Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/323830343a323132383a3a2f33322d3332203d3e20323634353339.roa
File:                     323830343a323132383a3a2f33322d3332203d3e20323634353339.roa (raw, json)
Hash identifier:          hIAo5aMMX+iw5N90vq/uILr/tCr29p5EzPKmNdzl9dk=
Subject key identifier:   3B:A1:D8:82:C7:2E:5D:1B:C1:C7:37:DE:F8:C0:88:AA:B2:DE:7C:0F
Certificate issuer:       /CN=F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4
Certificate serial:       481260D48F1EADBA30893B55516EFFBB7BDD089F
Authority key identifier: F5:9D:BF:BA:13:85:F6:63:D3:E9:DD:D0:95:7D:E8:E7:6B:CD:71:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/323830343a323132383a3a2f33322d3332203d3e20323634353339.roa
Signing time:             Thu 04 Apr 2024 19:18:09 +0000
ROA not before:           Thu 04 Apr 2024 19:13:09 +0000
ROA not after:            Thu 03 Apr 2025 19:18:09 +0000
asID:                     264539
IP address blocks:        2804:2128::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:12:60:d4:8f:1e:ad:ba:30:89:3b:55:51:6e:ff:bb:7b:dd:08:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4
        Validity
            Not Before: Apr  4 19:13:09 2024 GMT
            Not After : Apr  3 19:18:09 2025 GMT
        Subject: CN=3BA1D882C72E5D1BC1C737DEF8C088AAB2DE7C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:0b:70:91:1a:5e:cf:2b:b8:b0:65:d0:91:
                    41:10:2b:81:63:3a:41:ea:d9:43:c9:e5:8c:c3:bf:
                    ff:90:41:ab:de:fe:86:05:7d:f2:e6:15:fa:9c:7e:
                    94:eb:78:1e:4b:4c:f2:9c:43:2f:19:d5:92:d2:5b:
                    e8:29:3d:1e:9a:c2:91:aa:44:7a:f0:f5:b7:ad:9b:
                    1b:97:e9:61:0d:b5:f8:a7:6c:29:eb:c9:89:8c:06:
                    e1:00:1c:e7:e4:dd:a9:96:7c:e7:7c:42:87:85:b8:
                    a5:db:f3:cf:83:8c:72:79:7f:3b:b3:7b:2c:39:51:
                    9a:db:17:f6:71:1e:ea:f8:75:c7:db:eb:62:a3:79:
                    01:12:2f:09:4b:3d:59:7b:0a:a7:87:1a:78:90:37:
                    6d:ff:78:72:24:48:21:7e:c5:4e:2b:a4:23:93:6c:
                    c4:da:1a:e3:91:92:1a:5b:fe:eb:df:15:f0:cb:ea:
                    0d:32:1f:d8:84:aa:30:9f:07:06:a8:dc:6b:a5:e1:
                    e6:5f:b5:3a:bd:3f:a0:3e:63:50:c9:ea:bc:79:67:
                    7a:25:fa:20:c0:dc:0b:35:af:03:a2:d9:ab:6a:87:
                    dd:c5:6a:e8:98:97:44:ee:e0:37:cb:48:a2:05:6c:
                    fc:ed:18:7c:18:cc:2f:83:a6:23:7f:f8:82:1c:54:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A1:D8:82:C7:2E:5D:1B:C1:C7:37:DE:F8:C0:88:AA:B2:DE:7C:0F
            X509v3 Authority Key Identifier:
                keyid:F5:9D:BF:BA:13:85:F6:63:D3:E9:DD:D0:95:7D:E8:E7:6B:CD:71:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/323830343a323132383a3a2f33322d3332203d3e20323634353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2128::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:bf:3a:49:07:80:84:0b:0b:61:6a:f0:39:ff:1f:4a:80:40:
         0b:ee:ff:8c:4d:6a:b1:44:2b:d5:da:3a:2c:6f:d5:9a:0d:85:
         28:8d:1e:6f:3d:c1:34:28:e0:fc:e1:93:10:0c:6a:f1:14:a8:
         5f:ff:07:67:5c:41:62:50:b3:81:29:88:51:5b:5b:31:8e:34:
         79:2f:b3:c0:c2:c3:60:70:cb:1b:cc:fc:06:bf:b5:88:19:a0:
         3e:2a:cd:b5:b0:16:d1:82:25:ae:f4:21:fe:99:ff:38:1a:a8:
         f4:d2:ab:75:1b:b4:dd:9e:88:92:b9:e7:d9:08:08:5e:58:e3:
         11:a6:8e:38:3a:6a:2a:78:1b:d2:1f:04:41:4a:63:9d:c1:66:
         d4:38:2e:1a:4b:f6:61:12:7c:c8:54:e4:92:40:82:c7:2c:65:
         39:54:58:8e:c9:9e:f0:5b:01:f3:32:cf:ab:90:38:31:a3:b2:
         9a:56:a5:59:f6:50:18:50:83:47:75:4e:ef:b5:bf:51:f5:d3:
         af:7d:34:e5:fc:0e:52:77:a1:18:22:f9:0b:4c:2c:08:f8:16:
         b1:f1:6a:07:19:f8:f4:8e:4b:1c:4f:ec:7d:e1:a3:ec:72:9c:
         43:bb:87:98:08:92:b3:38:df:bf:fc:0b:50:f5:a5:a0:69:0d:
         15:82:a3:52
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSBJg1I8erbowiTtVUW7/u3vdCJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU5REJGQkExMzg1RjY2M0QzRTlEREQwOTU3REU4RTc2
QkNENzFGNDAeFw0yNDA0MDQxOTEzMDlaFw0yNTA0MDMxOTE4MDlaMDMxMTAvBgNV
BAMTKDNCQTFEODgyQzcyRTVEMUJDMUM3MzdERUY4QzA4OEFBQjJERTdDMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTuQtwkRpezyu4sGXQkUEQK4Fj
OkHq2UPJ5YzDv/+QQave/oYFffLmFfqcfpTreB5LTPKcQy8Z1ZLSW+gpPR6awpGq
RHrw9betmxuX6WENtfinbCnryYmMBuEAHOfk3amWfOd8QoeFuKXb88+DjHJ5fzuz
eyw5UZrbF/ZxHur4dcfb62KjeQESLwlLPVl7CqeHGniQN23/eHIkSCF+xU4rpCOT
bMTaGuORkhpb/uvfFfDL6g0yH9iEqjCfBwao3Gul4eZftTq9P6A+Y1DJ6rx5Z3ol
+iDA3As1rwOi2atqh93FauiYl0Tu4DfLSKIFbPztGHwYzC+DpiN/+IIcVDDPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUO6HYgscuXRvBxzfe+MCIqrLefA8wHwYDVR0j
BBgwFoAU9Z2/uhOF9mPT6d3QlX3o52vNcfQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXlWVHJwVjRkcHJtRktFWHVwYUxOanhIZDl6REIzc0hQUjIyZ0U0UW1w
ZWgvMS9GNTlEQkZCQTEzODVGNjYzRDNFOURERDA5NTdERThFNzZCQ0Q3MUY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1OURCRkJBMTM4NUY2NjNE
M0U5REREMDk1N0RFOEU3NkJDRDcxRjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F5VlRycFY0ZHBybUZLRVh1cGFMTmp4SGQ5ekRCM3NIUFIyMmdFNFFtcGVoLzEv
MzIzODMwMzQzYTMyMzEzMjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzUzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQhKDANBgkqhkiG9w0BAQsFAAOCAQEAh786SQeA
hAsLYWrwOf8fSoBAC+7/jE1qsUQr1do6LG/Vmg2FKI0ebz3BNCjg/OGTEAxq8RSo
X/8HZ1xBYlCzgSmIUVtbMY40eS+zwMLDYHDLG8z8Br+1iBmgPirNtbAW0YIlrvQh
/pn/OBqo9NKrdRu03Z6Ikrnn2QgIXljjEaaOODpqKngb0h8EQUpjncFm1DguGkv2
YRJ8yFTkkkCCxyxlOVRYjsme8FsB8zLPq5A4MaOymlalWfZQGFCDR3VO77W/UfXT
r3005fwOUnehGCL5C0wsCPgWsfFqBxn49I5LHE/sfeGj7HKcQ7uHmAiSszjfv/wL
UPWloGkNFYKjUg==
-----END CERTIFICATE-----