Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/323830343a353636343a3a2f33322d3438203d3e20323637393935.roa
File:                     323830343a353636343a3a2f33322d3438203d3e20323637393935.roa (raw, json)
Hash identifier:          AsQn23eip7ir3kCRCmOJbdZxLawgwz8y3EAZRrc7rNQ=
Subject key identifier:   C9:0E:29:7D:50:86:9F:87:1A:C1:6E:02:54:27:0F:68:24:41:EB:C7
Certificate issuer:       /CN=1AFAA32A4C291B7BD8C6E429F97A286694BFE576
Certificate serial:       5018FF4B32827E210482ADB43FEBB561E93D632F
Authority key identifier: 1A:FA:A3:2A:4C:29:1B:7B:D8:C6:E4:29:F9:7A:28:66:94:BF:E5:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AFAA32A4C291B7BD8C6E429F97A286694BFE576.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/323830343a353636343a3a2f33322d3438203d3e20323637393935.roa
Signing time:             Tue 07 Feb 2023 14:55:40 +0000
ROA not before:           Tue 07 Feb 2023 14:50:40 +0000
ROA not after:            Tue 06 Feb 2024 14:55:40 +0000
asID:                     267995
IP address blocks:        2804:5664::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:18:ff:4b:32:82:7e:21:04:82:ad:b4:3f:eb:b5:61:e9:3d:63:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AFAA32A4C291B7BD8C6E429F97A286694BFE576
        Validity
            Not Before: Feb  7 14:50:40 2023 GMT
            Not After : Feb  6 14:55:40 2024 GMT
        Subject: CN=C90E297D50869F871AC16E0254270F682441EBC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:74:24:85:9f:04:e5:3c:4a:8b:fa:70:9c:73:
                    0d:63:0f:64:47:ab:31:79:c0:58:5e:34:35:c5:07:
                    7d:87:81:54:b4:f4:ca:a6:a2:22:31:c3:03:30:88:
                    fe:7f:ee:a5:56:af:6f:e8:55:2d:7e:f3:21:45:5e:
                    96:ae:78:a3:84:a0:38:66:f5:4e:50:0b:83:f9:4b:
                    53:f7:67:34:51:02:19:af:52:b9:67:a3:21:ae:58:
                    56:e9:ed:73:b6:29:a4:9b:08:7f:62:88:cf:10:03:
                    44:bd:3a:54:f8:35:5a:0f:db:e0:03:a8:70:0b:29:
                    bf:bf:4a:ce:d0:e6:03:06:2b:bc:9e:66:6e:a5:ee:
                    a2:7e:3b:b6:e2:b3:0b:c4:5d:bb:14:90:b6:49:0f:
                    ba:0a:20:3e:0a:e2:c7:1a:60:50:55:5b:ba:f9:fa:
                    9c:c0:f7:34:dd:f2:15:c2:55:0d:0c:20:ed:b8:d5:
                    06:25:bf:0d:67:11:c7:8f:25:34:60:5a:06:68:38:
                    72:de:40:ea:4e:69:40:c7:58:c4:94:62:29:f3:9a:
                    ab:31:ab:d8:54:86:87:1b:6f:3b:8d:8d:4a:8e:a8:
                    c0:06:25:94:9f:c2:0b:3a:a9:5b:f2:81:37:98:b7:
                    4c:3d:18:9b:8c:80:d6:73:47:7f:9c:af:11:42:e4:
                    01:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0E:29:7D:50:86:9F:87:1A:C1:6E:02:54:27:0F:68:24:41:EB:C7
            X509v3 Authority Key Identifier:
                keyid:1A:FA:A3:2A:4C:29:1B:7B:D8:C6:E4:29:F9:7A:28:66:94:BF:E5:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/1AFAA32A4C291B7BD8C6E429F97A286694BFE576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AFAA32A4C291B7BD8C6E429F97A286694BFE576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/323830343a353636343a3a2f33322d3438203d3e20323637393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5664::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:1a:b3:a4:9b:45:11:e8:d2:94:f4:39:91:7f:9c:53:26:de:
         32:34:6f:0a:03:3e:f7:b4:b4:60:28:f6:87:24:9d:dd:97:d5:
         3f:6e:93:38:4e:d5:9e:97:c3:63:08:b0:71:82:ee:56:80:7c:
         a8:2b:8c:fb:5d:5a:cf:0a:c0:c2:1e:fa:3e:82:b4:34:18:75:
         95:d9:cf:3c:b8:ad:56:35:60:1a:eb:e9:f3:d3:7b:b8:77:11:
         5c:fb:fd:47:2f:5a:6c:e6:b7:63:a3:93:43:5c:a0:e3:c4:c2:
         7f:ea:7b:24:0a:f8:67:63:6f:2d:65:7e:b1:5c:c3:5f:6d:d3:
         50:e8:53:53:0f:0f:43:6f:62:1f:d3:7c:a1:a9:55:d4:d6:00:
         01:dd:43:21:de:70:3d:b2:58:f6:25:15:76:e6:c1:a3:31:4e:
         4c:7f:44:03:b2:29:32:1d:bb:f6:7d:e3:74:0f:db:39:3c:0a:
         1c:e7:7a:2b:c6:fd:a2:a8:dd:3f:d5:0c:c8:15:41:0d:59:b1:
         2f:c8:28:26:b4:b6:c2:5a:9e:4b:89:93:00:8a:7e:90:64:d8:
         41:ca:a9:5b:09:45:df:f7:29:15:cf:11:b4:0a:fa:7d:16:2d:
         43:ae:af:69:ef:35:05:65:d2:5d:89:b2:47:87:73:d6:58:59:
         e9:d5:00:53
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUBj/SzKCfiEEgq20P+u1Yek9Yy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFGQUEzMkE0QzI5MUI3QkQ4QzZFNDI5Rjk3QTI4NjY5
NEJGRTU3NjAeFw0yMzAyMDcxNDUwNDBaFw0yNDAyMDYxNDU1NDBaMDMxMTAvBgNV
BAMTKEM5MEUyOTdENTA4NjlGODcxQUMxNkUwMjU0MjcwRjY4MjQ0MUVCQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZdCSFnwTlPEqL+nCccw1jD2RH
qzF5wFheNDXFB32HgVS09MqmoiIxwwMwiP5/7qVWr2/oVS1+8yFFXpaueKOEoDhm
9U5QC4P5S1P3ZzRRAhmvUrlnoyGuWFbp7XO2KaSbCH9iiM8QA0S9OlT4NVoP2+AD
qHALKb+/Ss7Q5gMGK7yeZm6l7qJ+O7biswvEXbsUkLZJD7oKID4K4scaYFBVW7r5
+pzA9zTd8hXCVQ0MIO241QYlvw1nEcePJTRgWgZoOHLeQOpOaUDHWMSUYinzmqsx
q9hUhocbbzuNjUqOqMAGJZSfwgs6qVvygTeYt0w9GJuMgNZzR3+crxFC5AHpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUyQ4pfVCGn4cawW4CVCcPaCRB68cwHwYDVR0j
BBgwFoAUGvqjKkwpG3vYxuQp+XooZpS/5XYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1B4b1hhQ2JVZzR6djJKdlI3QW1HU3B2R2ZCOTExRW15NVFqbUJQcWRM
ZUgvMC8xQUZBQTMyQTRDMjkxQjdCRDhDNkU0MjlGOTdBMjg2Njk0QkZFNTc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFBRkFBMzJBNEMyOTFCN0JE
OEM2RTQyOUY5N0EyODY2OTRCRkU1NzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dQeG9YYUNiVWc0enYySnZSN0FtR1NwdkdmQjkxMUVteTVRam1CUHFkTGVILzAv
MzIzODMwMzQzYTM1MzYzNjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARWZDANBgkqhkiG9w0BAQsFAAOCAQEATBqzpJtF
EejSlPQ5kX+cUybeMjRvCgM+97S0YCj2hySd3ZfVP26TOE7VnpfDYwiwcYLuVoB8
qCuM+11azwrAwh76PoK0NBh1ldnPPLitVjVgGuvp89N7uHcRXPv9Ry9abOa3Y6OT
Q1yg48TCf+p7JAr4Z2NvLWV+sVzDX23TUOhTUw8PQ29iH9N8oalV1NYAAd1DId5w
PbJY9iUVdubBozFOTH9EA7IpMh279n3jdA/bOTwKHOd6K8b9oqjdP9UMyBVBDVmx
L8goJrS2wlqeS4mTAIp+kGTYQcqpWwlF3/cpFc8RtAr6fRYtQ66vae81BWXSXYmy
R4dz1lhZ6dUAUw==
-----END CERTIFICATE-----