Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a383030303a3a2f33332d3333203d3e20323636363131.roa
File:                     323830343a336561343a383030303a3a2f33332d3333203d3e20323636363131.roa (raw, json)
Hash identifier:          WUe4rgS3F3xdAfJ0uQOiwy19Q/1poJYJfMyP6O/jQgk=
Subject key identifier:   EB:26:90:E2:A2:1E:EC:FC:4A:59:DA:24:7A:AD:59:62:71:77:0E:9B
Certificate issuer:       /CN=128E3DF9D967032A562E804D2E781DB1DC454A79
Certificate serial:       4C3ECCB5BDAE9764B69FA744F784F661E63ABCAE
Authority key identifier: 12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a383030303a3a2f33332d3333203d3e20323636363131.roa
Signing time:             Thu 25 Jan 2024 00:59:10 +0000
ROA not before:           Thu 25 Jan 2024 00:54:10 +0000
ROA not after:            Thu 23 Jan 2025 00:59:10 +0000
asID:                     266611
IP address blocks:        2804:3ea4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3e:cc:b5:bd:ae:97:64:b6:9f:a7:44:f7:84:f6:61:e6:3a:bc:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128E3DF9D967032A562E804D2E781DB1DC454A79
        Validity
            Not Before: Jan 25 00:54:10 2024 GMT
            Not After : Jan 23 00:59:10 2025 GMT
        Subject: CN=EB2690E2A21EECFC4A59DA247AAD596271770E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:66:07:75:65:33:3b:2b:45:b9:16:40:80:1a:
                    9f:a3:36:8d:b5:f4:cd:97:a3:d4:45:e9:20:d9:a4:
                    8c:48:b4:7c:93:58:9d:57:17:b5:da:1d:e3:99:6d:
                    6c:3e:02:ab:47:68:0a:16:9f:65:9d:94:79:ba:42:
                    8c:22:95:fa:d3:24:54:1f:a6:eb:ff:ea:64:ca:cd:
                    ad:57:7f:9c:d6:1d:02:cb:0c:7e:a7:9a:34:ba:ea:
                    df:ab:dd:59:9a:2c:32:11:de:01:f6:52:6d:70:45:
                    9b:1e:16:74:57:b9:a8:f8:6e:67:33:5c:a4:11:63:
                    d2:f9:53:47:53:3a:f3:50:6e:64:34:0c:b7:cb:c3:
                    e8:0a:94:38:15:16:f8:c6:28:74:0f:66:7a:fe:bf:
                    cb:ec:a4:92:0f:23:d9:20:03:48:a8:9c:fa:a8:91:
                    42:70:fc:7b:75:1c:84:b2:f3:64:06:29:f8:4c:27:
                    33:d0:05:ad:99:58:31:28:8e:94:73:77:5e:7a:f2:
                    af:59:48:91:c7:8f:30:3d:78:a8:ba:4a:a4:33:ff:
                    ef:f0:81:62:20:c3:96:a4:6f:5e:4e:60:7e:87:55:
                    fa:6d:3d:0e:08:24:07:2a:68:73:a8:27:8f:ce:1b:
                    84:b5:9b:b5:f1:16:eb:f5:15:95:d8:2e:58:9d:74:
                    dc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:26:90:E2:A2:1E:EC:FC:4A:59:DA:24:7A:AD:59:62:71:77:0E:9B
            X509v3 Authority Key Identifier:
                keyid:12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/128E3DF9D967032A562E804D2E781DB1DC454A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a383030303a3a2f33332d3333203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a9:ab:b7:2d:eb:40:4f:04:61:4c:5b:89:2d:f4:8d:45:a1:74:
         48:0f:fb:5f:bf:a3:87:03:10:b3:19:3b:b5:07:84:bf:71:8b:
         27:aa:27:20:b8:2b:0c:1a:72:c4:75:30:00:20:53:27:9b:55:
         1f:b2:3d:34:0f:fb:a8:3c:d0:0b:56:fc:2c:d3:6c:f8:47:46:
         a7:c2:8e:7a:6d:85:0b:62:63:20:10:42:6a:33:0b:7f:2c:09:
         9e:f7:a5:b3:9e:58:51:e7:52:0b:ab:90:bd:0c:89:14:b7:be:
         2c:7a:ba:2e:86:a9:9e:8d:0d:35:58:ca:d9:83:79:bb:be:4b:
         a2:31:c7:c2:0d:2b:9a:cd:fe:fd:95:e3:d2:85:a3:fa:0a:08:
         54:6a:8e:40:fe:43:26:b5:09:3b:07:b7:90:bf:87:5e:11:db:
         e2:b6:68:75:86:91:b7:d8:d6:40:4d:48:fe:8e:b3:11:f8:f2:
         c4:15:fa:49:5d:3f:80:78:d5:49:2f:6c:49:bd:2f:7c:9f:12:
         24:3b:74:a0:54:1e:84:7c:7b:9f:3b:f6:26:b1:ae:ff:7f:3c:
         7a:7c:03:36:0e:85:c2:3f:af:b4:a0:69:07:0f:95:03:d6:86:
         3b:b9:54:11:f8:64:e9:92:cd:7b:3a:b1:cd:c7:e2:15:6d:42:
         31:d0:eb:a0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTD7Mtb2ul2S2n6dE94T2YeY6vK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4RTNERjlEOTY3MDMyQTU2MkU4MDREMkU3ODFEQjFE
QzQ1NEE3OTAeFw0yNDAxMjUwMDU0MTBaFw0yNTAxMjMwMDU5MTBaMDMxMTAvBgNV
BAMTKEVCMjY5MEUyQTIxRUVDRkM0QTU5REEyNDdBQUQ1OTYyNzE3NzBFOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpZgd1ZTM7K0W5FkCAGp+jNo21
9M2Xo9RF6SDZpIxItHyTWJ1XF7XaHeOZbWw+AqtHaAoWn2WdlHm6QowilfrTJFQf
puv/6mTKza1Xf5zWHQLLDH6nmjS66t+r3VmaLDIR3gH2Um1wRZseFnRXuaj4bmcz
XKQRY9L5U0dTOvNQbmQ0DLfLw+gKlDgVFvjGKHQPZnr+v8vspJIPI9kgA0ionPqo
kUJw/Ht1HISy82QGKfhMJzPQBa2ZWDEojpRzd1568q9ZSJHHjzA9eKi6SqQz/+/w
gWIgw5akb15OYH6HVfptPQ4IJAcqaHOoJ4/OG4S1m7XxFuv1FZXYLliddNzNAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU6yaQ4qIe7PxKWdokeq1ZYnF3DpswHwYDVR0j
BBgwFoAUEo49+dlnAypWLoBNLngdsdxFSnkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3NKZWJjQm5LVlY3TEpXckVYZ015ZDU0NEp2b2ZKcEVxUDQ1OEZvU1dZ
SmUvMC8xMjhFM0RGOUQ5NjcwMzJBNTYyRTgwNEQyRTc4MURCMURDNDU0QTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyOEUzREY5RDk2NzAzMkE1
NjJFODA0RDJFNzgxREIxREM0NTRBNzkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dzSmViY0JuS1ZWN0xKV3JFWGdNeWQ1NDRKdm9mSnBFcVA0NThGb1NXWUplLzAv
MzIzODMwMzQzYTMzNjU2MTM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNjM2MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEPqSAMA0GCSqGSIb3DQEBCwUA
A4IBAQCpq7ct60BPBGFMW4kt9I1FoXRID/tfv6OHAxCzGTu1B4S/cYsnqicguCsM
GnLEdTAAIFMnm1Ufsj00D/uoPNALVvws02z4R0anwo56bYULYmMgEEJqMwt/LAme
96WznlhR51ILq5C9DIkUt74serouhqmejQ01WMrZg3m7vkuiMcfCDSuazf79lePS
haP6CghUao5A/kMmtQk7B7eQv4deEdvitmh1hpG32NZATUj+jrMR+PLEFfpJXT+A
eNVJL2xJvS98nxIkO3SgVB6EfHufO/Ymsa7/fzx6fAM2DoXCP6+0oGkHD5UD1oY7
uVQR+GTpks17OrHNx+IVbUIx0Oug
-----END CERTIFICATE-----