Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3635303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a3635303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          Fyl89nOuZOk2JwIMMPmkHXo+eH5lOzEhMotrpZFUy7c=
Subject key identifier:   7B:CD:6A:19:1C:C6:57:50:15:08:F6:4E:E2:03:2B:5C:19:2C:E9:38
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       1D65B2C6009C1E7E77CE0B3981BE2AB2AB440DB0
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3635303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:10:00 +0000
ROA not before:           Tue 20 Dec 2022 15:05:00 +0000
ROA not after:            Tue 19 Dec 2023 15:10:00 +0000
asID:                     262468
IP address blocks:        2804:e94:650::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:65:b2:c6:00:9c:1e:7e:77:ce:0b:39:81:be:2a:b2:ab:44:0d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:05:00 2022 GMT
            Not After : Dec 19 15:10:00 2023 GMT
        Subject: CN=7BCD6A191CC657501508F64EE2032B5C192CE938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:13:af:fa:74:17:28:ef:54:7e:3e:85:1f:
                    81:07:9d:cf:a9:97:7f:8c:13:3b:29:88:7a:df:5a:
                    25:e3:52:99:6e:6b:d8:ff:e1:89:d6:61:64:64:eb:
                    e4:c4:a2:94:e4:9f:0e:13:9d:9d:e9:4a:29:a3:fd:
                    a4:0f:b4:41:7c:a3:7b:cd:d2:4f:c7:3f:67:86:9a:
                    47:84:49:5c:46:56:c2:41:1a:04:e6:8b:d6:1c:17:
                    e5:a6:a6:49:a3:0d:72:ad:06:de:0c:0a:e3:bb:de:
                    ba:06:85:1d:79:32:52:12:c3:39:e6:a9:7d:e2:6f:
                    e7:4b:a2:90:41:6b:c3:8b:5a:a7:ea:14:e6:59:f3:
                    b4:6f:fc:bc:bb:b4:96:9a:9e:43:8d:2f:47:17:25:
                    9e:b7:16:83:f6:d1:61:d3:ea:1f:e4:21:69:de:1b:
                    ad:c2:85:a6:15:70:ce:e6:c8:cb:04:06:34:7e:71:
                    4f:24:d3:75:ad:34:eb:9d:b7:82:73:b9:7f:cd:25:
                    8a:d2:b0:8a:26:13:35:5a:8e:52:83:98:63:60:9c:
                    ea:85:ba:3f:a0:78:a3:a6:c0:94:b2:12:b6:79:26:
                    3c:cb:55:14:80:a5:b4:88:2e:e4:f0:01:e9:d3:15:
                    59:21:7a:35:16:42:78:71:4d:12:16:42:00:45:93:
                    26:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CD:6A:19:1C:C6:57:50:15:08:F6:4E:E2:03:2B:5C:19:2C:E9:38
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3635303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:650::/44

    Signature Algorithm: sha256WithRSAEncryption
         50:88:a2:19:52:68:bc:38:d6:ee:fe:44:42:a6:88:a1:de:0f:
         87:06:90:6b:7f:0d:d2:ef:df:95:57:a7:a9:04:22:6f:4f:81:
         50:0b:75:cc:66:fc:89:58:59:9b:ad:af:fc:d5:7e:65:36:3c:
         90:9a:00:7d:70:39:7b:72:ce:ef:7b:41:7a:25:b5:f0:ba:63:
         76:6b:75:45:29:3b:79:99:3b:79:6d:99:9b:2f:00:8c:1a:5f:
         02:35:9b:27:ff:07:5b:d7:2d:45:f6:c3:54:55:b9:8b:b6:dc:
         79:c1:d8:32:9a:0d:fa:2b:c6:3a:6b:5f:c1:0b:72:62:c3:13:
         0f:58:12:38:ef:d3:3f:6f:bf:28:97:95:33:ac:b6:98:2f:08:
         5f:dd:e5:01:6c:b2:d4:32:ef:f1:78:ec:7e:35:c1:63:9a:cf:
         86:55:04:34:7d:24:bc:eb:74:4d:31:a0:b8:5f:ec:cf:2e:c5:
         ce:45:47:05:41:3a:94:f3:99:66:ef:36:9c:07:4f:be:9d:f6:
         1b:0b:e1:c9:9c:ba:e6:f0:d3:a0:29:45:a3:c2:e4:5c:db:ad:
         93:4f:84:94:dd:44:c1:e3:5d:bc:fc:bd:1b:10:39:99:dd:46:
         ae:0c:9f:43:75:23:a8:9b:87:0c:29:92:59:06:98:1a:b5:28:
         c5:5c:01:32
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUHWWyxgCcHn53zgs5gb4qsqtEDbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVEMUNEQzQwNUI1Mjg1NTRCMjRENjdFRkIxN0E3RDIw
REE2ODMzMzAeFw0yMjEyMjAxNTA1MDBaFw0yMzEyMTkxNTEwMDBaMDMxMTAvBgNV
BAMTKDdCQ0Q2QTE5MUNDNjU3NTAxNTA4RjY0RUUyMDMyQjVDMTkyQ0U5MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxROv+nQXKO9Ufj6FH4EHnc+p
l3+MEzspiHrfWiXjUplua9j/4YnWYWRk6+TEopTknw4TnZ3pSimj/aQPtEF8o3vN
0k/HP2eGmkeESVxGVsJBGgTmi9YcF+WmpkmjDXKtBt4MCuO73roGhR15MlISwznm
qX3ib+dLopBBa8OLWqfqFOZZ87Rv/Ly7tJaankONL0cXJZ63FoP20WHT6h/kIWne
G63ChaYVcM7myMsEBjR+cU8k03WtNOudt4JzuX/NJYrSsIomEzVajlKDmGNgnOqF
uj+geKOmwJSyErZ5JjzLVRSApbSILuTwAenTFVkhejUWQnhxTRIWQgBFkyYZAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUe81qGRzGV1AVCPZO4gMrXBks6TgwHwYDVR0j
BBgwFoAUHtHNxAW1KFVLJNZ++xen0g2mgzMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhydEh0cFNnY1ljSmNlY1dNNkM4NFpma0h3TjE0c0Z2c1U3YjNRaTNG
aVcvMC8xRUQxQ0RDNDA1QjUyODU1NEIyNEQ2N0VGQjE3QTdEMjBEQTY4MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFRDFDREM0MDVCNTI4NTU0
QjI0RDY3RUZCMTdBN0QyMERBNjgzMzMuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4cnRIdHBTZ2NZY0pjZWNXTTZDODRaZmtId04xNHNGdnNVN2IzUWkzRmlXLzAv
MzIzODMwMzQzYTY1MzkzNDNhMzYzNTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw
MzIzNjMyMzQzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAQOlAZQMA0GCSqGSIb3DQEBCwUAA4IB
AQBQiKIZUmi8ONbu/kRCpoih3g+HBpBrfw3S79+VV6epBCJvT4FQC3XMZvyJWFmb
ra/81X5lNjyQmgB9cDl7cs7ve0F6JbXwumN2a3VFKTt5mTt5bZmbLwCMGl8CNZsn
/wdb1y1F9sNUVbmLttx5wdgymg36K8Y6a1/BC3JiwxMPWBI479M/b78ol5UzrLaY
Lwhf3eUBbLLUMu/xeOx+NcFjms+GVQQ0fSS863RNMaC4X+zPLsXORUcFQTqU85lm
7zacB0++nfYbC+HJnLrm8NOgKUWjwuRc262TT4SU3UTB4128/L0bEDmZ3UauDJ9D
dSOom4cMKZJZBpgatSjFXAEy
-----END CERTIFICATE-----