Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/323830343a386135633a3a2f33322d3332203d3e20323733363634.roa
File:                     323830343a386135633a3a2f33322d3332203d3e20323733363634.roa (raw, json)
Hash identifier:          J+EGU382fvTKJvVUs3ROmb8q4H5AbJ6qZD2fnUpxBQI=
Subject key identifier:   E3:72:BC:94:13:9F:2E:7B:74:FB:F3:49:AB:E4:98:2B:23:85:7B:11
Certificate issuer:       /CN=31AE16F28BCAEEB3D51A3C45A318CE9A75FA6E69
Certificate serial:       14472605AB6DA033A42A9911A1856393ADC0A05A
Authority key identifier: 31:AE:16:F2:8B:CA:EE:B3:D5:1A:3C:45:A3:18:CE:9A:75:FA:6E:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31AE16F28BCAEEB3D51A3C45A318CE9A75FA6E69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/323830343a386135633a3a2f33322d3332203d3e20323733363634.roa
Signing time:             Fri 22 Dec 2023 16:29:07 +0000
ROA not before:           Fri 22 Dec 2023 16:24:07 +0000
ROA not after:            Fri 20 Dec 2024 16:29:07 +0000
asID:                     273664
IP address blocks:        2804:8a5c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:47:26:05:ab:6d:a0:33:a4:2a:99:11:a1:85:63:93:ad:c0:a0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31AE16F28BCAEEB3D51A3C45A318CE9A75FA6E69
        Validity
            Not Before: Dec 22 16:24:07 2023 GMT
            Not After : Dec 20 16:29:07 2024 GMT
        Subject: CN=E372BC94139F2E7B74FBF349ABE4982B23857B11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ab:0a:5a:6a:2f:d4:fd:93:a2:9b:9e:bb:84:
                    78:0d:ae:95:53:75:93:54:7c:42:f7:25:64:b1:d7:
                    54:74:39:ec:20:d0:62:9e:02:8d:90:d7:09:4b:ac:
                    d4:51:f3:0b:a9:9c:2b:98:62:8a:1a:92:6d:01:2f:
                    ea:a1:99:9b:d6:d8:a2:e5:5f:16:fc:5e:b8:51:29:
                    5a:ad:ad:43:1b:5c:02:9b:6d:05:81:a5:fa:95:e6:
                    48:b2:7f:09:6e:05:73:f6:37:6a:f2:80:e4:b6:43:
                    e8:be:2b:00:82:c4:65:36:c7:5d:53:b8:44:41:10:
                    e4:53:0e:e3:69:2c:f0:d7:1b:a3:9e:ca:e6:1a:6f:
                    a9:75:31:75:75:e3:52:e7:64:5b:4c:fd:8d:74:b1:
                    72:85:2f:8f:1d:ac:37:c7:1a:4e:4d:a6:ba:5c:d4:
                    43:2d:28:bd:ab:c0:f9:49:88:77:97:ea:ad:b5:38:
                    21:34:55:c5:28:a3:c4:c3:5a:78:d5:29:8a:66:37:
                    6c:ee:f6:08:00:5f:b6:49:ff:94:85:49:4c:32:f6:
                    d2:e2:fc:a9:74:a0:3f:e9:1a:86:19:90:75:94:da:
                    5b:77:a9:29:3d:83:67:29:5a:04:3b:42:c4:2b:48:
                    d2:42:6c:cd:b6:71:7e:c0:4d:80:7d:61:58:4e:f7:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:72:BC:94:13:9F:2E:7B:74:FB:F3:49:AB:E4:98:2B:23:85:7B:11
            X509v3 Authority Key Identifier:
                keyid:31:AE:16:F2:8B:CA:EE:B3:D5:1A:3C:45:A3:18:CE:9A:75:FA:6E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/31AE16F28BCAEEB3D51A3C45A318CE9A75FA6E69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31AE16F28BCAEEB3D51A3C45A318CE9A75FA6E69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/323830343a386135633a3a2f33322d3332203d3e20323733363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:05:cd:00:bc:73:63:e2:8f:a7:e7:f2:b7:44:8a:f8:b1:22:
         be:00:c8:81:58:22:7e:c0:12:c0:9d:11:e6:47:40:9f:64:ae:
         ce:20:55:20:0c:24:70:a4:82:c3:13:cf:73:3e:eb:bf:0c:a8:
         0e:c1:05:b2:a2:0d:ab:c9:9d:48:41:cb:14:b7:65:15:e8:10:
         9b:9f:99:aa:99:36:46:aa:a9:2e:05:12:eb:eb:9b:2e:9e:38:
         5b:38:ae:98:d0:c5:28:08:7d:72:e2:65:f8:9e:d2:d4:32:80:
         29:88:3d:14:ba:82:62:88:50:13:b4:b5:67:0e:94:e5:e8:1f:
         27:c8:46:6b:93:27:72:a8:e7:57:5f:8c:42:c0:f4:e8:d1:bc:
         ed:8f:22:a5:59:9d:d9:80:25:7a:88:a1:2e:a5:ab:f7:d2:e0:
         d0:d3:ad:0b:61:d0:a5:9c:62:e1:a1:15:49:1b:c2:ba:89:9d:
         ed:7e:b8:30:b9:7b:85:be:89:39:6f:d5:2d:a9:43:c7:49:1e:
         c0:8d:1f:1b:46:ad:bb:cb:ff:25:f9:18:a5:6f:f4:fe:4c:ae:
         a0:73:fd:63:98:62:8b:7f:51:a0:7d:bb:9c:27:22:52:c1:ed:
         6f:b6:e5:3e:f6:c7:bd:d0:26:f1:54:fb:33:00:09:b6:11:a1:
         28:c9:9b:7c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFEcmBattoDOkKpkRoYVjk63AoFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFBRTE2RjI4QkNBRUVCM0Q1MUEzQzQ1QTMxOENFOUE3
NUZBNkU2OTAeFw0yMzEyMjIxNjI0MDdaFw0yNDEyMjAxNjI5MDdaMDMxMTAvBgNV
BAMTKEUzNzJCQzk0MTM5RjJFN0I3NEZCRjM0OUFCRTQ5ODJCMjM4NTdCMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbqwpaai/U/ZOim567hHgNrpVT
dZNUfEL3JWSx11R0Oewg0GKeAo2Q1wlLrNRR8wupnCuYYooakm0BL+qhmZvW2KLl
Xxb8XrhRKVqtrUMbXAKbbQWBpfqV5kiyfwluBXP2N2rygOS2Q+i+KwCCxGU2x11T
uERBEORTDuNpLPDXG6OeyuYab6l1MXV141LnZFtM/Y10sXKFL48drDfHGk5Nprpc
1EMtKL2rwPlJiHeX6q21OCE0VcUoo8TDWnjVKYpmN2zu9ggAX7ZJ/5SFSUwy9tLi
/Kl0oD/pGoYZkHWU2lt3qSk9g2cpWgQ7QsQrSNJCbM22cX7ATYB9YVhO95s1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU43K8lBOfLnt0+/NJq+SYKyOFexEwHwYDVR0j
BBgwFoAUMa4W8ovK7rPVGjxFoxjOmnX6bmkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWVMZnlYdzExNENlQTk5V0dSaHJhaThlMUc0NzdHV2FHUHdOOVJkOFFz
RnIvMC8zMUFFMTZGMjhCQ0FFRUIzRDUxQTNDNDVBMzE4Q0U5QTc1RkE2RTY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMxQUUxNkYyOEJDQUVFQjNE
NTFBM0M0NUEzMThDRTlBNzVGQTZFNjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzllTGZ5WHcxMTRDZUE5OVdHUmhyYWk4ZTFHNDc3R1dhR1B3TjlSZDhRc0ZyLzAv
MzIzODMwMzQzYTM4NjEzNTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASKXDANBgkqhkiG9w0BAQsFAAOCAQEAjQXNALxz
Y+KPp+fyt0SK+LEivgDIgVgifsASwJ0R5kdAn2SuziBVIAwkcKSCwxPPcz7rvwyo
DsEFsqINq8mdSEHLFLdlFegQm5+Zqpk2RqqpLgUS6+ubLp44WziumNDFKAh9cuJl
+J7S1DKAKYg9FLqCYohQE7S1Zw6U5egfJ8hGa5MncqjnV1+MQsD06NG87Y8ipVmd
2YAleoihLqWr99Lg0NOtC2HQpZxi4aEVSRvCuomd7X64MLl7hb6JOW/VLalDx0ke
wI0fG0atu8v/JfkYpW/0/kyuoHP9Y5hii39RoH27nCciUsHtb7blPvbHvdAm8VT7
MwAJthGhKMmbfA==
-----END CERTIFICATE-----