Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/323830343a336462383a3a2f33322d3430203d3e20323636353439.roa
File:                     323830343a336462383a3a2f33322d3430203d3e20323636353439.roa (raw, json)
Hash identifier:          AN1jX09Pi1OZi5ZzGR3eH6VYXtw4B/6k3kPcbugulzc=
Subject key identifier:   39:F2:58:88:F2:66:44:C5:2E:C2:A2:88:5B:DF:CB:9F:5D:E7:59:BD
Certificate issuer:       /CN=A506536960B8F03C2AECE0E49F542FED010D41E4
Certificate serial:       199B6B41BED4EB2D39A4F91214462A50F80C256C
Authority key identifier: A5:06:53:69:60:B8:F0:3C:2A:EC:E0:E4:9F:54:2F:ED:01:0D:41:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A506536960B8F03C2AECE0E49F542FED010D41E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/323830343a336462383a3a2f33322d3430203d3e20323636353439.roa
Signing time:             Thu 17 Aug 2023 19:39:19 +0000
ROA not before:           Thu 17 Aug 2023 19:34:19 +0000
ROA not after:            Thu 15 Aug 2024 19:39:19 +0000
asID:                     266549
IP address blocks:        2804:3db8::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9b:6b:41:be:d4:eb:2d:39:a4:f9:12:14:46:2a:50:f8:0c:25:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A506536960B8F03C2AECE0E49F542FED010D41E4
        Validity
            Not Before: Aug 17 19:34:19 2023 GMT
            Not After : Aug 15 19:39:19 2024 GMT
        Subject: CN=39F25888F26644C52EC2A2885BDFCB9F5DE759BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:69:34:78:ae:32:41:13:b5:ea:31:c9:f0:dc:
                    3e:26:d6:ea:85:fd:d7:fd:0d:a5:b0:50:01:68:b9:
                    42:2a:b3:fa:98:77:70:51:49:f1:19:0d:4d:20:7f:
                    84:18:1c:fd:ed:b4:f4:28:ad:8a:e5:9b:25:ed:e9:
                    61:a1:a0:a4:b8:f3:07:6a:63:57:0e:3c:11:5d:3f:
                    d1:17:eb:e1:77:34:d7:1c:22:bd:66:5d:49:f1:ca:
                    ad:23:a8:a6:5e:10:a6:d3:80:74:2b:79:46:df:c7:
                    9d:04:07:f3:9b:94:7b:e8:1b:17:6e:5d:11:5b:dd:
                    52:05:93:0a:5b:57:fb:73:a3:bf:ab:c4:57:85:1a:
                    78:1b:49:de:ff:7f:92:c7:06:5b:47:61:53:05:14:
                    ea:7c:4c:25:13:74:8b:a0:c8:2d:a1:71:b5:d1:ce:
                    a9:bd:5c:ca:da:27:0f:db:ce:3a:d9:4e:e6:7d:9c:
                    0e:f0:0f:b8:d7:a2:ca:d4:b8:92:cb:37:54:ff:da:
                    5f:ce:c4:d6:3c:3d:d5:a4:8c:c9:14:74:7e:17:df:
                    36:bf:ac:46:e8:7d:d4:d7:1f:a0:50:4a:ad:7c:7b:
                    d4:41:95:ca:48:6a:46:4b:49:56:1a:89:8f:7b:b8:
                    d1:71:b1:4c:c4:5b:cf:d0:f5:47:f2:4b:d9:e5:9d:
                    87:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F2:58:88:F2:66:44:C5:2E:C2:A2:88:5B:DF:CB:9F:5D:E7:59:BD
            X509v3 Authority Key Identifier:
                keyid:A5:06:53:69:60:B8:F0:3C:2A:EC:E0:E4:9F:54:2F:ED:01:0D:41:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/A506536960B8F03C2AECE0E49F542FED010D41E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A506536960B8F03C2AECE0E49F542FED010D41E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/323830343a336462383a3a2f33322d3430203d3e20323636353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3db8::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:52:88:19:1b:1a:d0:d0:75:e3:ba:07:70:79:15:9a:ff:a0:
         c2:29:b7:21:c1:21:dd:b4:f3:49:93:47:c4:35:bb:b1:b6:bd:
         3c:35:23:4a:cb:77:37:96:2e:97:91:f5:14:57:7d:87:23:87:
         5b:de:99:00:e6:65:38:69:f5:e1:a9:5a:0f:66:a0:a7:63:2c:
         99:12:5f:38:33:09:a9:c6:11:05:51:28:ae:ce:f4:43:bc:06:
         5c:c2:f6:28:45:57:bd:9a:64:d1:9b:0b:58:de:c1:c9:68:15:
         43:ce:01:27:ae:e9:d8:73:bc:53:10:b4:b6:fa:5d:dc:73:68:
         e3:7f:28:64:4e:d3:39:12:bd:d5:23:c1:17:3b:5b:1c:b0:40:
         77:20:07:58:e2:35:f7:57:89:6a:0c:ce:c5:ae:11:30:d4:cf:
         2b:bf:f4:3f:dc:23:b6:c4:fb:36:80:3c:94:cd:a7:41:34:10:
         83:68:fc:0f:25:57:7c:33:09:12:3d:da:71:94:15:a5:b6:72:
         59:13:a4:b7:25:a8:c8:98:12:c9:d9:a2:e6:34:47:df:76:9e:
         3f:25:4a:a7:fc:01:45:3b:61:7f:53:eb:c5:b8:f6:5d:91:b6:
         16:09:62:04:39:49:af:e5:c3:d4:60:ca:5d:24:94:5f:99:23:
         52:da:02:fa
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGZtrQb7U6y05pPkSFEYqUPgMJWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUwNjUzNjk2MEI4RjAzQzJBRUNFMEU0OUY1NDJGRUQw
MTBENDFFNDAeFw0yMzA4MTcxOTM0MTlaFw0yNDA4MTUxOTM5MTlaMDMxMTAvBgNV
BAMTKDM5RjI1ODg4RjI2NjQ0QzUyRUMyQTI4ODVCREZDQjlGNURFNzU5QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCraTR4rjJBE7XqMcnw3D4m1uqF
/df9DaWwUAFouUIqs/qYd3BRSfEZDU0gf4QYHP3ttPQorYrlmyXt6WGhoKS48wdq
Y1cOPBFdP9EX6+F3NNccIr1mXUnxyq0jqKZeEKbTgHQreUbfx50EB/OblHvoGxdu
XRFb3VIFkwpbV/tzo7+rxFeFGngbSd7/f5LHBltHYVMFFOp8TCUTdIugyC2hcbXR
zqm9XMraJw/bzjrZTuZ9nA7wD7jXosrUuJLLN1T/2l/OxNY8PdWkjMkUdH4X3za/
rEbofdTXH6BQSq18e9RBlcpIakZLSVYaiY97uNFxsUzEW8/Q9UfyS9nlnYfTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUOfJYiPJmRMUuwqKIW9/Ln13nWb0wHwYDVR0j
BBgwFoAUpQZTaWC48Dwq7ODkn1Qv7QENQeQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW9taG9RWnVuZUJDcUp0Vk1Od1Y2bUNYQmJjejVkN1lkQTVQYm5ib3ZK
RkMvMC9BNTA2NTM2OTYwQjhGMDNDMkFFQ0UwRTQ5RjU0MkZFRDAxMEQ0MUU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E1MDY1MzY5NjBCOEYwM0My
QUVDRTBFNDlGNTQyRkVEMDEwRDQxRTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FvbWhvUVp1bmVCQ3FKdFZNTndWNm1DWEJiY3o1ZDdZZEE1UGJuYm92SkZDLzAv
MzIzODMwMzQzYTMzNjQ2MjM4M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM2
MzUzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ9uDANBgkqhkiG9w0BAQsFAAOCAQEAEVKIGRsa
0NB147oHcHkVmv+gwim3IcEh3bTzSZNHxDW7sba9PDUjSst3N5Yul5H1FFd9hyOH
W96ZAOZlOGn14alaD2agp2MsmRJfODMJqcYRBVEors70Q7wGXML2KEVXvZpk0ZsL
WN7ByWgVQ84BJ67p2HO8UxC0tvpd3HNo438oZE7TORK91SPBFztbHLBAdyAHWOI1
91eJagzOxa4RMNTPK7/0P9wjtsT7NoA8lM2nQTQQg2j8DyVXfDMJEj3acZQVpbZy
WROktyWoyJgSydmi5jRH33aePyVKp/wBRTthf1Prxbj2XZG2FgliBDlJr+XD1GDK
XSSUX5kjUtoC+g==
-----END CERTIFICATE-----