Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/323830343a6363343a3a2f33322d3438203d3e203532353531.roa
File:                     323830343a6363343a3a2f33322d3438203d3e203532353531.roa (raw, json)
Hash identifier:          FDqhUnP6pgDF9O5N3Z7ntMULjeAnisA7ccKL/ogbEKY=
Subject key identifier:   15:78:32:79:77:AF:EF:1A:0B:5E:60:97:AA:E4:AF:C2:8E:AC:E3:2B
Certificate issuer:       /CN=1A9778FA07F1242B640D5E839808359F0C9A11CF
Certificate serial:       3109433879FFE2E72545AC5FA5DDF6AC9243DAFC
Authority key identifier: 1A:97:78:FA:07:F1:24:2B:64:0D:5E:83:98:08:35:9F:0C:9A:11:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9778FA07F1242B640D5E839808359F0C9A11CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/323830343a6363343a3a2f33322d3438203d3e203532353531.roa
Signing time:             Tue 25 Oct 2022 18:36:19 +0000
ROA not before:           Tue 25 Oct 2022 18:31:19 +0000
ROA not after:            Tue 24 Oct 2023 18:36:19 +0000
asID:                     52551
IP address blocks:        2804:cc4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:09:43:38:79:ff:e2:e7:25:45:ac:5f:a5:dd:f6:ac:92:43:da:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A9778FA07F1242B640D5E839808359F0C9A11CF
        Validity
            Not Before: Oct 25 18:31:19 2022 GMT
            Not After : Oct 24 18:36:19 2023 GMT
        Subject: CN=1578327977AFEF1A0B5E6097AAE4AFC28EACE32B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:8a:0c:45:c1:77:99:91:7e:8e:64:dc:48:
                    03:c8:49:a7:7f:48:fb:48:26:0b:f8:a4:ec:e1:a7:
                    61:90:a4:dc:f2:eb:ec:f9:e6:ff:59:ae:bb:f5:67:
                    f3:94:26:c9:5b:72:b8:72:8a:82:ac:4e:9c:07:56:
                    94:6b:b1:08:76:4f:c7:af:64:41:d4:2e:42:2c:21:
                    07:a3:a0:ef:96:59:f3:82:fe:87:18:72:7b:d9:ca:
                    b3:3a:85:af:39:74:94:76:5a:6c:1f:0f:6e:d1:7e:
                    28:95:1d:5a:62:f8:c4:8b:28:19:84:31:14:95:8e:
                    70:a0:e1:15:7f:69:ae:3b:cf:cc:f2:96:91:e3:ac:
                    3f:df:91:b5:41:19:f1:a9:d0:ad:31:b8:01:ae:de:
                    95:0c:89:c4:85:ce:a4:a3:cf:4d:47:ae:68:f1:c6:
                    96:f6:7a:a5:d8:58:18:f1:b8:1c:1a:4d:1b:f7:59:
                    0e:76:52:dc:8a:fd:d0:01:aa:f9:fd:6f:80:35:b2:
                    22:64:f5:cb:33:de:91:40:dc:bc:1d:c3:c1:da:7f:
                    35:1f:34:10:0a:f3:d9:71:0a:46:51:50:d4:b5:18:
                    b3:b4:5e:a8:6f:28:f1:bc:20:3e:65:94:33:d0:8e:
                    fe:a7:50:27:22:9b:15:fe:a0:92:d5:11:b9:ec:b3:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:78:32:79:77:AF:EF:1A:0B:5E:60:97:AA:E4:AF:C2:8E:AC:E3:2B
            X509v3 Authority Key Identifier:
                keyid:1A:97:78:FA:07:F1:24:2B:64:0D:5E:83:98:08:35:9F:0C:9A:11:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/1A9778FA07F1242B640D5E839808359F0C9A11CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9778FA07F1242B640D5E839808359F0C9A11CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/323830343a6363343a3a2f33322d3438203d3e203532353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:87:15:d3:29:7e:58:a3:07:87:36:6b:a3:19:43:3f:65:01:
         fc:a3:78:c8:91:6a:61:74:ff:6e:5b:04:8b:3b:9d:44:f2:2a:
         b3:a7:66:ec:50:97:9e:b6:0f:4f:39:44:de:26:fd:29:96:9e:
         92:da:ab:17:ab:2b:92:8e:8c:04:90:1e:f8:f7:87:6e:f8:73:
         fe:05:0e:5b:8b:d7:7b:1a:9e:73:5c:ab:75:0e:3b:d1:cc:03:
         eb:85:d2:d8:0f:7d:6a:84:e3:50:b1:8a:74:0d:84:bf:78:a1:
         d8:5b:21:51:ab:9c:ff:13:70:52:ca:f7:12:5a:a1:7d:a0:b9:
         52:48:b4:f8:df:44:bc:76:9b:22:1b:8d:c7:ce:2e:71:d4:20:
         22:01:14:b8:40:fe:af:19:c5:55:ed:23:ab:e4:8c:8d:ad:ca:
         de:fa:07:69:0b:7a:a8:78:2e:3c:8f:8e:2a:07:42:b9:b2:d4:
         2d:dc:f3:dd:a5:57:03:6c:8c:71:e0:52:75:4e:21:f0:31:74:
         56:c1:b7:8d:46:fe:8c:81:8f:89:9d:b4:50:d9:25:29:9b:f6:
         93:19:e7:04:8a:6d:d6:39:27:dd:56:5f:7e:9a:8f:a6:2c:66:
         31:b3:33:5e:94:3d:7d:ba:b3:0d:48:7e:2f:c6:d8:d0:dc:66:
         ac:f5:ec:9f
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUMQlDOHn/4uclRaxfpd32rJJD2vwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5Nzc4RkEwN0YxMjQyQjY0MEQ1RTgzOTgwODM1OUYw
QzlBMTFDRjAeFw0yMjEwMjUxODMxMTlaFw0yMzEwMjQxODM2MTlaMDMxMTAvBgNV
BAMTKDE1NzgzMjc5NzdBRkVGMUEwQjVFNjA5N0FBRTRBRkMyOEVBQ0UzMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOIoMRcF3mZF+jmTcSAPISad/
SPtIJgv4pOzhp2GQpNzy6+z55v9Zrrv1Z/OUJslbcrhyioKsTpwHVpRrsQh2T8ev
ZEHULkIsIQejoO+WWfOC/ocYcnvZyrM6ha85dJR2WmwfD27RfiiVHVpi+MSLKBmE
MRSVjnCg4RV/aa47z8zylpHjrD/fkbVBGfGp0K0xuAGu3pUMicSFzqSjz01Hrmjx
xpb2eqXYWBjxuBwaTRv3WQ52UtyK/dABqvn9b4A1siJk9csz3pFA3Lwdw8HafzUf
NBAK89lxCkZRUNS1GLO0XqhvKPG8ID5llDPQjv6nUCcimxX+oJLVEbnss1jrAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUFXgyeXev7xoLXmCXquSvwo6s4yswHwYDVR0j
BBgwFoAUGpd4+gfxJCtkDV6DmAg1nwyaEc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3ZXZGl1TEExckx6djFOOEI4d3c1S2FReVY5M0s2eWpWSnJSamliRDlM
ZWMvMC8xQTk3NzhGQTA3RjEyNDJCNjQwRDVFODM5ODA4MzU5RjBDOUExMUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFBOTc3OEZBMDdGMTI0MkI2
NDBENUU4Mzk4MDgzNTlGMEM5QTExQ0YuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N2V2RpdUxBMXJMenYxTjhCOHd3NUthUXlWOTNLNnlqVkpyUmppYkQ5TGVjLzAv
MzIzODMwMzQzYTYzNjMzNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNTM1
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAzEMA0GCSqGSIb3DQEBCwUAA4IBAQAFhxXTKX5YoweH
NmujGUM/ZQH8o3jIkWphdP9uWwSLO51E8iqzp2bsUJeetg9POUTeJv0plp6S2qsX
qyuSjowEkB7494du+HP+BQ5bi9d7Gp5zXKt1DjvRzAPrhdLYD31qhONQsYp0DYS/
eKHYWyFRq5z/E3BSyvcSWqF9oLlSSLT430S8dpsiG43Hzi5x1CAiARS4QP6vGcVV
7SOr5IyNrcre+gdpC3qoeC48j44qB0K5stQt3PPdpVcDbIxx4FJ1TiHwMXRWwbeN
Rv6MgY+JnbRQ2SUpm/aTGecEim3WOSfdVl9+mo+mLGYxszNelD19urMNSH4vxtjQ
3Gas9eyf
-----END CERTIFICATE-----