Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/323830343a353766343a3830303a3a2f34382d3438203d3e20323634333439.roa
File:                     323830343a353766343a3830303a3a2f34382d3438203d3e20323634333439.roa (raw, json)
Hash identifier:          /qYbvCF1UhlzNbJEZk3VG+UWgE8ZziwwxTpn9eAco1w=
Subject key identifier:   6B:30:CB:33:0A:59:32:B2:E9:94:B2:9A:C0:9C:C3:14:A0:88:5B:BD
Certificate issuer:       /CN=87A3930CA799EBD4726EE8F14B458B2382064161
Certificate serial:       721DFCD2B37204A5010F4EE86955619E9705408F
Authority key identifier: 87:A3:93:0C:A7:99:EB:D4:72:6E:E8:F1:4B:45:8B:23:82:06:41:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87A3930CA799EBD4726EE8F14B458B2382064161.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/323830343a353766343a3830303a3a2f34382d3438203d3e20323634333439.roa
Signing time:             Mon 07 Feb 2022 12:09:42 +0000
ROA not before:           Mon 07 Feb 2022 12:04:42 +0000
ROA not after:            Mon 06 Feb 2023 12:09:42 +0000
asID:                     264349
IP address blocks:        2804:57f4:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1d:fc:d2:b3:72:04:a5:01:0f:4e:e8:69:55:61:9e:97:05:40:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A3930CA799EBD4726EE8F14B458B2382064161
        Validity
            Not Before: Feb  7 12:04:42 2022 GMT
            Not After : Feb  6 12:09:42 2023 GMT
        Subject: CN=6B30CB330A5932B2E994B29AC09CC314A0885BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:34:6c:e1:44:9b:b9:48:b2:33:20:3b:a4:b2:
                    9c:aa:e9:52:af:ea:06:d7:13:7d:59:7d:76:14:dd:
                    9a:02:05:49:af:f5:f7:3b:5a:3f:1c:26:07:b6:b4:
                    82:de:c4:9f:bf:b1:33:cd:68:77:90:2c:7c:19:10:
                    12:bf:4c:ab:86:f2:35:0b:08:96:2e:c4:c4:38:cc:
                    0e:0a:ad:48:f6:38:2a:5a:f6:05:63:a3:a7:92:f6:
                    41:23:3c:c0:ef:a3:bf:cc:f4:07:d6:29:ba:bb:24:
                    19:8e:02:b1:ae:cb:8f:63:26:53:61:0f:02:cc:28:
                    49:a1:54:78:3d:60:07:ed:19:45:4f:4f:36:9b:7f:
                    08:c4:61:9b:59:92:e9:a9:59:da:dd:d7:6b:7b:9b:
                    63:c3:00:b8:64:b6:7a:2f:e7:3e:4c:1f:53:45:ee:
                    8e:19:a5:0c:3e:16:e7:e1:0c:42:72:3c:02:48:20:
                    3f:52:4c:e6:bf:40:e5:09:76:52:b2:c9:fe:82:ee:
                    c5:98:44:47:a6:f5:31:c8:9d:9e:28:d9:06:eb:6a:
                    1f:e5:23:6d:f8:3a:7e:0f:b1:ba:69:e1:d7:f2:36:
                    81:a3:8b:66:41:6d:94:85:64:da:9a:a6:35:0f:c1:
                    71:7a:74:80:f7:18:72:41:08:8d:5b:d6:3d:df:57:
                    21:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:30:CB:33:0A:59:32:B2:E9:94:B2:9A:C0:9C:C3:14:A0:88:5B:BD
            X509v3 Authority Key Identifier:
                keyid:87:A3:93:0C:A7:99:EB:D4:72:6E:E8:F1:4B:45:8B:23:82:06:41:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/87A3930CA799EBD4726EE8F14B458B2382064161.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87A3930CA799EBD4726EE8F14B458B2382064161.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/323830343a353766343a3830303a3a2f34382d3438203d3e20323634333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57f4:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:25:69:e6:0b:7d:29:dc:ac:9b:f1:15:1f:b3:db:a2:6f:2a:
         b2:af:85:cd:e6:49:50:7a:30:5f:c3:da:50:ba:08:11:1a:d1:
         ee:7a:05:5b:f3:70:27:f5:1b:f0:a0:fb:2d:9c:70:c8:27:e2:
         79:0e:66:35:a3:98:30:00:60:39:a2:70:e9:40:5d:6c:32:3f:
         04:66:f6:69:41:c7:3a:5a:b0:90:8e:5e:fc:78:cf:e2:16:ee:
         92:87:2d:f4:ad:8c:b4:e1:6c:43:fd:60:b0:c7:be:d3:20:33:
         1e:ef:01:bd:0d:22:a9:11:9e:b0:31:fe:c5:f3:b4:88:d5:d6:
         b1:00:cf:d3:32:b9:ff:e4:28:fd:0e:31:8c:53:52:69:ad:51:
         e4:9e:cf:06:51:0c:15:05:19:e1:b0:d2:34:f1:b9:0a:7a:df:
         e3:09:2e:24:14:87:2a:8c:2b:66:7d:f7:5d:4a:1e:da:34:aa:
         85:ad:8f:fe:8c:0c:ac:5a:2d:54:f0:76:a0:4c:3d:4f:4b:ab:
         70:d5:bb:91:f3:0f:33:e4:8c:70:20:47:65:30:ce:37:40:99:
         1f:06:1a:a3:be:ad:ca:5c:33:31:94:8f:e0:c0:1d:9b:b0:d7:
         e0:f2:30:bd:be:8e:9c:36:26:63:1c:7b:f6:59:a0:eb:46:73:
         64:9e:71:e0
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUch380rNyBKUBD07oaVVhnpcFQI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBMzkzMENBNzk5RUJENDcyNkVFOEYxNEI0NThCMjM4
MjA2NDE2MTAeFw0yMjAyMDcxMjA0NDJaFw0yMzAyMDYxMjA5NDJaMDMxMTAvBgNV
BAMTKDZCMzBDQjMzMEE1OTMyQjJFOTk0QjI5QUMwOUNDMzE0QTA4ODVCQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLNGzhRJu5SLIzIDukspyq6VKv
6gbXE31ZfXYU3ZoCBUmv9fc7Wj8cJge2tILexJ+/sTPNaHeQLHwZEBK/TKuG8jUL
CJYuxMQ4zA4KrUj2OCpa9gVjo6eS9kEjPMDvo7/M9AfWKbq7JBmOArGuy49jJlNh
DwLMKEmhVHg9YAftGUVPTzabfwjEYZtZkumpWdrd12t7m2PDALhktnov5z5MH1NF
7o4ZpQw+FufhDEJyPAJIID9STOa/QOUJdlKyyf6C7sWYREem9THInZ4o2Qbrah/l
I234On4Psbpp4dfyNoGji2ZBbZSFZNqapjUPwXF6dID3GHJBCI1b1j3fVyHRAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUazDLMwpZMrLplLKawJzDFKCIW70wHwYDVR0j
BBgwFoAUh6OTDKeZ69RybujxS0WLI4IGQWEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVTYWtnYUJOdU1MbzNCZG5WZ0RlcHU0OVlMdFd0akZHY0ozdVFoampB
MWgvMC84N0EzOTMwQ0E3OTlFQkQ0NzI2RUU4RjE0QjQ1OEIyMzgyMDY0MTYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg3QTM5MzBDQTc5OUVCRDQ3
MjZFRThGMTRCNDU4QjIzODIwNjQxNjEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1U2FrZ2FCTnVNTG8zQmRuVmdEZXB1NDlZTHRXdGpGR2NKM3VRaGpqQTFoLzAv
MzIzODMwMzQzYTM1Mzc2NjM0M2EzODMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzQzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBFf0CAAwDQYJKoZIhvcNAQELBQAD
ggEBAGslaeYLfSncrJvxFR+z26JvKrKvhc3mSVB6MF/D2lC6CBEa0e56BVvzcCf1
G/Cg+y2ccMgn4nkOZjWjmDAAYDmicOlAXWwyPwRm9mlBxzpasJCOXvx4z+IW7pKH
LfStjLThbEP9YLDHvtMgMx7vAb0NIqkRnrAx/sXztIjV1rEAz9Myuf/kKP0OMYxT
UmmtUeSezwZRDBUFGeGw0jTxuQp63+MJLiQUhyqMK2Z9911KHto0qoWtj/6MDKxa
LVTwdqBMPU9Lq3DVu5HzDzPkjHAgR2UwzjdAmR8GGqO+rcpcMzGUj+DAHZuw1+Dy
ML2+jpw2JmMce/ZZoOtGc2SeceA=
-----END CERTIFICATE-----