Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/323830343a376533343a3a2f33332d3333203d3e20323731363039.roa
File:                     323830343a376533343a3a2f33332d3333203d3e20323731363039.roa (raw, json)
Hash identifier:          VaWUzdkvAYVEH60SIx33gTYoZTppSGtmx3g+o4PGLX8=
Subject key identifier:   C3:62:4A:0B:99:1E:B6:3C:6B:6F:DC:AA:5C:DE:76:7D:2E:E8:82:83
Certificate issuer:       /CN=965D526D55CF1330C0467770A5A4FAB58CB79FEC
Certificate serial:       13B1B18992986EA989B02BA9B8D6525F729C7A77
Authority key identifier: 96:5D:52:6D:55:CF:13:30:C0:46:77:70:A5:A4:FA:B5:8C:B7:9F:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/965D526D55CF1330C0467770A5A4FAB58CB79FEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/323830343a376533343a3a2f33332d3333203d3e20323731363039.roa
Signing time:             Thu 21 Mar 2024 18:39:10 +0000
ROA not before:           Thu 21 Mar 2024 18:34:10 +0000
ROA not after:            Thu 20 Mar 2025 18:39:10 +0000
asID:                     271609
IP address blocks:        2804:7e34::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b1:b1:89:92:98:6e:a9:89:b0:2b:a9:b8:d6:52:5f:72:9c:7a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965D526D55CF1330C0467770A5A4FAB58CB79FEC
        Validity
            Not Before: Mar 21 18:34:10 2024 GMT
            Not After : Mar 20 18:39:10 2025 GMT
        Subject: CN=C3624A0B991EB63C6B6FDCAA5CDE767D2EE88283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:71:f4:b5:95:eb:6d:b8:3e:32:c1:0a:9d:
                    90:dc:76:0f:6d:6a:01:4c:1f:de:95:3b:66:58:51:
                    30:ba:2d:8e:b6:8c:9b:8e:15:e7:53:0e:55:1b:14:
                    b1:8d:22:5b:0d:d0:85:94:8d:ab:f6:ff:53:41:1f:
                    a2:01:0f:56:b5:72:12:ce:54:0a:f6:57:a0:11:d6:
                    3b:31:9f:a6:68:1b:2b:ba:48:56:21:96:de:8b:b5:
                    b7:30:1a:83:9a:63:a5:e7:63:cc:98:76:81:35:ef:
                    d7:c7:72:93:95:68:2a:6a:dd:e3:d8:9f:2f:17:d1:
                    e0:c2:57:24:44:cd:ee:11:b7:a8:bc:d2:3d:0d:39:
                    6b:a9:b4:87:bf:25:95:8d:14:e9:de:3a:cc:ed:c7:
                    86:f2:09:db:00:a6:04:06:d2:c3:8f:3f:1f:72:07:
                    f0:eb:be:c7:44:26:12:c9:5c:37:b0:fd:33:5c:3f:
                    07:c9:98:30:75:41:74:3d:8d:d9:34:81:a6:cc:ab:
                    52:d1:09:cf:1f:a2:ba:88:f5:7e:a8:02:36:84:d9:
                    c6:cc:9b:8f:c2:00:ec:b0:fe:47:52:1b:47:6a:7d:
                    c5:5f:1a:14:f4:40:62:b6:af:2b:dc:f1:9a:49:ed:
                    b0:bb:61:42:2e:58:1e:61:de:8d:0a:2d:a7:d8:99:
                    87:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:62:4A:0B:99:1E:B6:3C:6B:6F:DC:AA:5C:DE:76:7D:2E:E8:82:83
            X509v3 Authority Key Identifier:
                keyid:96:5D:52:6D:55:CF:13:30:C0:46:77:70:A5:A4:FA:B5:8C:B7:9F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/965D526D55CF1330C0467770A5A4FAB58CB79FEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/965D526D55CF1330C0467770A5A4FAB58CB79FEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/323830343a376533343a3a2f33332d3333203d3e20323731363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e34::/33

    Signature Algorithm: sha256WithRSAEncryption
         36:89:b2:da:37:c6:f3:04:fb:f2:35:ee:fc:b7:f8:f0:a4:14:
         96:ca:53:10:37:cb:12:f0:56:6b:b4:ce:e7:1d:f8:8a:c6:48:
         77:a1:3b:ee:d9:67:4b:aa:df:cd:f4:93:93:a1:1c:a8:58:6d:
         ad:af:48:31:9c:79:5e:d9:43:18:83:4a:fd:85:7e:2e:af:46:
         07:4a:1a:95:40:b5:4e:91:b3:8f:e4:10:b9:b1:79:4e:75:66:
         49:98:9e:53:7f:bf:dc:0c:43:e4:df:59:52:c3:18:e1:19:1d:
         d3:3f:bd:42:ab:22:c7:2c:8c:7f:b2:cd:b8:7b:b4:a0:e8:69:
         82:a7:90:f4:04:ff:d6:30:4d:0c:62:c9:a3:cb:8b:2f:4d:3a:
         d9:f3:8d:76:26:1e:b6:5e:22:0d:32:d5:9a:cc:a7:51:f8:a7:
         5c:20:77:cb:7d:0f:9c:ba:b1:ac:fc:7c:f8:71:5c:94:5b:a2:
         ec:34:f9:00:ac:45:8c:ac:b7:b2:a9:f5:00:3f:df:45:08:0a:
         66:78:3f:0d:6e:3a:16:49:5f:ab:8e:7f:20:a0:78:84:f8:4b:
         09:df:97:8d:07:60:d9:18:16:be:55:96:a9:6a:3e:bb:67:3e:
         2f:ca:ba:4d:99:96:63:f1:dc:60:49:45:a3:f5:d7:b6:a8:f0:
         8b:9f:73:14
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE7GxiZKYbqmJsCupuNZSX3KcencwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY1RDUyNkQ1NUNGMTMzMEMwNDY3NzcwQTVBNEZBQjU4
Q0I3OUZFQzAeFw0yNDAzMjExODM0MTBaFw0yNTAzMjAxODM5MTBaMDMxMTAvBgNV
BAMTKEMzNjI0QTBCOTkxRUI2M0M2QjZGRENBQTVDREU3NjdEMkVFODgyODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXXH0tZXrbbg+MsEKnZDcdg9t
agFMH96VO2ZYUTC6LY62jJuOFedTDlUbFLGNIlsN0IWUjav2/1NBH6IBD1a1chLO
VAr2V6AR1jsxn6ZoGyu6SFYhlt6LtbcwGoOaY6XnY8yYdoE179fHcpOVaCpq3ePY
ny8X0eDCVyREze4Rt6i80j0NOWuptIe/JZWNFOneOsztx4byCdsApgQG0sOPPx9y
B/DrvsdEJhLJXDew/TNcPwfJmDB1QXQ9jdk0gabMq1LRCc8forqI9X6oAjaE2cbM
m4/CAOyw/kdSG0dqfcVfGhT0QGK2ryvc8ZpJ7bC7YUIuWB5h3o0KLafYmYfDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUw2JKC5ketjxrb9yqXN52fS7ogoMwHwYDVR0j
BBgwFoAUll1SbVXPEzDARndwpaT6tYy3n+wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHoyNUI2MUtva1MxZVZXVU1UeEJIRlB1NWU0c055QWdBTkRiZmd1VXVL
dGovMC85NjVENTI2RDU1Q0YxMzMwQzA0Njc3NzBBNUE0RkFCNThDQjc5RkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk2NUQ1MjZENTVDRjEzMzBD
MDQ2Nzc3MEE1QTRGQUI1OENCNzlGRUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh6MjVCNjFLb2tTMWVWV1VNVHhCSEZQdTVlNHNOeUFnQU5EYmZndVV1S3RqLzAv
MzIzODMwMzQzYTM3NjUzMzM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMx
MzYzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAR+NAAwDQYJKoZIhvcNAQELBQADggEBADaJsto3
xvME+/I17vy3+PCkFJbKUxA3yxLwVmu0zucd+IrGSHehO+7ZZ0uq3830k5OhHKhY
ba2vSDGceV7ZQxiDSv2Ffi6vRgdKGpVAtU6Rs4/kELmxeU51ZkmYnlN/v9wMQ+Tf
WVLDGOEZHdM/vUKrIscsjH+yzbh7tKDoaYKnkPQE/9YwTQxiyaPLiy9NOtnzjXYm
HrZeIg0y1ZrMp1H4p1wgd8t9D5y6saz8fPhxXJRbouw0+QCsRYyst7Kp9QA/30UI
CmZ4Pw1uOhZJX6uOfyCgeIT4Swnfl40HYNkYFr5VlqlqPrtnPi/Kuk2ZlmPx3GBJ
RaP117ao8IufcxQ=
-----END CERTIFICATE-----