Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/323830343a336630383a343030303a3a2f33342d3334203d3e20323636363335.roa
File:                     323830343a336630383a343030303a3a2f33342d3334203d3e20323636363335.roa (raw, json)
Hash identifier:          dUdOsjdRjsFBq8Obbmg/L4hUhnAlq6SfRXpeZgj5jv0=
Subject key identifier:   55:E3:FE:3C:BF:4B:47:F3:F5:64:D6:3A:1D:22:25:47:2D:DF:F4:6A
Certificate issuer:       /CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
Certificate serial:       61F124D824D918BAD4AD061849E03568F8FC9142
Authority key identifier: BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/323830343a336630383a343030303a3a2f33342d3334203d3e20323636363335.roa
Signing time:             Mon 30 Oct 2023 19:39:42 +0000
ROA not before:           Mon 30 Oct 2023 19:34:42 +0000
ROA not after:            Mon 28 Oct 2024 19:39:42 +0000
asID:                     266635
IP address blocks:        2804:3f08:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f1:24:d8:24:d9:18:ba:d4:ad:06:18:49:e0:35:68:f8:fc:91:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
        Validity
            Not Before: Oct 30 19:34:42 2023 GMT
            Not After : Oct 28 19:39:42 2024 GMT
        Subject: CN=55E3FE3CBF4B47F3F564D63A1D2225472DDFF46A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:c7:c0:a9:7f:69:c3:47:c6:ef:90:8b:15:
                    98:0c:c0:5b:05:11:16:4f:ac:a3:ac:b0:59:50:de:
                    7a:80:da:d0:93:ec:3b:18:0d:79:f3:fe:c7:fe:70:
                    3e:68:02:81:1c:88:cf:68:91:ff:ce:ce:89:5e:f2:
                    06:f3:5c:71:d2:b5:2d:6c:c5:6c:c5:0d:5a:f1:50:
                    cc:05:b5:1a:5e:31:df:40:bb:6d:1d:14:d9:75:53:
                    68:1a:b3:c5:6d:52:32:f9:3d:37:3d:52:95:ff:87:
                    7b:e7:af:fd:7e:78:a3:54:2f:91:e9:49:e7:74:89:
                    ef:60:52:5e:25:bc:d8:a0:7e:e1:e1:97:9c:73:a7:
                    81:94:74:0a:12:f6:2b:f1:c7:94:35:1b:50:e4:d5:
                    ed:a8:3e:8d:ac:5c:25:79:97:2b:0f:0e:4a:a7:2f:
                    cc:4c:ae:91:4e:21:28:77:c6:95:ea:e8:5c:36:04:
                    f7:be:63:9f:1b:ac:e5:e4:66:e3:42:56:24:2c:6e:
                    84:5f:b2:89:81:ed:77:0f:dd:ae:df:f6:98:9c:77:
                    9a:04:21:4b:e5:2e:95:05:28:de:5a:38:e5:df:91:
                    c9:05:2e:a7:31:cb:04:76:82:89:4f:b0:77:d3:4e:
                    4c:fe:b6:24:ef:63:90:61:5e:99:94:d2:9d:6f:51:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E3:FE:3C:BF:4B:47:F3:F5:64:D6:3A:1D:22:25:47:2D:DF:F4:6A
            X509v3 Authority Key Identifier:
                keyid:BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/323830343a336630383a343030303a3a2f33342d3334203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f08:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a7:63:c7:42:ff:c0:09:37:31:92:20:9f:3b:7e:ed:0a:b6:c2:
         27:3c:44:fb:af:66:97:54:91:eb:79:69:f9:19:b7:f0:65:a5:
         f2:01:37:b0:37:73:d8:87:4c:41:cf:bb:3e:9a:a9:f5:17:2e:
         f2:16:65:cf:2d:97:83:fd:fe:24:26:d6:40:38:44:9d:ad:9e:
         b6:35:cf:4a:a4:f1:96:2e:64:75:47:16:cf:9a:d1:f3:2d:21:
         42:89:2e:35:ce:e6:bd:a3:0a:cb:1d:0d:c2:0e:f1:63:bd:90:
         8d:0f:e2:65:ff:82:75:3d:8a:33:85:d5:f1:0f:46:47:9a:2e:
         82:9b:72:48:c6:e7:a3:5b:28:c4:05:53:ce:27:52:5c:59:09:
         0f:e5:60:d7:9c:8b:2c:c7:74:6a:d9:2d:87:d9:23:23:6b:d1:
         93:15:16:be:ce:eb:e2:df:29:a8:ec:9d:03:c5:b8:95:d2:41:
         80:ce:41:e4:6f:af:08:3e:27:e4:fd:d4:1e:29:6c:11:cc:08:
         4d:9a:1c:93:d8:d3:fc:33:36:45:2b:98:3b:9e:b5:9d:16:1b:
         56:10:a1:dd:34:e7:34:b6:e3:34:0c:d4:58:da:66:e8:7e:18:
         4d:96:16:3f:04:eb:d0:f8:23:12:c6:87:b3:8d:29:c1:c1:03:
         b9:ed:22:a8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYfEk2CTZGLrUrQYYSeA1aPj8kUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNCRTdCQzNBNzUwNkI3MzNCRjlFRjE5MkU3RUNGMzM0
OTcwNzc3QjAeFw0yMzEwMzAxOTM0NDJaFw0yNDEwMjgxOTM5NDJaMDMxMTAvBgNV
BAMTKDU1RTNGRTNDQkY0QjQ3RjNGNTY0RDYzQTFEMjIyNTQ3MkRERkY0NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIl8fAqX9pw0fG75CLFZgMwFsF
ERZPrKOssFlQ3nqA2tCT7DsYDXnz/sf+cD5oAoEciM9okf/Ozole8gbzXHHStS1s
xWzFDVrxUMwFtRpeMd9Au20dFNl1U2gas8VtUjL5PTc9UpX/h3vnr/1+eKNUL5Hp
Sed0ie9gUl4lvNigfuHhl5xzp4GUdAoS9ivxx5Q1G1Dk1e2oPo2sXCV5lysPDkqn
L8xMrpFOISh3xpXq6Fw2BPe+Y58brOXkZuNCViQsboRfsomB7XcP3a7f9picd5oE
IUvlLpUFKN5aOOXfkckFLqcxywR2golPsHfTTkz+tiTvY5BhXpmU0p1vUfU7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUVeP+PL9LR/P1ZNY6HSIlRy3f9GowHwYDVR0j
BBgwFoAUvL57w6dQa3M7+e8ZLn7PM0lwd3swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JqanN0RHNkczdRdENjcmRnZXpUREJ0ZjFaY1VVYURLTjViOE1UMVE2
VEEvMC9CQ0JFN0JDM0E3NTA2QjczM0JGOUVGMTkyRTdFQ0YzMzQ5NzA3NzdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JDQkU3QkMzQTc1MDZCNzMz
QkY5RUYxOTJFN0VDRjMzNDk3MDc3N0IuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiampzdERzZHM3UXRDY3JkZ2V6VERCdGYxWmNVVWFES041YjhNVDFRNlRBLzAv
MzIzODMwMzQzYTMzNjYzMDM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjM2MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEPwhAMA0GCSqGSIb3DQEBCwUA
A4IBAQCnY8dC/8AJNzGSIJ87fu0KtsInPET7r2aXVJHreWn5GbfwZaXyATewN3PY
h0xBz7s+mqn1Fy7yFmXPLZeD/f4kJtZAOESdrZ62Nc9KpPGWLmR1RxbPmtHzLSFC
iS41zua9owrLHQ3CDvFjvZCND+Jl/4J1PYozhdXxD0ZHmi6Cm3JIxuejWyjEBVPO
J1JcWQkP5WDXnIssx3Rq2S2H2SMja9GTFRa+zuvi3ymo7J0DxbiV0kGAzkHkb68I
Pifk/dQeKWwRzAhNmhyT2NP8MzZFK5g7nrWdFhtWEKHdNOc0tuM0DNRY2mbofhhN
lhY/BOvQ+CMSxoezjSnBwQO57SKo
-----END CERTIFICATE-----