Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a3a2f33322d3332203d3e20323731303037.roa
File:                     323830343a373464383a3a2f33322d3332203d3e20323731303037.roa (raw, json)
Hash identifier:          jQaqxmLuJao6YBgOpy+ZWkfAo4lwlRKXleLvEs1BVic=
Subject key identifier:   9D:25:76:DF:A5:D8:68:7B:BD:83:51:EB:B7:55:29:E5:59:38:21:7C
Certificate issuer:       /CN=031B7A807743AC5BE7218B45A482A2BB809962D6
Certificate serial:       5C607770F2B0359EC4CEB33031E1757BFBC2C26B
Authority key identifier: 03:1B:7A:80:77:43:AC:5B:E7:21:8B:45:A4:82:A2:BB:80:99:62:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/031B7A807743AC5BE7218B45A482A2BB809962D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a3a2f33322d3332203d3e20323731303037.roa
Signing time:             Fri 06 Sep 2024 18:15:29 +0000
ROA not before:           Fri 06 Sep 2024 18:10:29 +0000
ROA not after:            Fri 05 Sep 2025 18:15:29 +0000
asID:                     271007
IP address blocks:        2804:74d8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:60:77:70:f2:b0:35:9e:c4:ce:b3:30:31:e1:75:7b:fb:c2:c2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031B7A807743AC5BE7218B45A482A2BB809962D6
        Validity
            Not Before: Sep  6 18:10:29 2024 GMT
            Not After : Sep  5 18:15:29 2025 GMT
        Subject: CN=9D2576DFA5D8687BBD8351EBB75529E55938217C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:65:34:e6:49:8c:eb:7d:1a:82:83:bd:d4:
                    ea:1a:46:e4:2f:7b:86:57:a2:2e:4f:01:5f:98:7d:
                    01:83:82:70:b7:d6:4f:61:a9:8f:86:2f:95:b3:c5:
                    7e:19:b9:6e:91:5d:05:70:9f:cb:0b:af:a9:2d:9f:
                    5d:a9:f6:6e:ce:f5:76:55:4b:31:f0:9f:86:81:7b:
                    a8:2b:4b:ed:ab:69:b3:dd:ed:d7:a3:e3:87:d7:c6:
                    eb:8f:92:9f:d5:10:a7:25:22:3e:53:6c:35:94:6f:
                    e5:f4:a5:2a:b7:87:22:ab:c5:44:92:8d:75:0e:c5:
                    de:c6:de:3a:a9:a4:f8:7d:c8:52:4b:69:34:ac:e1:
                    6b:82:c5:d6:57:73:99:cb:f9:f2:1f:52:75:9b:af:
                    72:35:6d:60:73:1e:1f:fe:30:95:bd:55:a7:d5:aa:
                    c0:21:67:55:50:b3:d6:77:75:87:f7:5d:8f:55:32:
                    68:ed:58:8c:98:55:b9:f5:eb:20:37:9c:41:bb:d1:
                    62:37:ff:e0:0e:d5:97:3e:61:04:25:bd:24:b5:a1:
                    b5:dc:0d:27:b3:7f:39:5d:58:f4:b7:9b:39:8f:e6:
                    ae:df:ab:60:13:1e:fa:6b:77:2a:f9:40:ac:64:cb:
                    13:86:6c:39:3e:2e:9c:56:ca:e1:2d:e9:66:9c:d5:
                    62:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:25:76:DF:A5:D8:68:7B:BD:83:51:EB:B7:55:29:E5:59:38:21:7C
            X509v3 Authority Key Identifier:
                keyid:03:1B:7A:80:77:43:AC:5B:E7:21:8B:45:A4:82:A2:BB:80:99:62:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/031B7A807743AC5BE7218B45A482A2BB809962D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/031B7A807743AC5BE7218B45A482A2BB809962D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a3a2f33322d3332203d3e20323731303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:74:8d:a5:91:35:cc:28:4a:33:33:bf:54:db:dc:56:30:51:
         1f:25:c3:7e:17:c1:7c:83:27:5c:9a:5e:0e:ec:e3:cc:10:d1:
         d4:06:d4:13:67:12:3e:73:da:89:73:2f:ef:39:d2:c5:63:b6:
         4f:a4:e3:43:e9:66:9c:19:4d:39:1b:8a:eb:53:33:e2:b1:93:
         e2:7c:56:02:b5:e6:9c:2b:4e:d9:0a:73:ff:b1:5f:27:ab:e8:
         e5:3c:48:92:a3:57:72:93:73:62:e7:d6:32:84:6c:d3:1a:de:
         ce:8e:9f:d4:05:53:4a:49:d4:a8:b0:05:a6:5c:b4:26:19:d2:
         80:ff:56:db:34:8e:39:60:10:68:ff:fc:b6:db:16:4b:f7:33:
         83:a4:40:59:48:fc:a8:26:4a:ff:5d:0d:05:36:04:56:bd:54:
         94:ff:6f:39:29:04:23:81:43:bb:7f:92:d4:5d:bb:3e:5e:66:
         a5:82:b5:ce:95:50:5e:bd:0b:94:2e:35:db:55:96:13:ec:65:
         e1:f9:ae:35:e9:06:55:37:da:73:40:28:5d:a4:30:ed:80:03:
         9a:bf:a6:3f:7a:8d:a7:f4:e8:c1:a4:6d:3e:3d:34:ea:6f:4b:
         71:f2:48:ef:6c:fc:58:de:e9:2c:47:f8:f4:3d:c7:ed:2c:de:
         23:eb:1c:b4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXGB3cPKwNZ7EzrMwMeF1e/vCwmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMxQjdBODA3NzQzQUM1QkU3MjE4QjQ1QTQ4MkEyQkI4
MDk5NjJENjAeFw0yNDA5MDYxODEwMjlaFw0yNTA5MDUxODE1MjlaMDMxMTAvBgNV
BAMTKDlEMjU3NkRGQTVEODY4N0JCRDgzNTFFQkI3NTUyOUU1NTkzODIxN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJm2U05kmM630agoO91OoaRuQv
e4ZXoi5PAV+YfQGDgnC31k9hqY+GL5WzxX4ZuW6RXQVwn8sLr6ktn12p9m7O9XZV
SzHwn4aBe6grS+2rabPd7dej44fXxuuPkp/VEKclIj5TbDWUb+X0pSq3hyKrxUSS
jXUOxd7G3jqppPh9yFJLaTSs4WuCxdZXc5nL+fIfUnWbr3I1bWBzHh/+MJW9VafV
qsAhZ1VQs9Z3dYf3XY9VMmjtWIyYVbn16yA3nEG70WI3/+AO1Zc+YQQlvSS1obXc
DSezfzldWPS3mzmP5q7fq2ATHvprdyr5QKxkyxOGbDk+LpxWyuEt6Wac1WJZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUnSV236XYaHu9g1Hrt1Up5Vk4IXwwHwYDVR0j
BBgwFoAUAxt6gHdDrFvnIYtFpIKiu4CZYtYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWtRc1BaOXZkcDJBTldSb2Y3TmYya3dtcEpxcmhIWHZTQ3l1YkxSZTdG
dzMvMC8wMzFCN0E4MDc3NDNBQzVCRTcyMThCNDVBNDgyQTJCQjgwOTk2MkQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMUI3QTgwNzc0M0FDNUJF
NzIxOEI0NUE0ODJBMkJCODA5OTYyRDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FrUXNQWjl2ZHAyQU5XUm9mN05mMmt3bXBKcXJoSFh2U0N5dWJMUmU3RnczLzAv
MzIzODMwMzQzYTM3MzQ2NDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzAzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR02DANBgkqhkiG9w0BAQsFAAOCAQEAOXSNpZE1
zChKMzO/VNvcVjBRHyXDfhfBfIMnXJpeDuzjzBDR1AbUE2cSPnPaiXMv7znSxWO2
T6TjQ+lmnBlNORuK61Mz4rGT4nxWArXmnCtO2Qpz/7FfJ6vo5TxIkqNXcpNzYufW
MoRs0xrezo6f1AVTSknUqLAFply0JhnSgP9W2zSOOWAQaP/8ttsWS/czg6RAWUj8
qCZK/10NBTYEVr1UlP9vOSkEI4FDu3+S1F27Pl5mpYK1zpVQXr0LlC4121WWE+xl
4fmuNekGVTfac0AoXaQw7YADmr+mP3qNp/TowaRtPj006m9LcfJI72z8WN7pLEf4
9D3H7SzeI+sctA==
-----END CERTIFICATE-----