Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3638303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a3638303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          umM5qV5GtaYfaGQwnymsHkv3xdF6cAxSH/lMqkjSqqQ=
Subject key identifier:   BC:5C:86:75:58:4B:43:46:20:75:E5:59:CD:37:A9:DC:27:A2:E8:93
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       62576FBCEE2611073FCB303C8FF8E515B52DE1FB
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3638303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:41 +0000
ROA not before:           Tue 20 Dec 2022 15:04:41 +0000
ROA not after:            Tue 19 Dec 2023 15:09:41 +0000
asID:                     262468
IP address blocks:        2804:e94:680::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:57:6f:bc:ee:26:11:07:3f:cb:30:3c:8f:f8:e5:15:b5:2d:e1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:41 2022 GMT
            Not After : Dec 19 15:09:41 2023 GMT
        Subject: CN=BC5C8675584B43462075E559CD37A9DC27A2E893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b2:20:2c:f6:5b:a3:af:7f:7a:96:13:dc:51:
                    df:9e:1d:ef:5b:ba:92:f4:c4:c1:7a:7a:17:97:6a:
                    00:7b:cc:ea:cf:ac:b9:26:65:e1:6b:04:99:c7:3b:
                    9d:88:e8:f3:87:62:9e:00:5c:bd:16:68:68:a0:7b:
                    17:2e:10:1f:be:9e:bb:9f:61:b6:51:f0:90:6a:e9:
                    ac:6c:9f:7e:33:9d:bf:f8:d0:91:ee:49:8e:7c:d0:
                    b4:07:c0:e4:9b:66:b6:b7:46:47:1e:b8:4f:d3:a7:
                    af:86:98:13:c4:76:34:cb:9d:c2:89:17:93:54:3a:
                    8f:87:19:21:ed:16:1f:72:45:c0:17:ad:22:cf:14:
                    d1:69:96:8a:e2:68:b0:c9:e9:69:f3:e3:a1:ed:a2:
                    cb:9d:5d:e3:a8:6a:79:16:70:8e:8c:3a:9b:ec:eb:
                    ad:1e:ad:e3:18:93:f0:8e:72:59:31:dd:8e:52:7c:
                    1c:a1:c7:b4:15:cf:ac:97:c7:a0:0c:7e:88:82:aa:
                    31:bb:6c:3d:d9:95:f0:a1:5a:c9:97:bb:f4:f6:2e:
                    a8:93:35:20:93:b4:10:34:4e:4a:59:26:e2:61:e0:
                    e8:98:eb:41:ef:d6:8f:0c:10:f6:bd:af:55:d2:e5:
                    5f:e7:ce:d6:22:34:d4:b4:18:c1:cc:9d:ce:73:a1:
                    3d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5C:86:75:58:4B:43:46:20:75:E5:59:CD:37:A9:DC:27:A2:E8:93
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3638303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:680::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:b2:a0:9a:22:5c:70:17:7b:6f:45:43:7c:8f:e1:14:ab:7f:
         d3:75:e5:3c:13:a5:33:1d:54:11:34:48:f9:0b:30:7b:b6:2e:
         94:2e:d8:ea:d0:99:9f:af:28:83:88:d1:a2:3a:e3:64:64:bd:
         e1:8a:64:81:04:f3:73:a1:8e:8c:d6:13:2c:84:15:71:ca:72:
         c3:bc:0b:94:4c:d1:7d:ed:9f:b5:2c:f3:ed:0b:9f:a9:8e:68:
         7f:d2:10:63:d3:40:00:c3:84:cd:11:ba:ca:02:8d:65:79:32:
         59:cb:01:65:29:ce:20:52:94:99:95:16:7e:12:1d:9a:f3:77:
         34:b2:b2:bd:4a:57:31:9a:e9:17:fe:05:4c:a9:4a:85:a4:78:
         0d:e1:00:55:10:ed:0a:89:2d:94:35:4e:0d:9d:6b:22:07:4b:
         11:11:89:6e:36:18:9e:f8:1b:3f:08:fe:ad:e0:11:44:ba:03:
         46:53:2b:d8:88:25:40:fc:c6:b0:f2:50:b7:10:6a:6a:bc:0f:
         93:84:60:04:b8:d5:20:bd:d6:f6:f8:60:e3:da:b0:99:0d:3e:
         b5:2d:61:57:f5:98:c8:d0:61:ad:91:cc:42:a1:16:5d:62:7e:
         5a:28:a2:a5:fb:20:55:3d:c6:6e:f6:1e:74:08:a3:69:1a:21:
         8b:81:7a:ef
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUYldvvO4mEQc/yzA8j/jlFbUt4fswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVEMUNEQzQwNUI1Mjg1NTRCMjRENjdFRkIxN0E3RDIw
REE2ODMzMzAeFw0yMjEyMjAxNTA0NDFaFw0yMzEyMTkxNTA5NDFaMDMxMTAvBgNV
BAMTKEJDNUM4Njc1NTg0QjQzNDYyMDc1RTU1OUNEMzdBOURDMjdBMkU4OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpsiAs9lujr396lhPcUd+eHe9b
upL0xMF6eheXagB7zOrPrLkmZeFrBJnHO52I6POHYp4AXL0WaGigexcuEB++nruf
YbZR8JBq6axsn34znb/40JHuSY580LQHwOSbZra3RkceuE/Tp6+GmBPEdjTLncKJ
F5NUOo+HGSHtFh9yRcAXrSLPFNFploriaLDJ6Wnz46HtosudXeOoankWcI6MOpvs
660ereMYk/COclkx3Y5SfByhx7QVz6yXx6AMfoiCqjG7bD3ZlfChWsmXu/T2LqiT
NSCTtBA0TkpZJuJh4OiY60Hv1o8MEPa9r1XS5V/nztYiNNS0GMHMnc5zoT17AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUvFyGdVhLQ0YgdeVZzTep3Cei6JMwHwYDVR0j
BBgwFoAUHtHNxAW1KFVLJNZ++xen0g2mgzMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhydEh0cFNnY1ljSmNlY1dNNkM4NFpma0h3TjE0c0Z2c1U3YjNRaTNG
aVcvMC8xRUQxQ0RDNDA1QjUyODU1NEIyNEQ2N0VGQjE3QTdEMjBEQTY4MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFRDFDREM0MDVCNTI4NTU0
QjI0RDY3RUZCMTdBN0QyMERBNjgzMzMuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4cnRIdHBTZ2NZY0pjZWNXTTZDODRaZmtId04xNHNGdnNVN2IzUWkzRmlXLzAv
MzIzODMwMzQzYTY1MzkzNDNhMzYzODMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw
MzIzNjMyMzQzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAQOlAaAMA0GCSqGSIb3DQEBCwUAA4IB
AQBvsqCaIlxwF3tvRUN8j+EUq3/TdeU8E6UzHVQRNEj5CzB7ti6ULtjq0JmfryiD
iNGiOuNkZL3himSBBPNzoY6M1hMshBVxynLDvAuUTNF97Z+1LPPtC5+pjmh/0hBj
00AAw4TNEbrKAo1leTJZywFlKc4gUpSZlRZ+Eh2a83c0srK9SlcxmukX/gVMqUqF
pHgN4QBVEO0KiS2UNU4NnWsiB0sREYluNhie+Bs/CP6t4BFEugNGUyvYiCVA/Maw
8lC3EGpqvA+ThGAEuNUgvdb2+GDj2rCZDT61LWFX9ZjI0GGtkcxCoRZdYn5aKKKl
+yBVPcZu9h50CKNpGiGLgXrv
-----END CERTIFICATE-----