Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a3a2f33322d3336203d3e20323632383033.roa
File:                     323830343a3235303a3a2f33322d3336203d3e20323632383033.roa (raw, json)
Hash identifier:          ockSMJjvZc/fYtPC/l2ZywJjcnLA7oAR0bo4CPT9xIQ=
Subject key identifier:   51:C3:C4:C6:85:EF:C0:B9:6C:0B:A4:28:B1:32:04:3E:FC:EC:CE:36
Certificate issuer:       /CN=2868687EA5FA41E3EBA80800528C90ADEE4EE771
Certificate serial:       74515A4BA3EE2D30B02A9C5B54D712550F04576E
Authority key identifier: 28:68:68:7E:A5:FA:41:E3:EB:A8:08:00:52:8C:90:AD:EE:4E:E7:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2868687EA5FA41E3EBA80800528C90ADEE4EE771.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a3a2f33322d3336203d3e20323632383033.roa
Signing time:             Wed 22 Nov 2023 12:36:12 +0000
ROA not before:           Wed 22 Nov 2023 12:31:12 +0000
ROA not after:            Wed 20 Nov 2024 12:36:12 +0000
asID:                     262803
IP address blocks:        2804:250::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:51:5a:4b:a3:ee:2d:30:b0:2a:9c:5b:54:d7:12:55:0f:04:57:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2868687EA5FA41E3EBA80800528C90ADEE4EE771
        Validity
            Not Before: Nov 22 12:31:12 2023 GMT
            Not After : Nov 20 12:36:12 2024 GMT
        Subject: CN=51C3C4C685EFC0B96C0BA428B132043EFCECCE36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:64:91:9d:13:18:6f:1c:99:bb:34:87:a1:fd:
                    a6:c9:c1:a8:5d:64:bd:15:e8:5e:56:2c:43:11:5e:
                    cf:12:53:5a:5d:2e:a4:dc:ad:7a:67:1b:13:0a:b6:
                    62:98:ce:b1:5c:52:da:1d:f9:60:06:b6:8a:a7:68:
                    8c:11:d5:52:d9:a1:76:2a:57:c5:f7:24:1d:2f:69:
                    09:69:f9:c0:b6:71:eb:16:4d:ea:48:de:46:b7:5d:
                    09:69:d0:52:40:e3:88:06:92:eb:c9:48:6e:e9:29:
                    bf:4d:f7:81:61:c4:d1:34:2e:71:c5:a4:72:53:2f:
                    aa:2d:7b:e5:d3:e2:32:7e:56:23:96:f0:9e:35:0d:
                    97:11:ea:e9:7c:36:dd:f8:e4:25:76:65:ff:15:a6:
                    87:ae:38:ea:87:53:08:7e:d3:e0:2c:64:b1:4b:ca:
                    7b:94:15:8e:9d:ab:75:85:cf:64:01:64:c4:dc:a7:
                    fb:9f:87:e6:f3:46:1c:42:7c:53:3f:b8:ec:92:df:
                    75:5b:90:2f:a2:58:d0:52:ec:b1:58:07:aa:9a:c2:
                    03:3d:39:c4:af:6a:d6:7f:ce:ba:59:5c:bf:97:fd:
                    a1:91:0c:9b:6b:9a:62:51:91:ca:a3:ec:d9:2a:49:
                    0e:9a:62:ce:6e:71:0c:2f:39:1b:59:5c:d6:45:1f:
                    46:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C3:C4:C6:85:EF:C0:B9:6C:0B:A4:28:B1:32:04:3E:FC:EC:CE:36
            X509v3 Authority Key Identifier:
                keyid:28:68:68:7E:A5:FA:41:E3:EB:A8:08:00:52:8C:90:AD:EE:4E:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/2868687EA5FA41E3EBA80800528C90ADEE4EE771.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2868687EA5FA41E3EBA80800528C90ADEE4EE771.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a3a2f33322d3336203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:250::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:a5:19:fa:d8:cd:f4:04:56:33:9f:2f:cf:30:05:ce:0e:88:
         6b:70:0c:4e:31:64:c2:3e:34:f6:fd:b5:81:7a:a9:4d:aa:a8:
         e8:14:bf:08:b3:03:f0:4c:91:68:df:66:7d:98:ba:4a:d6:e1:
         56:76:c6:d4:70:c7:1d:67:cb:18:c1:a2:2b:5a:27:de:d2:b2:
         6a:64:a4:d4:e7:37:4a:c9:c7:0e:47:5a:29:3a:cd:a3:8e:c9:
         00:f0:11:0a:01:e6:80:37:c8:20:00:01:c1:34:d9:5a:19:3b:
         db:0f:f2:79:e4:31:2f:6f:a8:ca:49:b6:7a:19:27:00:42:be:
         9b:c7:3b:02:a2:64:cf:e4:71:47:55:4f:0c:0d:77:bf:b0:4e:
         43:d1:d0:2b:d8:c2:09:8c:dd:33:3a:b5:e8:94:29:15:60:52:
         d6:3f:7e:67:00:5d:a6:89:48:bc:a6:2b:4c:09:02:0b:1b:5b:
         d1:69:db:89:7a:ef:a6:e2:1b:76:66:e7:80:7d:d5:33:b8:3b:
         e9:51:18:c3:b3:6b:ca:0e:43:8f:b1:6f:7e:35:66:39:f6:61:
         f4:30:e2:c3:87:21:ae:21:3f:ac:83:66:00:ca:a3:dd:e4:79:
         73:68:45:29:6d:25:d4:18:6f:ce:32:5d:1a:e4:25:cf:e2:ae:
         11:72:f4:7f
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUdFFaS6PuLTCwKpxbVNcSVQ8EV24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg2ODY4N0VBNUZBNDFFM0VCQTgwODAwNTI4QzkwQURF
RTRFRTc3MTAeFw0yMzExMjIxMjMxMTJaFw0yNDExMjAxMjM2MTJaMDMxMTAvBgNV
BAMTKDUxQzNDNEM2ODVFRkMwQjk2QzBCQTQyOEIxMzIwNDNFRkNFQ0NFMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdZJGdExhvHJm7NIeh/abJwahd
ZL0V6F5WLEMRXs8SU1pdLqTcrXpnGxMKtmKYzrFcUtod+WAGtoqnaIwR1VLZoXYq
V8X3JB0vaQlp+cC2cesWTepI3ka3XQlp0FJA44gGkuvJSG7pKb9N94FhxNE0LnHF
pHJTL6ote+XT4jJ+ViOW8J41DZcR6ul8Nt345CV2Zf8VpoeuOOqHUwh+0+AsZLFL
ynuUFY6dq3WFz2QBZMTcp/ufh+bzRhxCfFM/uOyS33VbkC+iWNBS7LFYB6qawgM9
OcSvatZ/zrpZXL+X/aGRDJtrmmJRkcqj7NkqSQ6aYs5ucQwvORtZXNZFH0YFAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUUcPExoXvwLlsC6QosTIEPvzszjYwHwYDVR0j
BBgwFoAUKGhofqX6QePrqAgAUoyQre5O53EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2FkYWtnUGRnbUU3TjhMWnRFakJOcGhmbXNxaXBqZ2V1U24xZE5zR1Bq
UEovMC8yODY4Njg3RUE1RkE0MUUzRUJBODA4MDA1MjhDOTBBREVFNEVFNzcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4Njg2ODdFQTVGQTQxRTNF
QkE4MDgwMDUyOEM5MEFERUU0RUU3NzEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNhZGFrZ1BkZ21FN044TFp0RWpCTnBoZm1zcWlwamdldVNuMWROc0dQalBKLzAv
MzIzODMwMzQzYTMyMzUzMDNhM2EyZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzYzMjM4
MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEAlAwDQYJKoZIhvcNAQELBQADggEBAJ+lGfrYzfQE
VjOfL88wBc4OiGtwDE4xZMI+NPb9tYF6qU2qqOgUvwizA/BMkWjfZn2YukrW4VZ2
xtRwxx1nyxjBoitaJ97SsmpkpNTnN0rJxw5HWik6zaOOyQDwEQoB5oA3yCAAAcE0
2VoZO9sP8nnkMS9vqMpJtnoZJwBCvpvHOwKiZM/kcUdVTwwNd7+wTkPR0CvYwgmM
3TM6teiUKRVgUtY/fmcAXaaJSLymK0wJAgsbW9Fp24l676biG3Zm54B91TO4O+lR
GMOza8oOQ4+xb341Zjn2YfQw4sOHIa4hP6yDZgDKo93keXNoRSltJdQYb84yXRrk
Jc/irhFy9H8=
-----END CERTIFICATE-----