Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/323830343a373264633a3a2f33322d3332203d3e20323730383830.roa
File:                     323830343a373264633a3a2f33322d3332203d3e20323730383830.roa (raw, json)
Hash identifier:          o5fvTSFqf/9eG1TNgv4Jm8Sd+b4xFklUrMGCYMdiWvk=
Subject key identifier:   75:6C:24:77:4E:DA:E5:B7:FD:E1:62:44:E6:1A:2A:FC:5F:6B:77:70
Certificate issuer:       /CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
Certificate serial:       71866AF6518BDABFCA27F4ADC16A6841B48ACFB1
Authority key identifier: 87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/323830343a373264633a3a2f33322d3332203d3e20323730383830.roa
Signing time:             Mon 04 Dec 2023 19:48:43 +0000
ROA not before:           Mon 04 Dec 2023 19:43:43 +0000
ROA not after:            Mon 02 Dec 2024 19:48:43 +0000
asID:                     270880
IP address blocks:        2804:72dc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:86:6a:f6:51:8b:da:bf:ca:27:f4:ad:c1:6a:68:41:b4:8a:cf:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
        Validity
            Not Before: Dec  4 19:43:43 2023 GMT
            Not After : Dec  2 19:48:43 2024 GMT
        Subject: CN=756C24774EDAE5B7FDE16244E61A2AFC5F6B7770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:35:9b:7b:b1:92:20:04:55:1d:93:19:fc:
                    be:5f:74:44:69:ad:ac:5f:3b:b4:9b:26:03:39:75:
                    42:35:1a:23:b9:71:30:f8:16:bf:9a:0a:8f:93:6f:
                    25:c1:8e:e1:b4:68:61:77:f5:b7:2d:44:47:a7:68:
                    41:f2:e3:a1:5d:88:2b:c9:26:4e:a9:4a:5a:7a:51:
                    07:f7:42:9c:f0:99:1d:bf:5c:6c:e8:13:e1:b5:1e:
                    6f:04:37:8e:bf:bf:3e:50:82:e6:61:21:65:4e:69:
                    bf:ba:05:8b:bd:c3:33:64:ea:97:5f:6f:3e:c3:89:
                    16:04:77:79:6e:62:20:32:ae:2c:21:89:9b:c4:50:
                    5d:6a:13:e9:4c:a2:b5:fc:8a:c4:fc:f3:49:e4:3d:
                    85:9b:b3:66:5e:f9:8e:b9:53:ec:29:79:8d:35:86:
                    8a:95:c2:30:cc:d2:09:17:8e:e6:03:19:80:64:dc:
                    ec:ad:76:8c:23:93:66:13:68:be:f0:43:3b:26:d4:
                    a1:8e:4a:36:13:e5:d1:be:5c:33:90:77:5a:a1:bd:
                    51:16:1e:56:ce:d1:46:92:1b:88:71:73:f3:6a:2c:
                    52:91:60:fa:65:5c:e2:15:c1:ec:a3:df:a1:2c:71:
                    67:62:c2:0e:c0:96:5e:dd:5c:05:dd:02:b5:f4:8f:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6C:24:77:4E:DA:E5:B7:FD:E1:62:44:E6:1A:2A:FC:5F:6B:77:70
            X509v3 Authority Key Identifier:
                keyid:87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/323830343a373264633a3a2f33322d3332203d3e20323730383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:f9:fe:3e:a7:fb:b8:29:96:d2:64:a5:7f:a3:83:83:69:0e:
         83:51:21:34:9b:32:a3:2e:74:b8:7b:57:94:1d:71:2a:5f:0b:
         09:9e:f6:9f:f6:1d:5e:db:a9:70:d2:07:de:0c:ff:c0:52:16:
         47:c9:09:19:49:24:f5:79:a6:11:97:7b:e0:a7:c6:a4:2b:56:
         f0:fe:3e:d1:93:93:7c:07:fb:ac:00:6e:89:79:12:d6:2e:9f:
         4e:60:a1:39:37:c1:e7:6b:91:7f:0f:f1:d2:1f:d9:06:a7:42:
         e8:ff:1b:a6:82:41:ce:32:00:72:b8:36:ea:3e:c6:5b:e7:e7:
         70:a0:86:2d:80:aa:e8:cf:d4:5e:bb:dd:3d:17:39:f9:6e:1d:
         bd:a2:ad:31:15:e1:2b:eb:02:d2:ae:2b:dd:83:a8:0d:c9:6d:
         11:6b:37:fd:17:37:ef:9f:f4:23:07:e5:cd:e3:08:f2:2e:76:
         1e:fd:43:8c:e8:3a:0d:c1:40:ea:4c:67:f2:63:6e:7c:e8:a5:
         58:29:5c:d8:60:6b:b7:fc:25:ad:35:2d:64:3f:cb:ec:da:e0:
         24:8b:d3:94:c1:14:8e:aa:b6:ce:8a:d3:50:0e:49:5e:96:3a:
         fa:6d:48:0e:35:d4:47:3c:c9:c0:b8:00:39:51:84:ed:de:f9:
         9c:4f:3c:58
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcYZq9lGL2r/KJ/StwWpoQbSKz7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBQUVDQkMzNDI2RDM4MTI1NjI5OUMyRDZFN0Y2RkM2
MkM4RURFQzAeFw0yMzEyMDQxOTQzNDNaFw0yNDEyMDIxOTQ4NDNaMDMxMTAvBgNV
BAMTKDc1NkMyNDc3NEVEQUU1QjdGREUxNjI0NEU2MUEyQUZDNUY2Qjc3NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvDWbe7GSIARVHZMZ/L5fdERp
raxfO7SbJgM5dUI1GiO5cTD4Fr+aCo+TbyXBjuG0aGF39bctREenaEHy46FdiCvJ
Jk6pSlp6UQf3QpzwmR2/XGzoE+G1Hm8EN46/vz5QguZhIWVOab+6BYu9wzNk6pdf
bz7DiRYEd3luYiAyriwhiZvEUF1qE+lMorX8isT880nkPYWbs2Ze+Y65U+wpeY01
hoqVwjDM0gkXjuYDGYBk3Oytdowjk2YTaL7wQzsm1KGOSjYT5dG+XDOQd1qhvVEW
HlbO0UaSG4hxc/NqLFKRYPplXOIVweyj36EscWdiwg7All7dXAXdArX0j3snAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUdWwkd07a5bf94WJE5hoq/F9rd3AwHwYDVR0j
BBgwFoAUh6rsvDQm04ElYpnC1uf2/GLI7ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzZheGE0MktrVHVzTjVZWmpiam1ITXg2UGoxcEcyYmNtVlhuZ2NHZ3E5
QjYvMC84N0FBRUNCQzM0MjZEMzgxMjU2Mjk5QzJENkU3RjZGQzYyQzhFREVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg3QUFFQ0JDMzQyNkQzODEy
NTYyOTlDMkQ2RTdGNkZDNjJDOEVERUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c2YXhhNDJLa1R1c041WVpqYmptSE14NlBqMXBHMmJjbVZYbmdjR2dxOUI2LzAv
MzIzODMwMzQzYTM3MzI2NDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzgzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARy3DANBgkqhkiG9w0BAQsFAAOCAQEAqvn+Pqf7
uCmW0mSlf6ODg2kOg1EhNJsyoy50uHtXlB1xKl8LCZ72n/YdXtupcNIH3gz/wFIW
R8kJGUkk9XmmEZd74KfGpCtW8P4+0ZOTfAf7rABuiXkS1i6fTmChOTfB52uRfw/x
0h/ZBqdC6P8bpoJBzjIAcrg26j7GW+fncKCGLYCq6M/UXrvdPRc5+W4dvaKtMRXh
K+sC0q4r3YOoDcltEWs3/Rc375/0IwflzeMI8i52Hv1DjOg6DcFA6kxn8mNufOil
WClc2GBrt/wlrTUtZD/L7NrgJIvTlMEUjqq2zorTUA5JXpY6+m1IDjXURzzJwLgA
OVGE7d75nE88WA==
-----END CERTIFICATE-----