Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/323830343a333833633a3a2f33322d3332203d3e203532363031.roa
File:                     323830343a333833633a3a2f33322d3332203d3e203532363031.roa (raw, json)
Hash identifier:          usdvBGtiRmKP9uVlQ4Y2xeJb49kWZ/KApMeX7dZK0kA=
Subject key identifier:   F7:11:D4:B6:BE:50:B9:60:41:0A:F0:66:FA:42:34:98:48:C3:B7:78
Certificate issuer:       /CN=FA4740D751D7330E7FE81FB75023D113A8850CD3
Certificate serial:       6BD3D97AB2DAF9E30859188B23FEB931FC9444AB
Authority key identifier: FA:47:40:D7:51:D7:33:0E:7F:E8:1F:B7:50:23:D1:13:A8:85:0C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA4740D751D7330E7FE81FB75023D113A8850CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/323830343a333833633a3a2f33322d3332203d3e203532363031.roa
Signing time:             Wed 05 Apr 2023 18:59:30 +0000
ROA not before:           Wed 05 Apr 2023 18:54:30 +0000
ROA not after:            Wed 03 Apr 2024 18:59:30 +0000
asID:                     52601
IP address blocks:        2804:383c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d3:d9:7a:b2:da:f9:e3:08:59:18:8b:23:fe:b9:31:fc:94:44:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA4740D751D7330E7FE81FB75023D113A8850CD3
        Validity
            Not Before: Apr  5 18:54:30 2023 GMT
            Not After : Apr  3 18:59:30 2024 GMT
        Subject: CN=F711D4B6BE50B960410AF066FA42349848C3B778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:df:7f:b6:08:14:0f:31:7b:fb:1e:fc:6d:b8:
                    10:a9:07:85:5e:97:bb:27:eb:6f:6f:65:b3:b5:75:
                    bc:ce:ec:55:0b:7c:8d:ce:e2:58:64:22:0d:10:53:
                    12:32:6a:85:57:cf:91:09:9d:77:d9:b1:c8:0e:28:
                    d1:63:59:9c:0d:85:b7:83:f1:12:76:80:62:9f:3a:
                    d2:50:7b:68:b1:a8:f1:ad:52:b1:42:76:5c:75:b6:
                    68:af:81:88:2c:cc:8a:9b:7b:ae:08:40:8c:fb:1e:
                    f3:5b:2f:2b:7b:54:ba:d2:63:ff:84:5a:82:1b:39:
                    dc:51:30:ab:14:13:dc:37:16:6a:f7:01:34:a3:47:
                    f1:88:e7:68:1e:28:79:64:e1:42:ff:da:fb:e8:7b:
                    94:69:84:21:61:c8:a7:0f:2c:2f:e2:23:b2:11:cd:
                    84:eb:86:28:a8:3a:00:83:71:4e:3a:0b:27:11:e4:
                    71:52:43:28:a6:e6:79:7d:a3:18:51:99:ed:56:6c:
                    e1:d1:f2:79:4d:f1:f2:f3:98:85:52:00:78:18:fa:
                    b9:ec:86:c8:cb:0a:18:69:bc:b6:01:d3:37:88:32:
                    bd:d2:e6:7c:ed:3a:63:e0:a5:dc:52:6e:ce:75:e1:
                    7a:ff:30:05:75:3e:b5:66:74:ec:29:99:26:87:77:
                    30:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:11:D4:B6:BE:50:B9:60:41:0A:F0:66:FA:42:34:98:48:C3:B7:78
            X509v3 Authority Key Identifier:
                keyid:FA:47:40:D7:51:D7:33:0E:7F:E8:1F:B7:50:23:D1:13:A8:85:0C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/FA4740D751D7330E7FE81FB75023D113A8850CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA4740D751D7330E7FE81FB75023D113A8850CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/323830343a333833633a3a2f33322d3332203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:383c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:c6:fa:dd:08:9e:0e:69:e7:31:50:9a:eb:05:45:18:db:b6:
         27:83:ef:60:b5:94:57:43:20:14:6d:87:18:36:94:50:0d:9b:
         a3:ea:60:b5:7e:c8:83:d5:35:21:28:47:d2:8a:c8:cc:4f:2d:
         77:55:cb:76:69:e6:0d:8f:a7:08:c0:4c:2d:6d:dd:c2:bc:c8:
         b8:c4:39:ca:36:e8:a4:5f:f7:c1:87:c7:e9:b6:a9:34:20:b2:
         5c:29:6c:bc:bb:9f:86:fa:ee:46:4e:e2:37:5d:96:6d:15:bc:
         e6:d3:75:bd:5c:d2:1a:52:84:5b:dc:fc:a0:7d:4d:9a:67:8a:
         8c:ea:81:d2:59:0f:11:eb:44:d6:bf:28:7d:da:52:d7:3a:19:
         e2:c7:a2:4a:62:59:76:20:a2:4d:1d:1c:91:f4:d8:37:3e:30:
         54:57:9c:f5:20:ea:b7:f0:96:66:50:19:cb:6a:41:a1:ad:df:
         0f:0c:bd:d0:83:c6:c1:a3:9d:e8:95:17:19:df:86:26:bd:1c:
         28:2c:67:31:68:9f:ef:52:98:67:c7:cc:b3:d1:04:81:b5:f9:
         6b:df:ed:16:99:ef:3c:05:c5:a0:6e:a6:25:01:21:8a:11:22:
         ac:17:d7:c0:84:9c:da:85:c3:ab:ca:5a:61:eb:f4:9d:51:9c:
         93:7c:9a:03
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUa9PZerLa+eMIWRiLI/65MfyURKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE0NzQwRDc1MUQ3MzMwRTdGRTgxRkI3NTAyM0QxMTNB
ODg1MENEMzAeFw0yMzA0MDUxODU0MzBaFw0yNDA0MDMxODU5MzBaMDMxMTAvBgNV
BAMTKEY3MTFENEI2QkU1MEI5NjA0MTBBRjA2NkZBNDIzNDk4NDhDM0I3NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF33+2CBQPMXv7HvxtuBCpB4Ve
l7sn629vZbO1dbzO7FULfI3O4lhkIg0QUxIyaoVXz5EJnXfZscgOKNFjWZwNhbeD
8RJ2gGKfOtJQe2ixqPGtUrFCdlx1tmivgYgszIqbe64IQIz7HvNbLyt7VLrSY/+E
WoIbOdxRMKsUE9w3Fmr3ATSjR/GI52geKHlk4UL/2vvoe5RphCFhyKcPLC/iI7IR
zYTrhiioOgCDcU46CycR5HFSQyim5nl9oxhRme1WbOHR8nlN8fLzmIVSAHgY+rns
hsjLChhpvLYB0zeIMr3S5nztOmPgpdxSbs514Xr/MAV1PrVmdOwpmSaHdzB5AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU9xHUtr5QuWBBCvBm+kI0mEjDt3gwHwYDVR0j
BBgwFoAU+kdA11HXMw5/6B+3UCPRE6iFDNMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzVyZkg5b1FMUXp6c1pRUDJRcmE1TnhKTmhrTnljZkMxTlFnclpNU1hC
VmgvMS9GQTQ3NDBENzUxRDczMzBFN0ZFODFGQjc1MDIzRDExM0E4ODUwQ0QzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBNDc0MEQ3NTFENzMzMEU3
RkU4MUZCNzUwMjNEMTEzQTg4NTBDRDMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc1cmZIOW9RTFF6enNaUVAyUXJhNU54Sk5oa055Y2ZDMU5RZ3JaTVNYQlZoLzEv
MzIzODMwMzQzYTMzMzgzMzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMjM2
MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEODwwDQYJKoZIhvcNAQELBQADggEBAErG+t0Ing5p
5zFQmusFRRjbtieD72C1lFdDIBRthxg2lFANm6PqYLV+yIPVNSEoR9KKyMxPLXdV
y3Zp5g2PpwjATC1t3cK8yLjEOco26KRf98GHx+m2qTQgslwpbLy7n4b67kZO4jdd
lm0VvObTdb1c0hpShFvc/KB9TZpniozqgdJZDxHrRNa/KH3aUtc6GeLHokpiWXYg
ok0dHJH02Dc+MFRXnPUg6rfwlmZQGctqQaGt3w8MvdCDxsGjneiVFxnfhia9HCgs
ZzFon+9SmGfHzLPRBIG1+Wvf7RaZ7zwFxaBupiUBIYoRIqwX18CEnNqFw6vKWmHr
9J1RnJN8mgM=
-----END CERTIFICATE-----