Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a3a2f33322d3438203d3e203631363039.roa
File:                     323830343a383762633a3a2f33322d3438203d3e203631363039.roa (raw, json)
Hash identifier:          ndv9yhNCnhpRrcRihgqjePrOcY/xC049eKUblQCOmF8=
Subject key identifier:   42:33:B2:6C:AF:B8:C0:2B:DF:D3:0B:8A:61:E6:A1:7E:5D:72:66:26
Certificate issuer:       /CN=66522AB472ED296819892FF8C573D4078591FB5F
Certificate serial:       73524479DE727F6815C5E7AEA10CDD37991B0A46
Authority key identifier: 66:52:2A:B4:72:ED:29:68:19:89:2F:F8:C5:73:D4:07:85:91:FB:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66522AB472ED296819892FF8C573D4078591FB5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a3a2f33322d3438203d3e203631363039.roa
Signing time:             Fri 14 Oct 2022 17:06:11 +0000
ROA not before:           Fri 14 Oct 2022 17:01:11 +0000
ROA not after:            Fri 13 Oct 2023 17:06:11 +0000
asID:                     61609
IP address blocks:        2804:87bc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:52:44:79:de:72:7f:68:15:c5:e7:ae:a1:0c:dd:37:99:1b:0a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66522AB472ED296819892FF8C573D4078591FB5F
        Validity
            Not Before: Oct 14 17:01:11 2022 GMT
            Not After : Oct 13 17:06:11 2023 GMT
        Subject: CN=4233B26CAFB8C02BDFD30B8A61E6A17E5D726626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:03:8c:80:be:34:c6:9e:35:ce:4a:2e:65:54:
                    80:84:c2:98:37:0b:22:6b:62:66:b2:4c:11:77:56:
                    b3:8b:8d:70:ef:6e:92:31:de:0e:ee:5b:3d:56:53:
                    dc:52:88:3c:43:70:35:f7:ef:cc:ea:c5:b1:eb:bc:
                    39:28:de:7b:20:40:ab:16:3c:4c:79:c3:6c:7b:d0:
                    b9:cb:c0:4d:63:c8:7e:9b:8b:81:c1:0f:0f:e7:15:
                    a9:d8:e9:22:b9:2e:33:3b:ba:42:a4:4b:5c:ae:61:
                    cf:66:dc:84:88:18:a4:be:e1:ef:a1:1f:f2:ab:cf:
                    bf:30:c2:43:0d:d8:39:10:36:1b:76:4c:71:ab:c8:
                    70:bb:a2:0c:a4:b3:8f:c3:b5:48:97:d1:04:97:10:
                    7e:4b:f6:7d:1a:15:aa:64:1d:7d:f2:cb:3a:ca:3c:
                    8f:55:42:ca:1d:fb:9e:bc:fd:ac:5f:5e:ea:da:78:
                    86:b8:fd:1f:79:b5:05:34:1d:f6:1e:d5:cf:74:49:
                    e0:0f:41:27:fe:91:e8:4e:ad:2a:5b:b2:cb:08:14:
                    24:8c:0c:f1:89:35:67:39:f4:01:a9:f5:91:e8:a8:
                    5c:07:7b:a8:51:67:48:93:2f:b0:bf:ef:70:89:e7:
                    53:5a:ec:df:14:c5:fd:c2:6f:9d:5d:3e:85:da:28:
                    bb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:33:B2:6C:AF:B8:C0:2B:DF:D3:0B:8A:61:E6:A1:7E:5D:72:66:26
            X509v3 Authority Key Identifier:
                keyid:66:52:2A:B4:72:ED:29:68:19:89:2F:F8:C5:73:D4:07:85:91:FB:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/66522AB472ED296819892FF8C573D4078591FB5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66522AB472ED296819892FF8C573D4078591FB5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a3a2f33322d3438203d3e203631363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:6b:4f:69:92:6a:77:33:ae:ea:0d:6d:da:6d:ab:21:b6:6f:
         73:34:95:da:f4:e8:01:a1:69:f2:69:c1:a6:a4:8f:30:58:a0:
         14:63:fd:1f:2c:d1:f4:dd:c4:bb:19:74:44:ef:31:5b:07:6f:
         9e:52:1c:9f:bc:22:22:9e:9b:ab:9f:9a:2c:92:25:08:2a:8c:
         cc:85:18:9a:54:ad:f1:39:4b:1b:69:a4:d9:af:84:ee:f5:b5:
         e0:74:1d:fe:61:9b:d2:48:a3:1e:4d:e6:d4:ba:18:b1:97:01:
         2b:7b:8c:cc:38:58:db:5b:30:91:35:5c:f3:1c:2c:cd:45:97:
         d9:04:1a:e8:44:b4:29:b2:62:93:cc:16:8d:03:bf:a4:1d:6b:
         10:2e:3b:2f:72:8f:a0:3c:92:a7:f0:55:32:c3:d9:1c:34:dd:
         0b:49:d5:23:8c:08:12:64:87:96:7e:f7:21:82:72:dd:9c:58:
         ac:17:23:6d:d3:08:83:c0:1e:ef:02:7b:2d:f1:3e:10:03:01:
         7e:18:b1:85:b6:f0:eb:f5:f3:3a:34:e6:05:a2:3c:86:d2:df:
         81:94:80:4e:ba:8f:5d:8c:46:06:9f:ca:f2:20:3d:8c:87:ba:
         a4:fc:45:54:20:4d:e0:48:ff:f1:d7:31:8d:eb:51:97:97:a5:
         4e:d5:ea:bd
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUc1JEed5yf2gVxeeuoQzdN5kbCkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1MjJBQjQ3MkVEMjk2ODE5ODkyRkY4QzU3M0Q0MDc4
NTkxRkI1RjAeFw0yMjEwMTQxNzAxMTFaFw0yMzEwMTMxNzA2MTFaMDMxMTAvBgNV
BAMTKDQyMzNCMjZDQUZCOEMwMkJERkQzMEI4QTYxRTZBMTdFNUQ3MjY2MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmA4yAvjTGnjXOSi5lVICEwpg3
CyJrYmayTBF3VrOLjXDvbpIx3g7uWz1WU9xSiDxDcDX378zqxbHrvDko3nsgQKsW
PEx5w2x70LnLwE1jyH6bi4HBDw/nFanY6SK5LjM7ukKkS1yuYc9m3ISIGKS+4e+h
H/Krz78wwkMN2DkQNht2THGryHC7ogyks4/DtUiX0QSXEH5L9n0aFapkHX3yyzrK
PI9VQsod+568/axfXuraeIa4/R95tQU0HfYe1c90SeAPQSf+kehOrSpbsssIFCSM
DPGJNWc59AGp9ZHoqFwHe6hRZ0iTL7C/73CJ51Na7N8Uxf3Cb51dPoXaKLvnAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUQjOybK+4wCvf0wuKYeahfl1yZiYwHwYDVR0j
BBgwFoAUZlIqtHLtKWgZiS/4xXPUB4WR+18wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FUU0pvajg0a2JWdkU4QVdQRFBveUpxMnVHcG9MNmluTjk4eVkzamZo
Y0UvMC82NjUyMkFCNDcyRUQyOTY4MTk4OTJGRjhDNTczRDQwNzg1OTFGQjVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY2NTIyQUI0NzJFRDI5Njgx
OTg5MkZGOEM1NzNENDA3ODU5MUZCNUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBVFNKb2o4NGtiVnZFOEFXUERQb3lKcTJ1R3BvTDZpbk45OHlZM2pmaGNFLzAv
MzIzODMwMzQzYTM4Mzc2MjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM2
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEh7wwDQYJKoZIhvcNAQELBQADggEBAJlrT2mSancz
ruoNbdptqyG2b3M0ldr06AGhafJpwaakjzBYoBRj/R8s0fTdxLsZdETvMVsHb55S
HJ+8IiKem6ufmiySJQgqjMyFGJpUrfE5SxtppNmvhO71teB0Hf5hm9JIox5N5tS6
GLGXASt7jMw4WNtbMJE1XPMcLM1Fl9kEGuhEtCmyYpPMFo0Dv6QdaxAuOy9yj6A8
kqfwVTLD2Rw03QtJ1SOMCBJkh5Z+9yGCct2cWKwXI23TCIPAHu8Cey3xPhADAX4Y
sYW28Ov18zo05gWiPIbS34GUgE66j12MRgafyvIgPYyHuqT8RVQgTeBI//HXMY3r
UZeXpU7V6r0=
-----END CERTIFICATE-----