Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/323830343a333164633a3a2f33342d3334203d3e20323635303431.roa
File:                     323830343a333164633a3a2f33342d3334203d3e20323635303431.roa (raw, json)
Hash identifier:          QxcPFNCYpYp7wU08lPirLrxMrn8228MxDOVPHFLUH6U=
Subject key identifier:   E9:7E:45:C5:67:6A:D2:C6:D2:4E:7D:9E:AE:DA:F3:EA:54:74:41:A5
Certificate issuer:       /CN=37834545A38892C3FF1B7141126084730A12B7AC
Certificate serial:       7B638E22F01AF554A8A4D2D16E3E09C9928D04F5
Authority key identifier: 37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/323830343a333164633a3a2f33342d3334203d3e20323635303431.roa
Signing time:             Wed 25 Oct 2023 19:25:44 +0000
ROA not before:           Wed 25 Oct 2023 19:20:44 +0000
ROA not after:            Wed 23 Oct 2024 19:25:44 +0000
asID:                     265041
IP address blocks:        2804:31dc::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:63:8e:22:f0:1a:f5:54:a8:a4:d2:d1:6e:3e:09:c9:92:8d:04:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37834545A38892C3FF1B7141126084730A12B7AC
        Validity
            Not Before: Oct 25 19:20:44 2023 GMT
            Not After : Oct 23 19:25:44 2024 GMT
        Subject: CN=E97E45C5676AD2C6D24E7D9EAEDAF3EA547441A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3a:84:68:b9:e3:93:16:1f:e2:a0:19:4b:a0:
                    f4:09:16:b7:f9:02:7b:1a:9c:6c:3d:76:d6:f7:86:
                    0d:90:5a:d0:c5:46:61:39:22:ee:28:2b:e2:f2:6b:
                    06:76:8c:fc:51:60:bd:9e:3f:6c:ce:d3:fb:9a:f6:
                    ca:a9:92:0e:6d:48:92:aa:ac:f5:b7:00:07:a6:bf:
                    2c:c8:a7:85:7f:2f:db:16:48:9d:ea:34:b2:a6:43:
                    9b:6d:99:c6:24:fe:6c:c8:8c:f0:2f:97:e9:8a:47:
                    43:15:ba:26:0e:5e:6a:41:c3:a8:ed:4c:52:a9:f3:
                    65:fe:81:45:2f:f9:4a:f3:7b:3a:fd:dc:f5:b4:17:
                    6a:1c:9e:59:6b:a5:e7:22:34:95:55:5e:ce:aa:e0:
                    ba:d9:0f:2a:18:fa:db:c0:e2:a3:db:44:3c:07:d6:
                    1d:56:00:b8:dc:4b:4f:b4:b1:f4:7d:6a:e5:7e:08:
                    86:ef:f6:35:88:2b:bb:1e:46:3f:08:0c:22:bc:06:
                    ee:78:15:8e:4f:43:03:1d:9c:7b:46:d6:62:79:53:
                    50:ed:a0:a8:4b:6b:d5:20:a9:8f:fc:11:41:20:fc:
                    1e:c2:35:b4:ab:f4:48:20:9d:44:1b:e9:12:20:38:
                    51:7d:84:c8:7a:08:8f:42:5d:c8:2f:64:e9:b7:44:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7E:45:C5:67:6A:D2:C6:D2:4E:7D:9E:AE:DA:F3:EA:54:74:41:A5
            X509v3 Authority Key Identifier:
                keyid:37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/37834545A38892C3FF1B7141126084730A12B7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/323830343a333164633a3a2f33342d3334203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31dc::/34

    Signature Algorithm: sha256WithRSAEncryption
         62:05:47:9e:48:0b:e9:f5:a0:fb:c7:f5:94:3a:89:f2:f7:5e:
         c9:68:65:c8:6e:25:9e:90:4a:15:58:39:67:89:6c:e3:ba:f6:
         a2:99:98:e4:6b:7a:20:33:69:e5:9e:cd:57:f8:9d:ba:ce:c7:
         1c:26:08:78:a2:e3:70:25:b3:0a:6b:e9:15:62:d0:28:95:7e:
         62:2c:95:14:22:46:ee:59:37:84:07:65:3a:de:1c:60:de:89:
         a6:54:58:a3:2a:e0:50:f9:53:8f:a3:b0:12:c6:cb:f9:99:39:
         18:ca:b5:a8:3b:e2:37:a4:94:e6:64:33:12:19:55:fa:8e:b4:
         87:e4:54:43:e4:da:ef:92:0d:ee:aa:74:06:6c:d5:a5:a2:56:
         9b:6a:fa:c8:d6:f9:77:74:35:80:90:1e:7d:96:f7:8b:cf:ac:
         2f:a7:c4:ad:38:0d:65:f2:bc:23:c0:49:eb:ad:91:df:94:bd:
         70:11:87:82:f2:fc:2c:0c:27:23:d6:b3:24:12:55:af:ac:38:
         61:89:e7:d3:af:0b:0a:e3:b6:78:0f:c3:d4:01:01:a7:80:ed:
         8c:53:9b:76:ee:ec:c4:02:fb:02:8d:bd:02:11:5d:4b:18:6e:
         4b:82:cd:a7:59:23:b6:89:4c:4b:14:f9:64:3e:bc:28:ac:30:
         3e:7f:38:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUe2OOIvAa9VSopNLRbj4JyZKNBPUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc4MzQ1NDVBMzg4OTJDM0ZGMUI3MTQxMTI2MDg0NzMw
QTEyQjdBQzAeFw0yMzEwMjUxOTIwNDRaFw0yNDEwMjMxOTI1NDRaMDMxMTAvBgNV
BAMTKEU5N0U0NUM1Njc2QUQyQzZEMjRFN0Q5RUFFREFGM0VBNTQ3NDQxQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjOoRoueOTFh/ioBlLoPQJFrf5
AnsanGw9dtb3hg2QWtDFRmE5Iu4oK+LyawZ2jPxRYL2eP2zO0/ua9sqpkg5tSJKq
rPW3AAemvyzIp4V/L9sWSJ3qNLKmQ5ttmcYk/mzIjPAvl+mKR0MVuiYOXmpBw6jt
TFKp82X+gUUv+Urzezr93PW0F2ocnllrpeciNJVVXs6q4LrZDyoY+tvA4qPbRDwH
1h1WALjcS0+0sfR9auV+CIbv9jWIK7seRj8IDCK8Bu54FY5PQwMdnHtG1mJ5U1Dt
oKhLa9UgqY/8EUEg/B7CNbSr9EggnUQb6RIgOFF9hMh6CI9CXcgvZOm3RPdzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6X5FxWdq0sbSTn2ertrz6lR0QaUwHwYDVR0j
BBgwFoAUN4NFRaOIksP/G3FBEmCEcwoSt6wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEJTcEtGZERzNTlyUkJYZGVKeGFXRHNDNzN5WnBQZmNzZWN6WlNlaVJB
Yk4vMC8zNzgzNDU0NUEzODg5MkMzRkYxQjcxNDExMjYwODQ3MzBBMTJCN0FDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM3ODM0NTQ1QTM4ODkyQzNG
RjFCNzE0MTEyNjA4NDczMEExMkI3QUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCU3BLRmREczU5clJCWGRlSnhhV0RzQzczeVpwUGZjc2VjelpTZWlSQWJOLzAv
MzIzODMwMzQzYTMzMzE2NDYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM1
MzAzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQx3AAwDQYJKoZIhvcNAQELBQADggEBAGIFR55I
C+n1oPvH9ZQ6ifL3XsloZchuJZ6QShVYOWeJbOO69qKZmORreiAzaeWezVf4nbrO
xxwmCHii43Alswpr6RVi0CiVfmIslRQiRu5ZN4QHZTreHGDeiaZUWKMq4FD5U4+j
sBLGy/mZORjKtag74jeklOZkMxIZVfqOtIfkVEPk2u+SDe6qdAZs1aWiVptq+sjW
+Xd0NYCQHn2W94vPrC+nxK04DWXyvCPASeutkd+UvXARh4Ly/CwMJyPWsyQSVa+s
OGGJ59OvCwrjtngPw9QBAaeA7YxTm3bu7MQC+wKNvQIRXUsYbkuCzadZI7aJTEsU
+WQ+vCisMD5/OLI=
-----END CERTIFICATE-----