Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/1/323830343a333265303a3a2f33322d3333203d3e20323635313032.roa
File:                     323830343a333265303a3a2f33322d3333203d3e20323635313032.roa (raw, json)
Hash identifier:          qHtReeFfes8/9oH0+wBX1ULang+xIE5iml8exdKiKXU=
Subject key identifier:   DD:BD:E4:69:1B:54:85:25:DC:BA:7F:B1:BB:81:73:94:32:90:0F:61
Certificate issuer:       /CN=E106FEFC240ABBEBD1D589EFF1774FFC909DB7B9
Certificate serial:       626CC509E3D9C8CA38F6844583C1F9CA35C9D64F
Authority key identifier: E1:06:FE:FC:24:0A:BB:EB:D1:D5:89:EF:F1:77:4F:FC:90:9D:B7:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E106FEFC240ABBEBD1D589EFF1774FFC909DB7B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/1/323830343a333265303a3a2f33322d3333203d3e20323635313032.roa
Signing time:             Mon 19 Dec 2022 11:26:04 +0000
ROA not before:           Mon 19 Dec 2022 11:21:04 +0000
ROA not after:            Mon 18 Dec 2023 11:26:04 +0000
asID:                     265102
IP address blocks:        2804:32e0::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6c:c5:09:e3:d9:c8:ca:38:f6:84:45:83:c1:f9:ca:35:c9:d6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E106FEFC240ABBEBD1D589EFF1774FFC909DB7B9
        Validity
            Not Before: Dec 19 11:21:04 2022 GMT
            Not After : Dec 18 11:26:04 2023 GMT
        Subject: CN=DDBDE4691B548525DCBA7FB1BB81739432900F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:31:64:78:04:f7:ba:ea:c2:ca:a9:db:0a:
                    c3:6b:f3:53:67:88:97:4a:5a:62:67:77:13:b9:61:
                    6f:05:e9:01:17:95:6f:cd:cf:e5:7f:a5:29:e9:a6:
                    c8:8a:bb:e7:f2:2d:36:3e:fa:be:ab:2a:2e:08:1e:
                    68:4b:59:34:ec:99:96:ec:df:cc:06:9f:b6:0c:9d:
                    0c:92:ad:e9:bc:ef:26:b9:d6:d1:9a:8a:1b:19:a5:
                    c5:3e:a5:b1:2b:5d:7a:30:34:a7:cc:dd:24:ad:ae:
                    dc:82:39:45:c3:23:b6:d1:b9:03:6b:78:a3:48:4b:
                    9f:70:0c:97:68:9b:d6:7e:04:cb:8d:95:23:27:e0:
                    e3:f2:0c:7f:dc:24:f7:dc:f6:29:f5:0b:67:15:5e:
                    21:9a:ca:69:33:db:eb:94:29:4b:63:ab:01:88:05:
                    29:66:cc:34:5d:2e:73:58:46:c3:67:a9:26:5b:44:
                    3c:bc:2f:2b:71:89:c9:b6:83:c6:1f:38:1f:fc:81:
                    ca:db:56:1f:26:74:84:59:12:38:63:04:1a:56:5b:
                    9a:1a:35:3c:ff:89:d2:c6:0e:46:59:d5:36:c1:e3:
                    f0:65:15:12:0a:c7:f0:d4:ff:ca:17:0b:d1:5a:2b:
                    e2:da:12:80:48:aa:52:c0:d8:c4:92:9f:62:04:27:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BD:E4:69:1B:54:85:25:DC:BA:7F:B1:BB:81:73:94:32:90:0F:61
            X509v3 Authority Key Identifier:
                keyid:E1:06:FE:FC:24:0A:BB:EB:D1:D5:89:EF:F1:77:4F:FC:90:9D:B7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/1/E106FEFC240ABBEBD1D589EFF1774FFC909DB7B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E106FEFC240ABBEBD1D589EFF1774FFC909DB7B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/1/323830343a333265303a3a2f33322d3333203d3e20323635313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:41:82:a5:e3:15:bc:95:43:b3:80:c3:db:1b:07:3a:38:36:
         d4:58:a9:42:24:8e:2c:84:87:f7:2c:b1:d7:c3:b5:85:c0:3f:
         1a:86:d2:b0:8c:89:b2:4a:9c:74:70:f4:90:00:34:3b:d0:1f:
         2a:c2:be:e4:aa:9f:e3:88:20:01:62:4d:fd:d6:56:94:b4:1d:
         2b:56:17:c0:d0:35:68:d5:c6:2e:d7:e5:55:3f:bf:29:ac:a6:
         db:f3:23:39:6d:1f:96:2b:12:c7:81:ba:c9:20:91:eb:75:33:
         01:73:9a:f9:1a:18:96:49:75:e1:5b:61:9b:bd:4a:f7:d6:7b:
         d7:02:2c:9d:f0:42:33:8a:81:52:a2:fc:64:f1:76:11:54:4f:
         66:11:13:5d:1d:3e:17:ac:e2:a1:c6:23:5a:31:f2:9c:6e:42:
         1b:55:16:49:25:fb:7f:32:8f:9c:87:73:1c:0d:5a:de:e3:70:
         d8:b9:78:9d:2d:24:0a:5e:76:41:73:64:8c:8f:f3:92:bd:3c:
         4f:57:7e:ca:d6:82:01:31:78:fe:d4:53:7b:5a:03:22:66:73:
         ef:de:14:27:9b:0f:d3:14:82:1f:77:02:c2:54:a7:90:65:e3:
         c4:b0:bf:e8:67:d3:d5:9b:db:61:d7:90:2b:82:75:4c:48:46:
         d9:38:17:da
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYmzFCePZyMo49oRFg8H5yjXJ1k8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTEwNkZFRkMyNDBBQkJFQkQxRDU4OUVGRjE3NzRGRkM5
MDlEQjdCOTAeFw0yMjEyMTkxMTIxMDRaFw0yMzEyMTgxMTI2MDRaMDMxMTAvBgNV
BAMTKEREQkRFNDY5MUI1NDg1MjVEQ0JBN0ZCMUJCODE3Mzk0MzI5MDBGNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKjFkeAT3uurCyqnbCsNr81Nn
iJdKWmJndxO5YW8F6QEXlW/Nz+V/pSnppsiKu+fyLTY++r6rKi4IHmhLWTTsmZbs
38wGn7YMnQySrem87ya51tGaihsZpcU+pbErXXowNKfM3SStrtyCOUXDI7bRuQNr
eKNIS59wDJdom9Z+BMuNlSMn4OPyDH/cJPfc9in1C2cVXiGaymkz2+uUKUtjqwGI
BSlmzDRdLnNYRsNnqSZbRDy8Lytxicm2g8YfOB/8gcrbVh8mdIRZEjhjBBpWW5oa
NTz/idLGDkZZ1TbB4/BlFRIKx/DU/8oXC9FaK+LaEoBIqlLA2MSSn2IEJwmJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3b3kaRtUhSXcun+xu4FzlDKQD2EwHwYDVR0j
BBgwFoAU4Qb+/CQKu+vR1Ynv8XdP/JCdt7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVrUG9CWDNYYnhiRlpla2lyUnFuOEJYaURVOGVuU3JmcndoV2V4WGhQ
VE4vMS9FMTA2RkVGQzI0MEFCQkVCRDFENTg5RUZGMTc3NEZGQzkwOURCN0I5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UxMDZGRUZDMjQwQUJCRUJE
MUQ1ODlFRkYxNzc0RkZDOTA5REI3QjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRFa1BvQlgzWGJ4YkZaZWtpclJxbjhCWGlEVThlblNyZnJ3aFdleFhoUFROLzEv
MzIzODMwMzQzYTMzMzI2NTMwM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM1
MzEzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQy4DANBgkqhkiG9w0BAQsFAAOCAQEALUGCpeMV
vJVDs4DD2xsHOjg21FipQiSOLISH9yyx18O1hcA/GobSsIyJskqcdHD0kAA0O9Af
KsK+5Kqf44ggAWJN/dZWlLQdK1YXwNA1aNXGLtflVT+/Kaym2/MjOW0flisSx4G6
ySCR63UzAXOa+RoYlkl14Vthm71K99Z71wIsnfBCM4qBUqL8ZPF2EVRPZhETXR0+
F6ziocYjWjHynG5CG1UWSSX7fzKPnIdzHA1a3uNw2Ll4nS0kCl52QXNkjI/zkr08
T1d+ytaCATF4/tRTe1oDImZz794UJ5sP0xSCH3cCwlSnkGXjxLC/6GfT1ZvbYdeQ
K4J1TEhG2TgX2g==
-----END CERTIFICATE-----