Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/323830343a323133633a3a2f33322d3438203d3e20323634353434.roa
File:                     323830343a323133633a3a2f33322d3438203d3e20323634353434.roa (raw, json)
Hash identifier:          X2X5RnhPytyhGscX+6W6M2QYSfti7G693UdjfLHNFgE=
Subject key identifier:   83:CD:BB:E3:8B:0E:EC:B2:C7:96:B8:89:E1:24:E4:7F:3B:36:DC:04
Certificate issuer:       /CN=E092437C3A4C234394EB5991D5BE5C5235768D77
Certificate serial:       59FF132410C6015464BFD3F42046BD68F297E12D
Authority key identifier: E0:92:43:7C:3A:4C:23:43:94:EB:59:91:D5:BE:5C:52:35:76:8D:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E092437C3A4C234394EB5991D5BE5C5235768D77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/323830343a323133633a3a2f33322d3438203d3e20323634353434.roa
Signing time:             Sun 12 Mar 2023 20:19:30 +0000
ROA not before:           Sun 12 Mar 2023 20:14:30 +0000
ROA not after:            Sun 10 Mar 2024 20:19:30 +0000
asID:                     264544
IP address blocks:        2804:213c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ff:13:24:10:c6:01:54:64:bf:d3:f4:20:46:bd:68:f2:97:e1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E092437C3A4C234394EB5991D5BE5C5235768D77
        Validity
            Not Before: Mar 12 20:14:30 2023 GMT
            Not After : Mar 10 20:19:30 2024 GMT
        Subject: CN=83CDBBE38B0EECB2C796B889E124E47F3B36DC04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d1:34:64:f6:35:da:11:c5:99:0c:11:90:72:
                    41:dd:dd:52:2a:f5:fe:74:b3:d8:1f:75:a4:49:3a:
                    87:f5:fa:5b:54:0a:81:93:4b:39:cd:ca:68:2f:84:
                    ca:08:7c:db:a6:e4:37:1b:8f:68:17:fb:ff:b7:6d:
                    2b:6b:88:39:b8:1c:ee:d5:1c:85:3e:97:0a:a8:40:
                    12:c1:7b:dc:9f:60:55:06:73:7a:50:c9:fc:df:d8:
                    da:58:3f:95:3e:33:ec:07:d5:59:43:5b:d0:d4:8b:
                    4a:52:12:25:4b:ff:89:e0:7a:11:5c:30:aa:fe:5c:
                    df:c5:5e:16:f4:1e:17:71:0b:32:3a:37:cb:17:6e:
                    db:2b:0e:80:02:f2:19:8b:17:9a:27:7c:26:41:49:
                    bc:08:f6:23:b4:40:ef:8b:76:39:62:a8:de:e0:62:
                    5a:d1:67:df:f7:25:68:48:8d:66:4d:fd:65:89:18:
                    1d:5b:23:93:c5:09:31:06:ce:84:80:66:43:2a:db:
                    35:97:b7:fc:9f:5a:bb:50:f1:3b:ff:44:ee:2a:63:
                    39:f9:f1:4f:3d:68:8e:ce:2c:ad:4a:b5:b5:e4:14:
                    71:32:51:cd:69:54:bb:40:fd:7e:2a:96:0d:eb:d6:
                    8b:ec:70:c7:d7:75:91:d7:42:00:b4:c6:10:bb:93:
                    9f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CD:BB:E3:8B:0E:EC:B2:C7:96:B8:89:E1:24:E4:7F:3B:36:DC:04
            X509v3 Authority Key Identifier:
                keyid:E0:92:43:7C:3A:4C:23:43:94:EB:59:91:D5:BE:5C:52:35:76:8D:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/E092437C3A4C234394EB5991D5BE5C5235768D77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E092437C3A4C234394EB5991D5BE5C5235768D77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/323830343a323133633a3a2f33322d3438203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:213c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:24:ae:6c:3d:12:e6:9c:4d:9b:ef:6a:f8:24:16:4d:4c:93:
         de:d1:58:50:3f:76:51:48:9a:7f:9b:be:6d:d2:40:e8:3d:00:
         fb:0e:9f:79:69:ab:a9:fd:6f:27:a7:df:e1:d9:30:b0:a1:c5:
         fc:a8:ff:31:59:07:87:2e:62:d7:8b:11:42:d8:86:28:08:31:
         c1:3e:f5:7b:07:d7:f9:c0:ac:01:06:61:f9:4e:a8:78:6c:ca:
         b0:8b:33:a6:85:da:0b:a0:4b:de:94:05:5c:ce:e9:ac:7c:84:
         9d:08:e2:58:d6:8d:a8:25:de:c5:45:d4:bd:cc:e0:be:ba:13:
         3f:a6:2d:d5:1f:62:14:74:fc:c7:58:9a:30:1c:44:0e:0a:8b:
         9a:09:7f:11:92:1b:21:83:46:e4:6d:3f:82:04:03:1b:d5:f8:
         c4:81:fd:96:14:d8:aa:88:ff:1b:e3:e3:96:d0:51:c8:73:42:
         ca:5d:6a:c7:a1:7c:04:48:2a:12:6d:84:4e:e2:d1:7c:09:cc:
         94:69:c3:42:63:b3:5b:07:72:79:7f:03:ec:eb:7d:06:33:44:
         8b:13:66:27:73:0a:07:be:6e:c5:4f:c7:d8:4a:ae:35:67:1c:
         33:23:61:18:58:66:b4:30:24:fd:70:c5:4c:ae:a0:be:63:a7:
         33:32:2f:7a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWf8TJBDGAVRkv9P0IEa9aPKX4S0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA5MjQzN0MzQTRDMjM0Mzk0RUI1OTkxRDVCRTVDNTIz
NTc2OEQ3NzAeFw0yMzAzMTIyMDE0MzBaFw0yNDAzMTAyMDE5MzBaMDMxMTAvBgNV
BAMTKDgzQ0RCQkUzOEIwRUVDQjJDNzk2Qjg4OUUxMjRFNDdGM0IzNkRDMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0TRk9jXaEcWZDBGQckHd3VIq
9f50s9gfdaRJOof1+ltUCoGTSznNymgvhMoIfNum5Dcbj2gX+/+3bStriDm4HO7V
HIU+lwqoQBLBe9yfYFUGc3pQyfzf2NpYP5U+M+wH1VlDW9DUi0pSEiVL/4ngehFc
MKr+XN/FXhb0HhdxCzI6N8sXbtsrDoAC8hmLF5onfCZBSbwI9iO0QO+LdjliqN7g
YlrRZ9/3JWhIjWZN/WWJGB1bI5PFCTEGzoSAZkMq2zWXt/yfWrtQ8Tv/RO4qYzn5
8U89aI7OLK1KtbXkFHEyUc1pVLtA/X4qlg3r1ovscMfXdZHXQgC0xhC7k59HAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUg82744sO7LLHlriJ4STkfzs23AQwHwYDVR0j
BBgwFoAU4JJDfDpMI0OU61mR1b5cUjV2jXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2FxZ1lMQjdLbmcyM1ZWMXJ1OXRKVWZSNzdQdnZuTE1CckM2d1hpVXpY
OWIvMC9FMDkyNDM3QzNBNEMyMzQzOTRFQjU5OTFENUJFNUM1MjM1NzY4RDc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UwOTI0MzdDM0E0QzIzNDM5
NEVCNTk5MUQ1QkU1QzUyMzU3NjhENzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NhcWdZTEI3S25nMjNWVjFydTl0SlVmUjc3UHZ2bkxNQnJDNndYaVV6WDliLzAv
MzIzODMwMzQzYTMyMzEzMzYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzUzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQhPDANBgkqhkiG9w0BAQsFAAOCAQEAeiSubD0S
5pxNm+9q+CQWTUyT3tFYUD92UUiaf5u+bdJA6D0A+w6feWmrqf1vJ6ff4dkwsKHF
/Kj/MVkHhy5i14sRQtiGKAgxwT71ewfX+cCsAQZh+U6oeGzKsIszpoXaC6BL3pQF
XM7prHyEnQjiWNaNqCXexUXUvczgvroTP6Yt1R9iFHT8x1iaMBxEDgqLmgl/EZIb
IYNG5G0/ggQDG9X4xIH9lhTYqoj/G+PjltBRyHNCyl1qx6F8BEgqEm2ETuLRfAnM
lGnDQmOzWwdyeX8D7Ot9BjNEixNmJ3MKB75uxU/H2EquNWccMyNhGFhmtDAk/XDF
TK6gvmOnMzIveg==
-----END CERTIFICATE-----