA47E62713D55E
Authority key identifier: 51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a3a2f33332d3333203d3e20323635313430.roa
Signing time:             Thu 22 Feb 2024 13:41:29 +0000
ROA not before:           Thu 22 Feb 2024 13:36:29 +0000
ROA not after:            Thu 20 Feb 2025 13:41:29 +0000
asID:                     265140
IP address blocks:        2804:2b34::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e9:e8:40:43:e3:fa:55:c3:d2:2a:de:1d:ea:47:e6:27:13:d5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
        Validity
            Not Before: Feb 22 13:36:29 2024 GMT
            Not After : Feb 20 13:41:29 2025 GMT
        Subject: CN=C017E9E41BAACC28725EF99D346B636EF8B904D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:7e:04:e2:34:c6:55:29:f2:0e:f3:a1:10:
                    cd:4d:f2:52:5e:39:46:48:fd:b3:c4:1a:85:1f:ba:
                    ed:79:8c:65:21:b3:ad:7e:7f:29:8b:f6:b0:cf:ad:
                    df:d7:fb:88:42:0a:10:d7:01:76:8e:df:8f:84:3c:
                    99:26:36:23:1d:27:56:4e:ef:c7:62:2e:0c:64:b4:
                    37:9f:73:48:dd:6c:16:d3:1f:99:c3:4b:c2:85:63:
                    5a:b9:73:4d:ae:c2:7a:22:05:fc:19:5a:d5:2e:85:
                    d4:ec:5e:d1:58:c9:df:e7:4a:92:ec:1e:e0:d8:17:
                    d1:bf:67:36:02:bd:41:f6:11:e5:01:c8:47:00:d6:
                    9b:ef:f6:ed:28:c7:af:d0:20:2f:88:2c:b4:ba:41:
                    a0:99:c9:10:4a:f3:f9:ca:6c:a6:cd:fe:48:8f:ad:
                    ee:69:bc:3e:8a:ef:60:45:45:18:ce:cd:87:da:d7:
                    ab:3b:72:98:27:06:5a:2a:3c:d0:e3:7b:07:4a:f6:
                    46:d1:1c:72:ac:b3:60:53:ef:70:93:b7:82:f4:1e:
                    33:eb:67:da:68:67:7c:ba:66:72:1f:76:49:b8:0c:
                    48:75:36:3c:87:e3:df:02:e3:90:36:2d:6e:6e:82:
                    10:59:f1:66:10:ce:d2:e4:4a:df:c6:03:a2:01:11:
                    28:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:17:E9:E4:1B:AA:CC:28:72:5E:F9:9D:34:6B:63:6E:F8:B9:04:D8
            X509v3 Authority Key Identifier:
                keyid:51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a3a2f33332d3333203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b34::/33

    Signature Algorithm: sha256WithRSAEncryption
         21:cf:90:34:23:da:1b:87:18:b7:4e:65:f5:ec:37:95:03:fe:
         14:b4:b1:9a:1b:e6:ab:ae:7b:e1:6e:07:33:a9:dc:dc:ac:86:
         0f:83:06:13:05:90:96:ac:1c:7d:f1:74:47:24:2a:61:94:75:
         d4:d6:20:4b:fb:7c:0d:6d:9a:f8:d3:98:bb:69:ca:95:8c:09:
         ad:1e:34:43:c8:62:a6:bd:a0:74:97:ea:69:56:50:1c:b2:15:
         88:71:75:21:99:de:eb:67:4a:98:44:ed:13:0e:b5:2d:03:da:
         8e:74:84:8f:dd:c1:0b:d3:7d:90:b2:f9:e1:b9:64:f9:51:f9:
         09:65:4d:93:af:67:95:86:b2:9f:93:41:58:8c:65:ab:75:2e:
         5f:55:c9:bd:36:92:62:01:c0:96:00:d0:30:49:18:f2:61:f5:
         91:63:62:bf:58:07:c4:a3:e8:58:4f:9d:8e:1d:44:6a:98:bb:
         47:f3:04:bd:6b:17:02:f2:7c:e8:c8:66:dd:f6:96:6c:e2:aa:
         bc:99:c2:c1:53:ab:57:4a:e9:f0:79:2a:82:7f:38:7c:43:48:
         d8:74:27:0d:94:a0:d5:4e:4b:43:a9:e1:c1:0e:87:f5:65:5e:
         f5:1e:d0:57:91:74:9a:7c:01:cd:c2:29:49:04:d7:d7:df:22:
         92:a6:af:8b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPenoQEPj+lXD0ireHepH5icT1V4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExNkVCODU1Q0QyMzlEQ0Q0RkU2NDFDRTUzQjYxQkE0
MDZBNkFCODAeFw0yNDAyMjIxMzM2MjlaFw0yNTAyMjAxMzQxMjlaMDMxMTAvBgNV
BAMTKEMwMTdFOUU0MUJBQUNDMjg3MjVFRjk5RDM0NkI2MzZFRjhCOTA0RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OX4E4jTGVSnyDvOhEM1N8lJe
OUZI/bPEGoUfuu15jGUhs61+fymL9rDPrd/X+4hCChDXAXaO34+EPJkmNiMdJ1ZO
78diLgxktDefc0jdbBbTH5nDS8KFY1q5c02uwnoiBfwZWtUuhdTsXtFYyd/nSpLs
HuDYF9G/ZzYCvUH2EeUByEcA1pvv9u0ox6/QIC+ILLS6QaCZyRBK8/nKbKbN/kiP
re5pvD6K72BFRRjOzYfa16s7cpgnBloqPNDjewdK9kbRHHKss2BT73CTt4L0HjPr
Z9poZ3y6ZnIfdkm4DEh1NjyH498C45A2LW5ughBZ8WYQztLkSt/GA6IBESj3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwBfp5BuqzChyXvmdNGtjbvi5BNgwHwYDVR0j
BBgwFoAUURbrhVzSOdzU/mQc5TthukBqargwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG5NNWtOVkVQeTl2RDVkVGNRY2ROQnl1eHBkMm5IeTRTM2prVXFIUktE
Z24vMC81MTE2RUI4NTVDRDIzOURDRDRGRTY0MUNFNTNCNjFCQTQwNkE2QUI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUxMTZFQjg1NUNEMjM5RENE
NEZFNjQxQ0U1M0I2MUJBNDA2QTZBQjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhuTTVrTlZFUHk5dkQ1ZFRjUWNkTkJ5dXhwZDJuSHk0UzNqa1VxSFJLRGduLzAv
MzIzODMwMzQzYTMyNjIzMzM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM1
MzEzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQrNAAwDQYJKoZIhvcNAQELBQADggEBACHPkDQj
2huHGLdOZfXsN5UD/hS0sZob5quue+FuBzOp3Nyshg+DBhMFkJasHH3xdEckKmGU
ddTWIEv7fA1tmvjTmLtpypWMCa0eNEPIYqa9oHSX6mlWUByyFYhxdSGZ3utnSphE
7RMOtS0D2o50hI/dwQvTfZCy+eG5ZPlR+QllTZOvZ5WGsp+TQViMZat1Ll9Vyb02
kmIBwJYA0DBJGPJh9ZFjYr9YB8Sj6FhPnY4dRGqYu0fzBL1rFwLyfOjIZt32lmzi
qryZwsFTq1dK6fB5KoJ/OHxDSNh0Jw2UoNVOS0Op4cEOh/VlXvUe0FeRdJp8Ac3C
KUkE19ffIpKmr4s=
-----END CERTIFICATE-----