Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3230303a3a2f34302d3430203d3e20323639323334.roa
File:                     323830343a363137303a3230303a3a2f34302d3430203d3e20323639323334.roa (raw, json)
Hash identifier:          OKG7M3bwSVIcQchvEkTyQvyDoy+WcS/rCqbp9cOuEzU=
Subject key identifier:   92:98:35:B8:28:C1:0D:1B:B7:1A:90:C2:33:53:04:06:35:19:AE:36
Certificate issuer:       /CN=5AD163E3334A2AF515A739140ED43D8500612D54
Certificate serial:       181B96070CED29348C428C943D2A940278EB2420
Authority key identifier: 5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3230303a3a2f34302d3430203d3e20323639323334.roa
Signing time:             Tue 14 Jun 2022 18:17:19 +0000
ROA not before:           Tue 14 Jun 2022 18:12:19 +0000
ROA not after:            Tue 13 Jun 2023 18:17:19 +0000
asID:                     269234
IP address blocks:        2804:6170:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1b:96:07:0c:ed:29:34:8c:42:8c:94:3d:2a:94:02:78:eb:24:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AD163E3334A2AF515A739140ED43D8500612D54
        Validity
            Not Before: Jun 14 18:12:19 2022 GMT
            Not After : Jun 13 18:17:19 2023 GMT
        Subject: CN=929835B828C10D1BB71A90C2335304063519AE36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:7c:7c:2e:a6:e4:e1:f8:29:9c:49:98:2c:
                    f5:4e:f7:c9:56:2d:81:59:cf:ea:d5:62:41:df:a4:
                    76:90:09:63:55:c6:e1:5a:01:d9:b9:e7:92:40:5f:
                    e2:44:53:aa:43:02:4e:18:00:12:84:4c:e3:b4:41:
                    bf:3e:bf:cc:bb:e0:2e:a2:49:63:50:12:89:a0:59:
                    bf:ed:2f:9a:0c:fc:8e:cd:99:1e:8b:56:3c:7b:98:
                    48:f9:ae:46:79:ea:95:cc:c7:13:5d:82:76:61:6d:
                    87:59:07:64:83:15:e6:f2:ad:0d:ea:eb:a7:3e:ed:
                    10:8e:35:f9:15:54:3b:75:fc:e1:e6:6e:94:5b:ce:
                    a6:21:89:2a:ce:a4:e7:7b:c4:24:ba:10:96:50:96:
                    21:43:0d:06:87:c2:79:7d:d0:d0:4d:16:61:82:1e:
                    7d:37:24:a4:41:f5:d1:af:c0:d4:4b:80:ef:39:c6:
                    64:01:0a:74:77:5a:a8:ae:07:ef:d2:66:f5:c7:00:
                    d0:5f:7d:d1:c6:70:42:a5:4c:35:1f:f1:03:1f:41:
                    12:08:4b:b9:2d:50:33:08:4b:0a:5f:5e:2d:e0:49:
                    c6:76:a1:8d:8a:0d:9b:bb:4c:f5:bc:d8:cb:cb:8e:
                    99:51:ff:ad:c6:9b:13:59:94:aa:e3:94:b9:98:a3:
                    6c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:98:35:B8:28:C1:0D:1B:B7:1A:90:C2:33:53:04:06:35:19:AE:36
            X509v3 Authority Key Identifier:
                keyid:5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/5AD163E3334A2AF515A739140ED43D8500612D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3230303a3a2f34302d3430203d3e20323639323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6170:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:53:ac:2f:83:61:7a:00:91:36:75:38:bf:57:c0:9d:e3:33:
         bd:59:83:43:b0:88:b9:cd:ca:24:d9:12:aa:c4:e1:c6:eb:fe:
         bc:93:e2:74:e4:95:da:de:7d:04:9f:8b:4c:a1:29:ee:35:e9:
         24:3b:cb:7d:72:1b:b7:d0:cf:47:49:fa:0a:c7:df:e0:31:87:
         a9:b0:bf:d6:1d:a3:42:27:89:96:76:e5:61:6f:6a:e0:3e:61:
         25:71:0b:ae:63:3b:64:9c:ef:11:ef:bc:a0:e5:68:5a:20:8d:
         02:47:b5:dd:de:1d:a9:ee:70:4c:95:44:45:6d:75:12:f2:b7:
         0e:76:3f:f7:c7:c3:05:24:03:45:42:a1:da:94:12:bb:08:71:
         ae:e2:77:7f:b8:4a:06:ae:3e:c6:3a:ca:2b:ec:cc:ba:ba:59:
         34:51:cb:83:be:27:e7:61:f0:0d:28:41:32:4d:03:c3:81:c4:
         7d:ae:23:4e:04:14:0f:a1:30:a2:e3:28:ac:24:40:d5:d4:af:
         ca:83:4d:b9:0f:f9:3c:5e:eb:bf:01:5d:fe:c0:02:88:21:8e:
         54:06:5a:5a:2d:d8:71:07:d9:b4:77:58:63:78:cb:77:e6:70:
         05:4b:be:81:c3:42:89:56:9c:3a:d6:52:47:11:e8:89:94:55:
         68:22:d1:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGBuWBwztKTSMQoyUPSqUAnjrJCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFEMTYzRTMzMzRBMkFGNTE1QTczOTE0MEVENDNEODUw
MDYxMkQ1NDAeFw0yMjA2MTQxODEyMTlaFw0yMzA2MTMxODE3MTlaMDMxMTAvBgNV
BAMTKDkyOTgzNUI4MjhDMTBEMUJCNzFBOTBDMjMzNTMwNDA2MzUxOUFFMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKnx8Lqbk4fgpnEmYLPVO98lW
LYFZz+rVYkHfpHaQCWNVxuFaAdm555JAX+JEU6pDAk4YABKETOO0Qb8+v8y74C6i
SWNQEomgWb/tL5oM/I7NmR6LVjx7mEj5rkZ56pXMxxNdgnZhbYdZB2SDFebyrQ3q
66c+7RCONfkVVDt1/OHmbpRbzqYhiSrOpOd7xCS6EJZQliFDDQaHwnl90NBNFmGC
Hn03JKRB9dGvwNRLgO85xmQBCnR3WqiuB+/SZvXHANBffdHGcEKlTDUf8QMfQRII
S7ktUDMISwpfXi3gScZ2oY2KDZu7TPW82MvLjplR/63GmxNZlKrjlLmYo2ynAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkpg1uCjBDRu3GpDCM1MEBjUZrjYwHwYDVR0j
BBgwFoAUWtFj4zNKKvUVpzkUDtQ9hQBhLVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkRpSnRNMzJxMlNpU0huM2hGYk0zV1d6NjR2YU1BRzZUYWtEVVZvbWlR
UVYvMC81QUQxNjNFMzMzNEEyQUY1MTVBNzM5MTQwRUQ0M0Q4NTAwNjEyRDU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVBRDE2M0UzMzM0QTJBRjUx
NUE3MzkxNDBFRDQzRDg1MDA2MTJENTQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJEaUp0TTMycTJTaVNIbjNoRmJNM1dXejY0dmFNQUc2VGFrRFVWb21pUVFWLzAv
MzIzODMwMzQzYTM2MzEzNzMwM2EzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzkzMjMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBGFwAjANBgkqhkiG9w0BAQsFAAOC
AQEAX1OsL4NhegCRNnU4v1fAneMzvVmDQ7CIuc3KJNkSqsThxuv+vJPidOSV2t59
BJ+LTKEp7jXpJDvLfXIbt9DPR0n6Csff4DGHqbC/1h2jQieJlnblYW9q4D5hJXEL
rmM7ZJzvEe+8oOVoWiCNAke13d4dqe5wTJVERW11EvK3DnY/98fDBSQDRUKh2pQS
uwhxruJ3f7hKBq4+xjrKK+zMurpZNFHLg74n52HwDShBMk0Dw4HEfa4jTgQUD6Ew
ouMorCRA1dSvyoNNuQ/5PF7rvwFd/sACiCGOVAZaWi3YcQfZtHdYY3jLd+ZwBUu+
gcNCiVacOtZSRxHoiZRVaCLR/Q==
-----END CERTIFICATE-----