Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3a2f33332d3333203d3e203237363838.roa
File:                     323830343a353461303a3a2f33332d3333203d3e203237363838.roa (raw, json)
Hash identifier:          BwVsrIjwyAYVI5alukAZBMGCmdNcMmaC36sBSFsED8A=
Subject key identifier:   58:63:85:4C:8A:DC:9A:ED:FA:25:A0:68:1E:1B:1D:15:63:EE:39:86
Certificate issuer:       /CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
Certificate serial:       5689BFCF40D4D0D1035476D6E8CF48C2317BE40D
Authority key identifier: AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3a2f33332d3333203d3e203237363838.roa
Signing time:             Fri 15 Jul 2022 21:08:13 +0000
ROA not before:           Fri 15 Jul 2022 21:03:13 +0000
ROA not after:            Fri 14 Jul 2023 21:08:13 +0000
asID:                     27688
IP address blocks:        2804:54a0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:89:bf:cf:40:d4:d0:d1:03:54:76:d6:e8:cf:48:c2:31:7b:e4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
        Validity
            Not Before: Jul 15 21:03:13 2022 GMT
            Not After : Jul 14 21:08:13 2023 GMT
        Subject: CN=5863854C8ADC9AEDFA25A0681E1B1D1563EE3986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:b4:1c:e1:0a:a1:6f:de:eb:e3:54:06:5e:
                    23:29:a3:db:ad:ff:3c:18:27:11:8b:10:f9:4f:5c:
                    be:1c:7a:ae:0b:b8:be:00:32:5c:ad:80:3a:3e:3e:
                    ac:d2:fa:fc:db:57:c9:77:4e:29:ae:bf:cb:11:16:
                    93:99:46:16:89:db:46:07:ef:43:ab:06:07:3a:da:
                    b1:6f:b9:cb:b2:c0:6d:06:3f:8e:b6:fd:c5:2b:7e:
                    ea:fc:8c:18:01:fe:38:ec:75:19:9c:9e:54:ea:5b:
                    46:87:6e:84:44:d7:93:0f:e5:88:ab:a1:28:56:43:
                    d4:10:17:97:05:5d:4c:94:a3:63:46:f0:ad:64:62:
                    77:a4:b3:2d:0b:9b:5b:f7:dd:4b:44:27:fa:91:c9:
                    b8:78:cf:1a:fe:83:4b:86:95:ea:1d:98:ff:a3:9d:
                    db:05:16:f5:11:26:0d:89:52:5c:bb:9f:33:76:57:
                    0c:08:a1:04:fd:28:45:7d:b2:fe:7f:f3:a3:05:34:
                    80:3b:ad:38:8a:e5:eb:51:f5:1a:36:fe:ec:8e:c7:
                    a2:52:86:93:04:75:df:b1:f1:97:76:70:e8:01:69:
                    4e:b6:78:47:b6:95:d1:e5:39:f4:e0:e4:54:8c:52:
                    8b:a4:10:ef:c7:cf:76:b6:ae:9f:61:43:af:e6:3f:
                    45:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:63:85:4C:8A:DC:9A:ED:FA:25:A0:68:1E:1B:1D:15:63:EE:39:86
            X509v3 Authority Key Identifier:
                keyid:AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3a2f33332d3333203d3e203237363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a0::/33

    Signature Algorithm: sha256WithRSAEncryption
         6e:c4:18:8a:4a:3d:a7:29:aa:c5:52:b4:0d:34:10:b1:34:33:
         19:02:1f:0e:58:35:e3:6d:92:08:32:f1:b0:3b:90:51:0d:fd:
         b8:24:70:f5:7d:94:1c:85:1b:aa:a9:a2:c8:3d:5a:2b:21:6a:
         8b:18:0c:dc:e3:42:44:6e:c2:9a:da:a1:d2:e6:f1:88:40:0a:
         05:95:12:2f:ea:4b:12:9a:4e:b0:e9:ed:64:6a:a6:07:2f:58:
         1c:ff:4b:48:0a:7b:f0:6b:ff:53:7a:60:1e:2d:7f:54:5a:97:
         aa:4a:a2:a4:fa:72:8d:99:d7:d2:2a:a8:9c:cc:de:96:21:7f:
         ed:f6:0a:43:2e:fa:13:2a:9e:ed:86:cc:b5:e9:ff:8d:78:59:
         2c:3a:cf:30:f4:fd:7b:1c:a8:1f:ab:36:21:39:ed:22:03:a1:
         4d:01:3a:b5:ca:ed:e4:c2:21:6d:eb:9c:d2:84:29:49:31:e9:
         9d:2d:ab:e9:e1:8f:7f:28:69:48:33:ba:93:de:0c:4a:56:09:
         cf:4b:53:7f:bb:fd:f7:70:c0:a1:44:e2:83:ef:ca:d0:6a:3b:
         ef:7a:12:e5:69:bf:c2:2e:b0:db:10:92:70:7a:e1:af:cf:33:
         18:c7:64:e6:20:32:02:a8:ec:7d:af:c1:74:38:5b:fa:b0:30:
         d0:23:c6:d5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVom/z0DU0NEDVHbW6M9IwjF75A0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE0OUI4QjNFQjVBNzU1QkQ0QTE4QjNGNUJDMjREN0My
QUUzRUM2NzAeFw0yMjA3MTUyMTAzMTNaFw0yMzA3MTQyMTA4MTNaMDMxMTAvBgNV
BAMTKDU4NjM4NTRDOEFEQzlBRURGQTI1QTA2ODFFMUIxRDE1NjNFRTM5ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLFLQc4Qqhb97r41QGXiMpo9ut
/zwYJxGLEPlPXL4ceq4LuL4AMlytgDo+PqzS+vzbV8l3Timuv8sRFpOZRhaJ20YH
70OrBgc62rFvucuywG0GP462/cUrfur8jBgB/jjsdRmcnlTqW0aHboRE15MP5Yir
oShWQ9QQF5cFXUyUo2NG8K1kYneksy0Lm1v33UtEJ/qRybh4zxr+g0uGleodmP+j
ndsFFvURJg2JUly7nzN2VwwIoQT9KEV9sv5/86MFNIA7rTiK5etR9Ro2/uyOx6JS
hpMEdd+x8Zd2cOgBaU62eEe2ldHlOfTg5FSMUoukEO/Hz3a2rp9hQ6/mP0U1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWGOFTIrcmu36JaBoHhsdFWPuOYYwHwYDVR0j
BBgwFoAUqkm4s+tadVvUoYs/W8JNfCrj7GcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkM0TDRWeFhzcjkzVVJRMnZXVXZCODF0Vm9tbXh0WFNZNVRLM1htNjFI
SDgvMC9BQTQ5QjhCM0VCNUE3NTVCRDRBMThCM0Y1QkMyNEQ3QzJBRTNFQzY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FBNDlCOEIzRUI1QTc1NUJE
NEExOEIzRjVCQzI0RDdDMkFFM0VDNjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZDNEw0VnhYc3I5M1VSUTJ2V1V2QjgxdFZvbW14dFhTWTVUSzNYbTYxSEg4LzAv
MzIzODMwMzQzYTM1MzQ2MTMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzM2
MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygEVKAAMA0GCSqGSIb3DQEBCwUAA4IBAQBuxBiKSj2n
KarFUrQNNBCxNDMZAh8OWDXjbZIIMvGwO5BRDf24JHD1fZQchRuqqaLIPVorIWqL
GAzc40JEbsKa2qHS5vGIQAoFlRIv6ksSmk6w6e1kaqYHL1gc/0tICnvwa/9TemAe
LX9UWpeqSqKk+nKNmdfSKqiczN6WIX/t9gpDLvoTKp7thsy16f+NeFksOs8w9P17
HKgfqzYhOe0iA6FNATq1yu3kwiFt65zShClJMemdLavp4Y9/KGlIM7qT3gxKVgnP
S1N/u/33cMChROKD78rQajvvehLlab/CLrDbEJJweuGvzzMYx2TmIDICqOx9r8F0
OFv6sDDQI8bV
-----END CERTIFICATE-----