Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/1/323830343a383261633a3a2f33322d3332203d3e20323732353333.roa
File:                     323830343a383261633a3a2f33322d3332203d3e20323732353333.roa (raw, json)
Hash identifier:          ZlyskO/E0S5bz9Oycy/Iep6yk44Di42tAMLUbNyrQCw=
Subject key identifier:   90:E9:61:34:9C:BC:92:6D:58:A8:68:6F:D7:53:90:6B:BF:A3:C1:AE
Certificate issuer:       /CN=3FF12F2C910D80D19549BE8B762BE68BBE37B528
Certificate serial:       446C273BB3EE0327E8A50FE547DF685F6703A7B4
Authority key identifier: 3F:F1:2F:2C:91:0D:80:D1:95:49:BE:8B:76:2B:E6:8B:BE:37:B5:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF12F2C910D80D19549BE8B762BE68BBE37B528.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/1/323830343a383261633a3a2f33322d3332203d3e20323732353333.roa
Signing time:             Thu 04 Apr 2024 03:21:48 +0000
ROA not before:           Thu 04 Apr 2024 03:16:48 +0000
ROA not after:            Thu 03 Apr 2025 03:21:48 +0000
asID:                     272533
IP address blocks:        2804:82ac::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6c:27:3b:b3:ee:03:27:e8:a5:0f:e5:47:df:68:5f:67:03:a7:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF12F2C910D80D19549BE8B762BE68BBE37B528
        Validity
            Not Before: Apr  4 03:16:48 2024 GMT
            Not After : Apr  3 03:21:48 2025 GMT
        Subject: CN=90E961349CBC926D58A8686FD753906BBFA3C1AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:7e:8f:0e:10:6b:91:d6:10:e1:de:bb:72:
                    0a:41:a0:fa:44:40:fd:89:3c:33:53:3b:ae:58:fd:
                    68:c0:46:4e:a9:f0:4f:57:e5:4d:6d:cb:aa:63:c3:
                    8f:b9:c1:49:8b:e2:b7:88:b9:ed:20:be:b2:b7:7d:
                    81:ef:78:eb:e4:94:f2:5d:13:6a:86:c7:a0:06:89:
                    ea:d1:a0:7e:45:9e:33:0b:90:aa:74:e3:a7:07:1f:
                    07:84:b5:c0:16:c1:c0:52:1e:d8:be:0b:88:73:bf:
                    6d:f4:9d:41:61:51:b4:dc:18:41:17:85:62:bb:a4:
                    b2:f8:0e:45:bd:1a:16:b1:e5:88:e8:71:f8:47:e9:
                    eb:a3:68:71:a1:d2:f8:88:db:d3:d5:a8:bf:0e:16:
                    92:45:0f:a0:4a:a3:a8:3a:1a:60:9f:9d:da:16:4a:
                    ed:c2:87:47:5b:0d:d6:60:5f:03:2b:4d:42:fe:16:
                    3f:4a:40:55:b3:5b:e6:f4:8e:14:1d:8f:b8:5d:42:
                    b0:5c:d3:c2:26:cf:69:84:8f:d1:af:f8:68:2e:0d:
                    66:4a:fc:24:dd:a5:ca:43:8e:14:86:26:2d:53:77:
                    58:de:a4:e1:8c:8c:f0:91:b1:5b:73:60:ea:f7:db:
                    3a:c6:db:ae:a7:24:b4:35:32:c0:83:9d:1f:37:9e:
                    7b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E9:61:34:9C:BC:92:6D:58:A8:68:6F:D7:53:90:6B:BF:A3:C1:AE
            X509v3 Authority Key Identifier:
                keyid:3F:F1:2F:2C:91:0D:80:D1:95:49:BE:8B:76:2B:E6:8B:BE:37:B5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/1/3FF12F2C910D80D19549BE8B762BE68BBE37B528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF12F2C910D80D19549BE8B762BE68BBE37B528.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/1/323830343a383261633a3a2f33322d3332203d3e20323732353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:b4:f6:05:59:dd:d8:53:ce:0f:14:6b:cf:cb:cd:43:2e:b4:
         54:36:0e:39:d5:88:47:46:a1:41:01:91:36:27:ec:db:6b:00:
         b5:2b:1e:3c:39:f4:64:87:db:77:ce:f9:e8:45:77:27:26:5a:
         aa:2a:94:49:84:7a:21:db:8f:c2:88:93:9b:00:98:6d:8a:7f:
         9e:3c:2e:b8:dd:3e:61:c2:9c:ff:2e:67:4c:73:ff:37:82:8b:
         a7:9c:06:f7:aa:2e:97:54:c6:15:15:c5:b5:75:4a:4f:62:45:
         36:1d:eb:4e:dd:e9:a8:33:5a:af:1d:7b:4c:3b:ff:19:66:ff:
         e0:52:ea:72:b0:1e:13:0d:60:10:f7:dd:3f:aa:2e:8f:61:d6:
         f2:8d:4d:ce:93:f6:9a:9a:93:15:a7:30:ea:af:cb:66:fa:e0:
         0f:20:40:57:cc:80:d8:b3:5b:bc:11:dd:0d:6b:23:67:f6:c1:
         95:cd:32:36:89:ef:29:d2:cd:af:2b:61:3a:4f:cc:d6:9a:2b:
         2a:bb:1b:59:d5:1e:6c:20:dc:e2:4d:1b:9d:f1:3f:a9:3a:d1:
         e8:e3:59:5c:0c:73:69:8d:06:13:cc:11:a0:98:91:93:12:b3:
         e6:84:9e:40:49:3d:3f:ba:a8:a7:c1:b6:51:81:ca:a3:22:77:
         5e:97:71:b0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURGwnO7PuAyfopQ/lR99oX2cDp7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGMTJGMkM5MTBEODBEMTk1NDlCRThCNzYyQkU2OEJC
RTM3QjUyODAeFw0yNDA0MDQwMzE2NDhaFw0yNTA0MDMwMzIxNDhaMDMxMTAvBgNV
BAMTKDkwRTk2MTM0OUNCQzkyNkQ1OEE4Njg2RkQ3NTM5MDZCQkZBM0MxQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6H6PDhBrkdYQ4d67cgpBoPpE
QP2JPDNTO65Y/WjARk6p8E9X5U1ty6pjw4+5wUmL4reIue0gvrK3fYHveOvklPJd
E2qGx6AGierRoH5FnjMLkKp046cHHweEtcAWwcBSHti+C4hzv230nUFhUbTcGEEX
hWK7pLL4DkW9Ghax5YjocfhH6eujaHGh0viI29PVqL8OFpJFD6BKo6g6GmCfndoW
Su3Ch0dbDdZgXwMrTUL+Fj9KQFWzW+b0jhQdj7hdQrBc08Imz2mEj9Gv+GguDWZK
/CTdpcpDjhSGJi1Td1jepOGMjPCRsVtzYOr32zrG266nJLQ1MsCDnR83nnvtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUkOlhNJy8km1YqGhv11OQa7+jwa4wHwYDVR0j
BBgwFoAUP/EvLJENgNGVSb6Ldivmi743tSgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZiek1ZMWppTEVVZDJ6Z0hzSjVCUHVWc2lQd3pvb0VGSnpqMllIMVkz
VHEvMS8zRkYxMkYyQzkxMEQ4MEQxOTU0OUJFOEI3NjJCRTY4QkJFMzdCNTI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRjEyRjJDOTEwRDgwRDE5
NTQ5QkU4Qjc2MkJFNjhCQkUzN0I1MjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2YnpNWTFqaUxFVWQyemdIc0o1QlB1VnNpUHd6b29FRkp6ajJZSDFZM1RxLzEv
MzIzODMwMzQzYTM4MzI2MTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMy
MzUzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASCrDANBgkqhkiG9w0BAQsFAAOCAQEADbT2BVnd
2FPODxRrz8vNQy60VDYOOdWIR0ahQQGRNifs22sAtSsePDn0ZIfbd8756EV3JyZa
qiqUSYR6IduPwoiTmwCYbYp/njwuuN0+YcKc/y5nTHP/N4KLp5wG96oul1TGFRXF
tXVKT2JFNh3rTt3pqDNarx17TDv/GWb/4FLqcrAeEw1gEPfdP6ouj2HW8o1NzpP2
mpqTFacw6q/LZvrgDyBAV8yA2LNbvBHdDWsjZ/bBlc0yNonvKdLNrythOk/M1por
KrsbWdUebCDc4k0bnfE/qTrR6ONZXAxzaY0GE8wRoJiRkxKz5oSeQEk9P7qop8G2
UYHKoyJ3XpdxsA==
-----END CERTIFICATE-----