Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/323830343a353561303a3a2f33322d3438203d3e20323637393436.roa
File:                     323830343a353561303a3a2f33322d3438203d3e20323637393436.roa (raw, json)
Hash identifier:          NSC9Idmxr1X6o/WT3b7OTRCsXG06wfLrQwjPz2s5pQs=
Subject key identifier:   B4:D0:F2:A6:2E:3D:34:72:F5:B9:5D:93:2F:D9:3A:40:72:A1:8C:29
Certificate issuer:       /CN=A90C51F287F829905266548E409D0259B53DAEA7
Certificate serial:       2D66F6490C7828F767C98F8FFEA13F6126DDF6A1
Authority key identifier: A9:0C:51:F2:87:F8:29:90:52:66:54:8E:40:9D:02:59:B5:3D:AE:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A90C51F287F829905266548E409D0259B53DAEA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/323830343a353561303a3a2f33322d3438203d3e20323637393436.roa
Signing time:             Wed 14 Jun 2023 20:10:47 +0000
ROA not before:           Wed 14 Jun 2023 20:05:47 +0000
ROA not after:            Wed 12 Jun 2024 20:10:47 +0000
asID:                     267946
IP address blocks:        2804:55a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:66:f6:49:0c:78:28:f7:67:c9:8f:8f:fe:a1:3f:61:26:dd:f6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90C51F287F829905266548E409D0259B53DAEA7
        Validity
            Not Before: Jun 14 20:05:47 2023 GMT
            Not After : Jun 12 20:10:47 2024 GMT
        Subject: CN=B4D0F2A62E3D3472F5B95D932FD93A4072A18C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7a:e8:91:e2:53:15:40:ab:2f:02:fb:19:12:
                    04:13:80:3d:ce:52:87:4b:2c:90:93:5b:8b:cb:42:
                    3b:cd:d1:7a:e2:5f:e7:44:d7:d1:52:ea:bd:da:dd:
                    73:91:24:3e:52:c4:58:f7:4f:f0:31:7a:c5:b2:8e:
                    5f:d3:69:9f:d3:3d:5d:5b:d2:39:52:84:e9:c2:05:
                    b5:e2:22:ed:f1:03:d9:6e:de:0b:5c:01:b5:b7:16:
                    73:6e:23:91:1b:be:1c:d1:83:3b:6d:51:94:b0:ca:
                    65:b7:8f:2b:7c:47:24:bb:6f:c7:2f:e7:f2:ab:94:
                    88:34:4b:69:58:3d:5b:f8:ba:56:99:e4:ba:cd:88:
                    03:6d:8d:57:51:f9:74:86:15:12:9b:11:f7:c2:9d:
                    7e:2b:02:92:2a:a3:b2:b9:3c:d3:7e:ce:b9:fa:43:
                    81:b4:49:ee:a6:93:d9:38:ea:1f:73:e0:2f:e4:08:
                    f8:6e:56:d1:73:d8:68:75:59:6d:d5:93:a7:61:31:
                    f8:2b:7d:51:5a:9e:b8:9a:00:ae:f3:4d:a8:1b:61:
                    1c:b9:fe:70:93:1d:52:b1:b1:bc:c3:7e:09:44:7f:
                    52:1b:bb:13:f9:3f:07:b2:3a:6c:59:c3:fa:6b:c8:
                    55:75:f1:c7:c7:80:7a:70:e9:b5:d3:d2:da:a9:7a:
                    33:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D0:F2:A6:2E:3D:34:72:F5:B9:5D:93:2F:D9:3A:40:72:A1:8C:29
            X509v3 Authority Key Identifier:
                keyid:A9:0C:51:F2:87:F8:29:90:52:66:54:8E:40:9D:02:59:B5:3D:AE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/A90C51F287F829905266548E409D0259B53DAEA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A90C51F287F829905266548E409D0259B53DAEA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/323830343a353561303a3a2f33322d3438203d3e20323637393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:b5:f9:e3:e1:90:b3:e3:63:76:c2:3c:18:be:3c:65:f1:d3:
         c1:94:8f:90:b8:60:2f:ce:b6:cc:07:2c:fa:af:6c:1e:10:f5:
         12:cf:f8:0f:e6:91:e4:8c:44:6e:c7:54:03:11:f5:ab:e8:10:
         09:2e:93:23:c8:4c:e0:04:48:fb:69:4b:73:32:7c:80:46:fb:
         35:e6:a3:26:b7:67:ed:72:c7:95:71:ad:ce:8c:2e:33:8f:3d:
         10:2e:44:73:2a:bd:5f:60:e8:18:a5:2a:1e:d7:0b:67:52:34:
         cb:d5:6e:82:38:59:21:56:60:9a:73:fa:c3:a2:de:1a:0c:87:
         a6:92:6b:9f:a6:7f:3c:92:57:45:b9:f8:76:b1:e4:ab:d9:26:
         f9:ab:7c:a5:d2:57:dc:66:fe:7b:30:ba:cc:a3:cc:17:2c:70:
         b2:9e:93:61:fe:de:37:3f:77:95:e8:6f:8c:1a:cb:eb:5d:cf:
         89:07:24:22:ec:94:5d:38:f0:65:84:f1:a0:0d:41:d4:b9:c1:
         47:44:83:36:93:78:e3:2e:3e:55:e8:4e:82:75:be:4a:26:18:
         aa:16:31:d2:5f:56:fc:d3:f8:b3:5b:d7:15:93:d2:c9:83:8a:
         72:f7:63:50:4b:ed:69:dd:61:4a:01:60:54:b8:e0:c0:83:e1:
         d9:68:93:0f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIULWb2SQx4KPdnyY+P/qE/YSbd9qEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkwQzUxRjI4N0Y4Mjk5MDUyNjY1NDhFNDA5RDAyNTlC
NTNEQUVBNzAeFw0yMzA2MTQyMDA1NDdaFw0yNDA2MTIyMDEwNDdaMDMxMTAvBgNV
BAMTKEI0RDBGMkE2MkUzRDM0NzJGNUI5NUQ5MzJGRDkzQTQwNzJBMThDMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8euiR4lMVQKsvAvsZEgQTgD3O
UodLLJCTW4vLQjvN0XriX+dE19FS6r3a3XORJD5SxFj3T/AxesWyjl/TaZ/TPV1b
0jlShOnCBbXiIu3xA9lu3gtcAbW3FnNuI5EbvhzRgzttUZSwymW3jyt8RyS7b8cv
5/KrlIg0S2lYPVv4ulaZ5LrNiANtjVdR+XSGFRKbEffCnX4rApIqo7K5PNN+zrn6
Q4G0Se6mk9k46h9z4C/kCPhuVtFz2Gh1WW3Vk6dhMfgrfVFanriaAK7zTagbYRy5
/nCTHVKxsbzDfglEf1IbuxP5PweyOmxZw/pryFV18cfHgHpw6bXT0tqpejNnAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUtNDypi49NHL1uV2TL9k6QHKhjCkwHwYDVR0j
BBgwFoAUqQxR8of4KZBSZlSOQJ0CWbU9rqcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94ZUhZV2hRR0o1TVBqRVp1WnRwWEF1WXQ0UzFia0pOTG9pWnkza29YbXNI
LzEvQTkwQzUxRjI4N0Y4Mjk5MDUyNjY1NDhFNDA5RDAyNTlCNTNEQUVBNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9BOTBDNTFGMjg3RjgyOTkwNTI2
NjU0OEU0MDlEMDI1OUI1M0RBRUE3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
ZUhZV2hRR0o1TVBqRVp1WnRwWEF1WXQ0UzFia0pOTG9pWnkza29YbXNILzEvMzIz
ODMwMzQzYTM1MzU2MTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3Mzkz
NDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARVoDANBgkqhkiG9w0BAQsFAAOCAQEASLX54+GQs+Nj
dsI8GL48ZfHTwZSPkLhgL862zAcs+q9sHhD1Es/4D+aR5IxEbsdUAxH1q+gQCS6T
I8hM4ARI+2lLczJ8gEb7NeajJrdn7XLHlXGtzowuM489EC5Ecyq9X2DoGKUqHtcL
Z1I0y9VugjhZIVZgmnP6w6LeGgyHppJrn6Z/PJJXRbn4drHkq9km+at8pdJX3Gb+
ezC6zKPMFyxwsp6TYf7eNz93lehvjBrL613PiQckIuyUXTjwZYTxoA1B1LnBR0SD
NpN44y4+VehOgnW+SiYYqhYx0l9W/NP4s1vXFZPSyYOKcvdjUEvtad1hSgFgVLjg
wIPh2WiTDw==
-----END CERTIFICATE-----