Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/323830343a326333633a3a2f33322d3335203d3e20323635323035.roa
File:                     323830343a326333633a3a2f33322d3335203d3e20323635323035.roa (raw, json)
Hash identifier:          95RHgd+/eZ+dlKOPB2LQApC/D3NunFkHb/OGr7aiSj4=
Subject key identifier:   8C:61:16:8F:3A:A7:A7:C5:04:62:EE:0D:80:04:BC:6A:C0:7A:59:11
Certificate issuer:       /CN=E6884DDE2F5B2C7B995B400D56CF93DB81460987
Certificate serial:       02A1FEB350B560EFA0999CF94ABA3890510649F1
Authority key identifier: E6:88:4D:DE:2F:5B:2C:7B:99:5B:40:0D:56:CF:93:DB:81:46:09:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6884DDE2F5B2C7B995B400D56CF93DB81460987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/323830343a326333633a3a2f33322d3335203d3e20323635323035.roa
Signing time:             Wed 11 Jan 2023 18:01:34 +0000
ROA not before:           Wed 11 Jan 2023 17:56:34 +0000
ROA not after:            Wed 10 Jan 2024 18:01:34 +0000
asID:                     265205
IP address blocks:        2804:2c3c::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a1:fe:b3:50:b5:60:ef:a0:99:9c:f9:4a:ba:38:90:51:06:49:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6884DDE2F5B2C7B995B400D56CF93DB81460987
        Validity
            Not Before: Jan 11 17:56:34 2023 GMT
            Not After : Jan 10 18:01:34 2024 GMT
        Subject: CN=8C61168F3AA7A7C50462EE0D8004BC6AC07A5911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:2e:9d:da:aa:5b:b9:46:45:c2:0b:f2:ac:
                    b3:7b:07:d1:e3:6e:e4:3c:dd:fc:bf:fa:0a:02:b1:
                    bc:a5:af:3d:5f:ca:34:72:99:40:eb:49:83:00:29:
                    a9:ec:79:6d:15:58:d1:63:08:69:af:6c:e9:02:b2:
                    e4:3d:ec:77:2e:5e:f7:15:fd:f0:87:9a:17:a2:85:
                    88:67:ce:9c:ae:1b:2a:41:06:12:47:52:be:20:86:
                    b6:85:b0:84:3e:32:29:0c:e8:c7:9b:ba:17:e2:2a:
                    22:f5:f4:8a:e6:1b:31:4c:ab:c0:69:88:2d:42:a5:
                    9d:d1:70:5e:b4:fc:d3:92:9c:eb:ce:8f:a6:c3:79:
                    8a:84:43:d5:95:93:0b:3f:17:b7:01:e0:48:8e:f6:
                    05:7a:ec:e1:09:39:0a:84:82:61:c7:db:54:19:63:
                    8b:95:a9:ca:3e:30:10:cd:c4:80:19:63:86:28:45:
                    9b:c7:cd:cc:7e:b2:70:b9:45:23:24:07:2d:a8:5c:
                    29:35:94:03:5b:11:fd:a0:b6:ea:30:0d:b5:eb:35:
                    93:57:46:3e:ce:13:33:33:de:f1:f6:c9:da:95:9c:
                    8d:63:11:11:4c:33:fe:54:dd:8c:bd:bf:b2:0b:bc:
                    6f:1d:de:9e:7b:09:13:d4:59:9e:38:40:d9:ac:f1:
                    e2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:61:16:8F:3A:A7:A7:C5:04:62:EE:0D:80:04:BC:6A:C0:7A:59:11
            X509v3 Authority Key Identifier:
                keyid:E6:88:4D:DE:2F:5B:2C:7B:99:5B:40:0D:56:CF:93:DB:81:46:09:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/E6884DDE2F5B2C7B995B400D56CF93DB81460987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6884DDE2F5B2C7B995B400D56CF93DB81460987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/323830343a326333633a3a2f33322d3335203d3e20323635323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:df:b3:66:96:d8:69:75:ff:a7:42:c1:5d:ec:fb:11:a2:25:
         b8:b9:3c:94:14:a9:96:71:e3:f8:88:f7:fb:fb:1b:d3:f8:77:
         d8:bb:db:d3:1c:1b:e0:f8:8d:49:1e:7d:cd:51:51:17:d2:37:
         62:df:e0:89:28:38:52:6d:07:72:35:f8:59:d2:1d:18:99:f9:
         2b:41:c1:31:6c:f4:a3:0e:1e:9f:e8:3f:07:50:02:09:9e:51:
         36:c7:67:d6:01:14:bc:f1:ff:67:f5:e9:d8:ac:cc:97:08:b6:
         26:d4:82:63:5d:97:e0:1c:ae:f6:87:37:20:47:3b:04:8f:d0:
         ec:4e:83:05:99:45:c5:fa:19:6c:ec:73:cd:6e:ac:40:55:ea:
         d1:ac:5e:be:35:b4:2d:58:a8:09:00:77:67:c4:7f:85:0c:b3:
         06:61:12:a7:d9:1d:db:bd:a0:ac:9e:b7:f4:fb:5a:5c:09:6a:
         77:a7:59:0b:76:f2:23:73:79:ae:9c:0c:ad:8d:17:a1:68:92:
         43:71:57:ad:7b:46:6d:95:c1:81:40:ae:c4:94:fe:41:b4:cb:
         31:7c:55:10:14:40:1a:2e:50:07:f9:2d:c1:4f:a5:47:30:7c:
         39:c2:8c:b9:25:4c:9d:32:87:e9:d9:32:f7:a9:cd:52:03:6b:
         71:bd:3a:d2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUAqH+s1C1YO+gmZz5Sro4kFEGSfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY4ODREREUyRjVCMkM3Qjk5NUI0MDBENTZDRjkzREI4
MTQ2MDk4NzAeFw0yMzAxMTExNzU2MzRaFw0yNDAxMTAxODAxMzRaMDMxMTAvBgNV
BAMTKDhDNjExNjhGM0FBN0E3QzUwNDYyRUUwRDgwMDRCQzZBQzA3QTU5MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnTi6d2qpbuUZFwgvyrLN7B9Hj
buQ83fy/+goCsbylrz1fyjRymUDrSYMAKanseW0VWNFjCGmvbOkCsuQ97HcuXvcV
/fCHmheihYhnzpyuGypBBhJHUr4ghraFsIQ+MikM6MebuhfiKiL19IrmGzFMq8Bp
iC1CpZ3RcF60/NOSnOvOj6bDeYqEQ9WVkws/F7cB4EiO9gV67OEJOQqEgmHH21QZ
Y4uVqco+MBDNxIAZY4YoRZvHzcx+snC5RSMkBy2oXCk1lANbEf2gtuowDbXrNZNX
Rj7OEzMz3vH2ydqVnI1jERFMM/5U3Yy9v7ILvG8d3p57CRPUWZ44QNms8eKnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjGEWjzqnp8UEYu4NgAS8asB6WREwHwYDVR0j
BBgwFoAU5ohN3i9bLHuZW0ANVs+T24FGCYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlMyMVV4U0d2N0tMQm1tWFdpOXBkSmtyb1pWUXphTHJ6WVh0Qkp6Sk1y
QWcvMC9FNjg4NERERTJGNUIyQzdCOTk1QjQwMEQ1NkNGOTNEQjgxNDYwOTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U2ODg0RERFMkY1QjJDN0I5
OTVCNDAwRDU2Q0Y5M0RCODE0NjA5ODcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JTMjFVeFNHdjdLTEJtbVhXaTlwZEprcm9aVlF6YUxyellYdEJKekpNckFnLzAv
MzIzODMwMzQzYTMyNjMzMzYzM2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjM1
MzIzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQsPDANBgkqhkiG9w0BAQsFAAOCAQEABN+zZpbY
aXX/p0LBXez7EaIluLk8lBSplnHj+Ij3+/sb0/h32Lvb0xwb4PiNSR59zVFRF9I3
Yt/giSg4Um0HcjX4WdIdGJn5K0HBMWz0ow4en+g/B1ACCZ5RNsdn1gEUvPH/Z/Xp
2KzMlwi2JtSCY12X4Byu9oc3IEc7BI/Q7E6DBZlFxfoZbOxzzW6sQFXq0axevjW0
LVioCQB3Z8R/hQyzBmESp9kd272grJ639PtaXAlqd6dZC3byI3N5rpwMrY0XoWiS
Q3FXrXtGbZXBgUCuxJT+QbTLMXxVEBRAGi5QB/ktwU+lRzB8OcKMuSVMnTKH6dky
96nNUgNrcb060g==
-----END CERTIFICATE-----