Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/323830343a3731633a3a2f33322d3438203d3e203533303830.roa
File:                     323830343a3731633a3a2f33322d3438203d3e203533303830.roa (raw, json)
Hash identifier:          GMCYrRu0e9+HDoSyTCUAHcKk2d9MxpoWO4LeGvV7mZs=
Subject key identifier:   C3:4D:8F:5C:AE:F2:1B:11:90:E4:D6:2D:41:DF:C8:6C:44:2A:CF:F3
Certificate issuer:       /CN=AA9BC515E383756EA5295CF845F5D0BB08BCEA70
Certificate serial:       21ABA6669D5D05785F81F103BEB85F3E51DCF9DD
Authority key identifier: AA:9B:C5:15:E3:83:75:6E:A5:29:5C:F8:45:F5:D0:BB:08:BC:EA:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA9BC515E383756EA5295CF845F5D0BB08BCEA70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/323830343a3731633a3a2f33322d3438203d3e203533303830.roa
Signing time:             Fri 03 May 2024 20:04:13 +0000
ROA not before:           Fri 03 May 2024 19:59:13 +0000
ROA not after:            Fri 02 May 2025 20:04:13 +0000
asID:                     53080
IP address blocks:        2804:71c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ab:a6:66:9d:5d:05:78:5f:81:f1:03:be:b8:5f:3e:51:dc:f9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA9BC515E383756EA5295CF845F5D0BB08BCEA70
        Validity
            Not Before: May  3 19:59:13 2024 GMT
            Not After : May  2 20:04:13 2025 GMT
        Subject: CN=C34D8F5CAEF21B1190E4D62D41DFC86C442ACFF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:d7:e7:26:69:b7:48:e7:c7:17:0b:2f:53:
                    d2:5a:82:9f:f1:9d:5e:44:9f:ce:43:95:84:2e:df:
                    83:e5:37:aa:ee:25:23:58:77:b5:d9:cb:a2:58:52:
                    b5:02:e0:a8:51:97:aa:f9:44:05:83:d7:f4:ed:38:
                    cc:0a:ae:4b:c9:5c:9b:03:6a:dd:e0:6d:09:dc:2a:
                    d4:cb:a4:70:70:c1:3f:b6:81:c5:da:0f:9b:31:81:
                    05:45:fe:93:4a:d3:ea:44:c8:5c:b4:a7:61:ad:ab:
                    90:83:13:1a:de:68:38:be:29:14:b8:56:6d:14:33:
                    37:87:06:e3:fd:17:ab:b1:a3:bd:9b:d8:12:7e:3d:
                    5c:5b:ff:ab:56:81:25:7c:06:32:96:00:33:45:28:
                    11:ad:37:8d:3a:ef:6b:aa:29:4a:cc:ac:cb:ea:f8:
                    1f:36:24:fe:f6:ff:52:96:23:a5:93:1c:64:02:64:
                    0c:5c:b9:04:89:67:8a:85:2a:a0:36:69:ef:5e:8b:
                    91:5e:4d:ab:6e:e2:18:b7:18:ee:61:21:f6:c5:b1:
                    75:99:62:de:58:c0:9b:40:da:c1:d9:96:e9:62:07:
                    e2:82:82:2f:5f:03:46:bc:c7:9b:1a:1f:7b:8b:75:
                    04:c8:b9:a1:17:47:ad:c5:fa:e2:9e:72:9c:26:ca:
                    55:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4D:8F:5C:AE:F2:1B:11:90:E4:D6:2D:41:DF:C8:6C:44:2A:CF:F3
            X509v3 Authority Key Identifier:
                keyid:AA:9B:C5:15:E3:83:75:6E:A5:29:5C:F8:45:F5:D0:BB:08:BC:EA:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/AA9BC515E383756EA5295CF845F5D0BB08BCEA70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA9BC515E383756EA5295CF845F5D0BB08BCEA70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/323830343a3731633a3a2f33322d3438203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:c0:3c:f2:da:22:a2:6e:eb:81:f2:b2:d3:7f:07:ae:24:a2:
         81:ee:8c:36:46:77:68:98:24:93:85:03:93:82:71:36:47:5e:
         f6:ff:b0:78:e5:a9:0a:df:f1:7c:8b:60:ad:45:cc:0c:b3:f7:
         f0:b0:35:a1:7d:29:9d:34:77:02:37:73:85:b7:d5:c5:f7:3b:
         97:5f:fa:83:31:f6:43:b5:92:d4:e0:7d:7c:da:51:11:a0:ad:
         71:72:53:bf:3d:ae:f3:ff:3f:51:de:27:a9:af:2f:c5:b7:67:
         2e:41:0f:4c:44:6b:a3:6e:8e:00:a8:b8:8a:8f:41:9f:7c:33:
         0e:53:8b:55:d8:20:3a:f2:4d:f8:69:f3:e6:55:4a:82:00:fc:
         f0:56:25:8e:a4:92:bd:ac:77:68:0e:11:91:fc:b7:09:d6:bb:
         fd:9d:5e:b2:f9:33:02:cf:08:f4:27:22:fb:fb:31:69:83:3d:
         ba:04:3f:e6:6a:cb:0a:3d:4f:6a:93:5a:f9:1a:ec:e3:17:26:
         d4:5a:cb:62:3a:e2:7f:cc:03:cc:96:d0:fa:6e:72:3d:82:e0:
         e0:06:e3:da:95:96:0c:ba:70:b4:0c:96:30:bd:37:ab:89:b7:
         b6:ff:68:17:87:4f:11:cb:24:89:de:e9:c4:7a:1f:92:d0:d3:
         79:6b:d5:02
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUIaumZp1dBXhfgfEDvrhfPlHc+d0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE5QkM1MTVFMzgzNzU2RUE1Mjk1Q0Y4NDVGNUQwQkIw
OEJDRUE3MDAeFw0yNDA1MDMxOTU5MTNaFw0yNTA1MDIyMDA0MTNaMDMxMTAvBgNV
BAMTKEMzNEQ4RjVDQUVGMjFCMTE5MEU0RDYyRDQxREZDODZDNDQyQUNGRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuFtfnJmm3SOfHFwsvU9Jagp/x
nV5En85DlYQu34PlN6ruJSNYd7XZy6JYUrUC4KhRl6r5RAWD1/TtOMwKrkvJXJsD
at3gbQncKtTLpHBwwT+2gcXaD5sxgQVF/pNK0+pEyFy0p2Gtq5CDExreaDi+KRS4
Vm0UMzeHBuP9F6uxo72b2BJ+PVxb/6tWgSV8BjKWADNFKBGtN40672uqKUrMrMvq
+B82JP72/1KWI6WTHGQCZAxcuQSJZ4qFKqA2ae9ei5FeTatu4hi3GO5hIfbFsXWZ
Yt5YwJtA2sHZluliB+KCgi9fA0a8x5saH3uLdQTIuaEXR63F+uKecpwmylUhAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUw02PXK7yGxGQ5NYtQd/IbEQqz/MwHwYDVR0j
BBgwFoAUqpvFFeODdW6lKVz4RfXQuwi86nAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk43cUp4bW83ZUdDMWozNThROFJCM25YQ0pYMzJFWU00Qng0Q2E2Qkt5
cFUvMS9BQTlCQzUxNUUzODM3NTZFQTUyOTVDRjg0NUY1RDBCQjA4QkNFQTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBOUJDNTE1RTM4Mzc1NkVB
NTI5NUNGODQ1RjVEMEJCMDhCQ0VBNzAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JON3FKeG1vN2VHQzFqMzU4UThSQjNuWENKWDMyRVlNNEJ4NENhNkJLeXBVLzEv
MzIzODMwMzQzYTM3MzE2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzMzMDM4
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAccMA0GCSqGSIb3DQEBCwUAA4IBAQCNwDzy2iKibuuB
8rLTfweuJKKB7ow2RndomCSThQOTgnE2R172/7B45akK3/F8i2CtRcwMs/fwsDWh
fSmdNHcCN3OFt9XF9zuXX/qDMfZDtZLU4H182lERoK1xclO/Pa7z/z9R3iepry/F
t2cuQQ9MRGujbo4AqLiKj0GffDMOU4tV2CA68k34afPmVUqCAPzwViWOpJK9rHdo
DhGR/LcJ1rv9nV6y+TMCzwj0JyL7+zFpgz26BD/massKPU9qk1r5GuzjFybUWsti
OuJ/zAPMltD6bnI9guDgBuPalZYMunC0DJYwvTeribe2/2gXh08RyySJ3unEeh+S
0NN5a9UC
-----END CERTIFICATE-----