Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/323830343a343839303a3a2f33322d313238203d3e20323637313239.roa
File:                     323830343a343839303a3a2f33322d313238203d3e20323637313239.roa (raw, json)
Hash identifier:          zU5FqM9kiL/U2xPy9pWJTqnHyG3G2UXPXf//eoWKJ/I=
Subject key identifier:   F9:C5:A1:8B:60:7A:CD:E2:71:23:6E:CD:74:A3:DE:E4:73:53:9B:43
Certificate issuer:       /CN=1A631EACEB568194FA26B00FCBE133626298AF8A
Certificate serial:       38CDD9DAEAF741D7FEC2C5F22314213EB574B0F3
Authority key identifier: 1A:63:1E:AC:EB:56:81:94:FA:26:B0:0F:CB:E1:33:62:62:98:AF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A631EACEB568194FA26B00FCBE133626298AF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/323830343a343839303a3a2f33322d313238203d3e20323637313239.roa
Signing time:             Tue 01 Aug 2023 19:51:02 +0000
ROA not before:           Tue 01 Aug 2023 19:46:02 +0000
ROA not after:            Tue 30 Jul 2024 19:51:02 +0000
asID:                     267129
IP address blocks:        2804:4890::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:cd:d9:da:ea:f7:41:d7:fe:c2:c5:f2:23:14:21:3e:b5:74:b0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A631EACEB568194FA26B00FCBE133626298AF8A
        Validity
            Not Before: Aug  1 19:46:02 2023 GMT
            Not After : Jul 30 19:51:02 2024 GMT
        Subject: CN=F9C5A18B607ACDE271236ECD74A3DEE473539B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:98:cd:77:e3:28:bc:66:2a:2c:77:f5:4b:63:
                    04:a3:d6:83:1a:01:9a:58:d5:a0:a5:b8:2d:7f:6c:
                    6f:23:09:17:ef:e8:77:83:21:b9:97:df:ca:3f:29:
                    c2:23:50:89:08:10:0c:a4:2e:0a:ed:6e:b5:0f:67:
                    51:c8:ce:24:c0:01:44:c9:aa:67:62:bc:59:f9:7e:
                    7d:58:d3:bd:48:87:68:f5:48:36:8a:f4:43:ce:17:
                    41:fb:e3:1a:62:26:8a:ba:b6:cf:ee:09:28:3c:fe:
                    ac:b2:44:14:8c:82:34:10:db:58:55:4a:35:e5:f6:
                    1a:3d:c7:9c:22:3a:e1:c6:a0:58:a5:18:3d:ea:15:
                    92:d0:71:7c:8b:13:66:d1:fc:0e:71:b9:91:95:d2:
                    28:f3:89:d5:36:92:9f:f2:40:98:7c:82:e0:aa:3c:
                    ba:61:50:b3:29:7d:08:fd:bb:8e:7b:e9:50:d8:44:
                    b8:88:8a:3f:6f:14:3e:ea:3f:14:86:68:9a:ca:e5:
                    be:5a:20:c5:16:ad:97:2c:2a:03:98:24:ff:84:3e:
                    2a:10:ac:13:2a:b8:6a:90:de:1f:74:e6:c0:94:a2:
                    d4:26:bf:20:15:9a:62:e9:87:49:e6:01:b3:c6:db:
                    c7:6e:f6:87:d4:45:32:9c:34:fe:d7:ca:b3:ce:ce:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C5:A1:8B:60:7A:CD:E2:71:23:6E:CD:74:A3:DE:E4:73:53:9B:43
            X509v3 Authority Key Identifier:
                keyid:1A:63:1E:AC:EB:56:81:94:FA:26:B0:0F:CB:E1:33:62:62:98:AF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/1A631EACEB568194FA26B00FCBE133626298AF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A631EACEB568194FA26B00FCBE133626298AF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/323830343a343839303a3a2f33322d313238203d3e20323637313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4890::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:89:50:96:4b:55:31:dd:af:fb:21:c7:ff:a0:5a:44:d7:bc:
         9f:8f:86:b9:a2:67:23:37:b9:2d:19:3a:0c:77:6e:62:94:53:
         ea:9f:5f:f4:c3:df:c7:e3:61:10:07:47:a2:c5:88:81:dc:a7:
         c0:7b:43:a3:15:d8:a7:e3:47:b0:1d:88:92:27:19:24:04:2f:
         f4:96:67:a0:05:60:83:61:3a:f4:45:c4:46:a5:16:ec:96:aa:
         47:06:b7:e8:b8:16:de:d0:10:a1:20:61:c4:4b:62:32:31:f1:
         4f:10:f7:66:c8:8d:e5:ed:ef:9f:e6:e7:a2:62:c9:28:25:4c:
         ee:ec:9f:da:d1:5c:59:ee:1f:cd:16:49:75:01:51:0f:28:69:
         8b:30:5f:2e:52:84:bd:2f:37:5b:5a:03:ec:f3:43:ef:67:53:
         9e:c5:a4:71:43:09:34:e0:92:5b:ab:65:cf:3a:f6:56:03:d5:
         5d:d1:9b:af:3c:66:da:16:cf:47:4a:f2:86:8d:07:a7:43:0a:
         58:13:78:ae:80:c8:56:21:8c:4b:c4:48:83:41:b7:12:bb:db:
         28:fd:a4:04:63:7f:41:07:d8:17:58:48:e3:eb:67:fc:9a:dd:
         48:ca:0c:8d:8a:d4:c5:26:aa:58:52:d9:95:87:08:e4:26:8f:
         f2:93:05:bc
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUOM3Z2ur3Qdf+wsXyIxQhPrV0sPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE2MzFFQUNFQjU2ODE5NEZBMjZCMDBGQ0JFMTMzNjI2
Mjk4QUY4QTAeFw0yMzA4MDExOTQ2MDJaFw0yNDA3MzAxOTUxMDJaMDMxMTAvBgNV
BAMTKEY5QzVBMThCNjA3QUNERTI3MTIzNkVDRDc0QTNERUU0NzM1MzlCNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmM134yi8Ziosd/VLYwSj1oMa
AZpY1aCluC1/bG8jCRfv6HeDIbmX38o/KcIjUIkIEAykLgrtbrUPZ1HIziTAAUTJ
qmdivFn5fn1Y071Ih2j1SDaK9EPOF0H74xpiJoq6ts/uCSg8/qyyRBSMgjQQ21hV
SjXl9ho9x5wiOuHGoFilGD3qFZLQcXyLE2bR/A5xuZGV0ijzidU2kp/yQJh8guCq
PLphULMpfQj9u4576VDYRLiIij9vFD7qPxSGaJrK5b5aIMUWrZcsKgOYJP+EPioQ
rBMquGqQ3h905sCUotQmvyAVmmLph0nmAbPG28du9ofURTKcNP7XyrPOzvItAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU+cWhi2B6zeJxI27NdKPe5HNTm0MwHwYDVR0j
BBgwFoAUGmMerOtWgZT6JrAPy+EzYmKYr4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0F0cHB6a3hEaFBwcVNZNFo3RWZvQUpRdjl2VkVjWWFtakpHMlFacmVw
cFgvMC8xQTYzMUVBQ0VCNTY4MTk0RkEyNkIwMEZDQkUxMzM2MjYyOThBRjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFBNjMxRUFDRUI1NjgxOTRG
QTI2QjAwRkNCRTEzMzYyNjI5OEFGOEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NBdHBwemt4RGhQcHFTWTRaN0Vmb0FKUXY5dlZFY1lhbWpKRzJRWnJlcHBYLzAv
MzIzODMwMzQzYTM0MzgzOTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMTMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEiQMA0GCSqGSIb3DQEBCwUAA4IBAQBeiVCW
S1Ux3a/7Icf/oFpE17yfj4a5omcjN7ktGToMd25ilFPqn1/0w9/H42EQB0eixYiB
3KfAe0OjFdin40ewHYiSJxkkBC/0lmegBWCDYTr0RcRGpRbslqpHBrfouBbe0BCh
IGHES2IyMfFPEPdmyI3l7e+f5ueiYskoJUzu7J/a0VxZ7h/NFkl1AVEPKGmLMF8u
UoS9LzdbWgPs80PvZ1OexaRxQwk04JJbq2XPOvZWA9Vd0ZuvPGbaFs9HSvKGjQen
QwpYE3iugMhWIYxLxEiDQbcSu9so/aQEY39BB9gXWEjj62f8mt1IygyNitTFJqpY
UtmVhwjkJo/ykwW8
-----END CERTIFICATE-----