Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33322d3332203d3e20323633393730.roa
File:                     323830343a323839633a3a2f33322d3332203d3e20323633393730.roa (raw, json)
Hash identifier:          or8MU3GiqkkxPtMAvcCz5QSs1k2EcXQ4ml9oIHhwVkA=
Subject key identifier:   26:7E:17:E9:C2:8F:C2:CA:67:BA:6D:81:A1:9A:E1:5F:78:7B:EA:C8
Certificate issuer:       /CN=32F120628961E91749A1239DA4FFA744369562E2
Certificate serial:       7EABBE5D340C260407215E4847723CEB9D0B9321
Authority key identifier: 32:F1:20:62:89:61:E9:17:49:A1:23:9D:A4:FF:A7:44:36:95:62:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F120628961E91749A1239DA4FFA744369562E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33322d3332203d3e20323633393730.roa
Signing time:             Thu 21 Dec 2023 18:53:04 +0000
ROA not before:           Thu 21 Dec 2023 18:48:04 +0000
ROA not after:            Thu 19 Dec 2024 18:53:04 +0000
asID:                     263970
IP address blocks:        2804:289c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ab:be:5d:34:0c:26:04:07:21:5e:48:47:72:3c:eb:9d:0b:93:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F120628961E91749A1239DA4FFA744369562E2
        Validity
            Not Before: Dec 21 18:48:04 2023 GMT
            Not After : Dec 19 18:53:04 2024 GMT
        Subject: CN=267E17E9C28FC2CA67BA6D81A19AE15F787BEAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:5d:31:9e:b2:db:5d:b1:8a:fa:2b:63:e1:
                    5b:c9:be:e1:c1:6b:46:b5:d3:cc:94:7a:3e:45:c0:
                    ea:7b:21:2e:68:ee:2c:71:69:9c:9b:8b:1f:bc:ac:
                    98:a5:2f:3a:8f:8f:ba:bf:57:ac:b3:a9:c4:20:9a:
                    c0:94:53:f2:90:1e:42:91:c7:09:8c:12:47:c8:e0:
                    ab:ca:73:b7:ae:80:47:cd:f9:c3:83:a5:df:61:80:
                    1d:92:49:d1:43:9d:1f:e4:7a:a4:38:86:a9:67:fc:
                    49:3d:3e:87:63:5e:05:4a:33:cd:c7:1f:d6:21:4f:
                    35:27:50:e9:11:f8:5d:79:b0:ea:24:81:ff:92:e5:
                    9a:c7:9e:39:90:b3:16:88:f0:66:87:68:3e:17:dd:
                    14:22:fa:9b:83:bf:4a:cd:9b:61:8f:71:4f:97:d8:
                    20:ff:d3:a9:ec:27:7a:65:12:61:46:c2:48:91:81:
                    f1:0b:4b:4a:08:07:48:f8:1a:91:ee:98:ce:2f:87:
                    40:01:84:a1:dd:62:34:73:88:35:2c:28:b9:08:d8:
                    f0:0f:2e:e6:79:77:4c:26:3f:a6:c6:d2:35:24:a2:
                    2b:73:0e:2a:26:bd:ca:67:83:1a:e4:d3:68:47:f9:
                    65:2f:56:3f:99:de:a8:53:82:58:ee:db:10:56:b5:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7E:17:E9:C2:8F:C2:CA:67:BA:6D:81:A1:9A:E1:5F:78:7B:EA:C8
            X509v3 Authority Key Identifier:
                keyid:32:F1:20:62:89:61:E9:17:49:A1:23:9D:A4:FF:A7:44:36:95:62:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/32F120628961E91749A1239DA4FFA744369562E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F120628961E91749A1239DA4FFA744369562E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33322d3332203d3e20323633393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:289c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:53:f7:dc:4a:c5:3f:4c:89:98:cb:b1:af:ed:d4:b9:9d:89:
         c4:6e:0f:e9:60:89:86:68:a1:59:d2:4e:a8:31:20:a1:f3:d4:
         49:3b:7a:3b:81:75:3f:54:1d:18:dd:73:04:7d:26:ab:2f:3f:
         8a:9a:9e:d6:ec:04:af:09:ab:64:3f:30:cd:8a:12:33:7d:98:
         b2:0c:c7:a8:54:89:45:73:0f:a9:ce:e9:bd:fd:05:86:75:05:
         a7:29:a7:16:35:a6:0b:65:83:65:00:e7:ad:6d:f8:0b:10:9d:
         b7:e9:1f:34:aa:9b:49:80:e4:8b:59:64:cd:ae:3a:64:44:c4:
         2e:70:ad:60:98:90:26:cc:8f:15:0c:c9:e7:75:bb:68:f2:8e:
         3c:2e:a0:e2:b0:ff:68:9c:71:0c:87:2d:f4:44:f5:ae:6d:ea:
         dd:19:71:0a:62:ef:5b:ae:95:e9:58:08:15:e3:10:c8:d7:f3:
         5b:10:4c:d6:15:37:26:55:e3:26:27:d4:64:fa:08:99:5b:b8:
         79:a1:38:42:b3:a3:19:04:ec:31:b3:e5:5b:40:87:a1:b9:da:
         f1:3b:5a:5a:ed:25:65:10:40:2c:48:b1:05:99:22:58:a8:30:
         1d:7d:2b:bb:01:c2:02:a0:ae:42:14:50:3e:fd:b0:72:ec:93:
         b1:ef:7f:63
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfqu+XTQMJgQHIV5IR3I8650LkyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJGMTIwNjI4OTYxRTkxNzQ5QTEyMzlEQTRGRkE3NDQz
Njk1NjJFMjAeFw0yMzEyMjExODQ4MDRaFw0yNDEyMTkxODUzMDRaMDMxMTAvBgNV
BAMTKDI2N0UxN0U5QzI4RkMyQ0E2N0JBNkQ4MUExOUFFMTVGNzg3QkVBQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3F0xnrLbXbGK+itj4VvJvuHB
a0a108yUej5FwOp7IS5o7ixxaZybix+8rJilLzqPj7q/V6yzqcQgmsCUU/KQHkKR
xwmMEkfI4KvKc7eugEfN+cODpd9hgB2SSdFDnR/keqQ4hqln/Ek9PodjXgVKM83H
H9YhTzUnUOkR+F15sOokgf+S5ZrHnjmQsxaI8GaHaD4X3RQi+puDv0rNm2GPcU+X
2CD/06nsJ3plEmFGwkiRgfELS0oIB0j4GpHumM4vh0ABhKHdYjRziDUsKLkI2PAP
LuZ5d0wmP6bG0jUkoitzDiomvcpngxrk02hH+WUvVj+Z3qhTglju2xBWtbNNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJn4X6cKPwspnum2BoZrhX3h76sgwHwYDVR0j
BBgwFoAUMvEgYolh6RdJoSOdpP+nRDaVYuIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNn
bWUvMC8zMkYxMjA2Mjg5NjFFOTE3NDlBMTIzOURBNEZGQTc0NDM2OTU2MkUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyRjEyMDYyODk2MUU5MTc0
OUExMjM5REE0RkZBNzQ0MzY5NTYyRTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmTHFWMllEcjJyU2sxMjh1TmhCS3o4djJSYjFBWG52SmNFSzNqclUzZ21lLzAv
MzIzODMwMzQzYTMyMzgzOTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQonDANBgkqhkiG9w0BAQsFAAOCAQEAilP33ErF
P0yJmMuxr+3UuZ2JxG4P6WCJhmihWdJOqDEgofPUSTt6O4F1P1QdGN1zBH0mqy8/
ipqe1uwErwmrZD8wzYoSM32YsgzHqFSJRXMPqc7pvf0FhnUFpymnFjWmC2WDZQDn
rW34CxCdt+kfNKqbSYDki1lkza46ZETELnCtYJiQJsyPFQzJ53W7aPKOPC6g4rD/
aJxxDIct9ET1rm3q3RlxCmLvW66V6VgIFeMQyNfzWxBM1hU3JlXjJifUZPoImVu4
eaE4QrOjGQTsMbPlW0CHobna8TtaWu0lZRBALEixBZkiWKgwHX0ruwHCAqCuQhRQ
Pv2wcuyTse9/Yw==
-----END CERTIFICATE-----