Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3136382e302e342e302f32332d3233203d3e20323635323431.roa
File:                     3136382e302e342e302f32332d3233203d3e20323635323431.roa (raw, json)
Hash identifier:          M4PWzXQNdb+HnR8zOid3R0VlYqjSVFZwe3T2FCTQKpE=
Subject key identifier:   18:8B:BD:E8:D3:86:19:6E:5D:4A:9E:91:83:38:93:EC:29:7A:E2:E5
Certificate issuer:       /CN=59B08A61D0AC559F86B98780FBFB3EEB7699B2EB
Certificate serial:       69509389B4ABC6A483947C8887D4F36E9302EBC9
Authority key identifier: 59:B0:8A:61:D0:AC:55:9F:86:B9:87:80:FB:FB:3E:EB:76:99:B2:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3136382e302e342e302f32332d3233203d3e20323635323431.roa
Signing time:             Tue 17 May 2022 23:48:06 +0000
ROA not before:           Tue 17 May 2022 23:43:06 +0000
ROA not after:            Tue 16 May 2023 23:48:06 +0000
asID:                     265241
IP address blocks:        168.0.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:50:93:89:b4:ab:c6:a4:83:94:7c:88:87:d4:f3:6e:93:02:eb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B08A61D0AC559F86B98780FBFB3EEB7699B2EB
        Validity
            Not Before: May 17 23:43:06 2022 GMT
            Not After : May 16 23:48:06 2023 GMT
        Subject: CN=188BBDE8D386196E5D4A9E91833893EC297AE2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1f:2e:46:9d:19:3e:bf:76:ec:c9:c8:3f:0c:
                    65:5a:48:39:0b:b5:13:32:13:de:36:d0:56:ed:6e:
                    48:9b:2e:00:a6:b8:01:1d:cd:69:6f:16:b4:42:60:
                    f4:c8:09:0e:32:98:7d:e2:ed:dc:f9:dc:6b:96:99:
                    6e:a3:c9:23:b5:e9:d8:48:07:b5:b3:0e:f6:88:cc:
                    50:07:a2:ae:a9:d6:41:8e:6f:7f:18:d8:8b:09:67:
                    7d:e9:f1:fd:10:0a:8c:c5:40:d2:93:8e:d0:d7:24:
                    99:af:ba:2f:32:d6:73:04:9a:1a:69:64:d8:91:a0:
                    51:4a:b1:60:14:89:70:9f:dd:f8:94:99:38:da:cc:
                    aa:5e:e4:94:ed:18:b2:d5:90:12:bc:81:80:96:75:
                    36:5e:8b:37:a4:3b:1d:6e:75:77:bd:06:54:30:9e:
                    7b:68:c0:82:aa:77:22:b5:59:72:74:68:30:5d:e9:
                    a9:be:24:6f:ca:59:82:6a:cd:64:e9:db:75:cf:54:
                    83:34:b7:c2:c4:32:0b:f8:b6:8a:0b:75:87:e2:8f:
                    4b:ca:5a:33:16:4a:b9:12:81:99:e6:e7:2c:f0:c6:
                    77:b9:65:56:4b:fc:dd:cc:da:a0:a5:88:fa:05:46:
                    a3:ff:0c:84:ce:20:c8:24:cd:4f:66:be:29:a0:b4:
                    56:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8B:BD:E8:D3:86:19:6E:5D:4A:9E:91:83:38:93:EC:29:7A:E2:E5
            X509v3 Authority Key Identifier:
                keyid:59:B0:8A:61:D0:AC:55:9F:86:B9:87:80:FB:FB:3E:EB:76:99:B2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3136382e302e342e302f32332d3233203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:0a:37:8e:5e:4a:10:c9:bc:34:47:27:04:1c:c9:ce:b1:30:
         2a:52:49:a4:38:dd:64:82:07:08:7a:3d:42:1d:c7:b0:f6:de:
         82:38:db:fe:1f:91:45:0b:bc:2c:02:03:8f:a7:a3:de:cf:2f:
         7d:7e:28:c8:b7:a6:10:b8:24:8d:90:41:61:97:6f:00:d3:c3:
         4c:35:0b:0b:4b:6c:03:16:d4:e5:eb:0a:9e:1b:1a:f2:b9:0e:
         39:d6:43:a2:90:b5:a4:cd:5e:b7:ab:01:95:11:89:b9:da:76:
         47:fb:d6:50:20:3d:69:73:3c:95:d6:bb:a3:34:0c:37:4c:ae:
         56:f1:59:1c:f7:4d:fe:d3:75:35:e6:3d:55:fa:52:a9:69:17:
         a0:a5:6a:9a:9e:1c:5e:6d:f0:7f:23:b8:9f:ae:55:2f:1a:4c:
         37:29:fa:4e:1a:51:d2:24:24:3f:5d:ea:92:ee:53:e7:01:e0:
         97:52:6f:0c:cd:83:db:e2:b0:60:01:e6:4a:c4:ad:bc:b9:a3:
         21:5c:ca:0b:70:cc:a9:78:d6:01:18:65:39:89:b0:bb:ee:3c:
         a0:54:fd:e1:91:a5:99:dd:f8:35:94:78:c4:3c:d9:20:c0:15:
         ac:48:98:1e:c0:00:eb:9c:e3:e1:6a:8a:d6:e0:eb:bc:94:0c:
         7f:b7:93:da
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUaVCTibSrxqSDlHyIh9TzbpMC68kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCMDhBNjFEMEFDNTU5Rjg2Qjk4NzgwRkJGQjNFRUI3
Njk5QjJFQjAeFw0yMjA1MTcyMzQzMDZaFw0yMzA1MTYyMzQ4MDZaMDMxMTAvBgNV
BAMTKDE4OEJCREU4RDM4NjE5NkU1RDRBOUU5MTgzMzg5M0VDMjk3QUUyRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcHy5GnRk+v3bsycg/DGVaSDkL
tRMyE9420FbtbkibLgCmuAEdzWlvFrRCYPTICQ4ymH3i7dz53GuWmW6jySO16dhI
B7WzDvaIzFAHoq6p1kGOb38Y2IsJZ33p8f0QCozFQNKTjtDXJJmvui8y1nMEmhpp
ZNiRoFFKsWAUiXCf3fiUmTjazKpe5JTtGLLVkBK8gYCWdTZeizekOx1udXe9BlQw
nntowIKqdyK1WXJ0aDBd6am+JG/KWYJqzWTp23XPVIM0t8LEMgv4tooLdYfij0vK
WjMWSrkSgZnm5yzwxne5ZVZL/N3M2qCliPoFRqP/DITOIMgkzU9mvimgtFbbAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUGIu96NOGGW5dSp6RgziT7Cl64uUwHwYDVR0j
BBgwFoAUWbCKYdCsVZ+GuYeA+/s+63aZsuswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5zQzFvUVdUdjI5ZVM4YkdwWnFFQWpRQjd5ZXZwZDFvY1J1aHFhZVNQ
Sm0vMC81OUIwOEE2MUQwQUM1NTlGODZCOTg3ODBGQkZCM0VFQjc2OTlCMkVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU5QjA4QTYxRDBBQzU1OUY4
NkI5ODc4MEZCRkIzRUVCNzY5OUIyRUIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOc0Mxb1FXVHYyOWVTOGJHcFpxRUFqUUI3eWV2cGQxb2NSdWhxYWVTUEptLzAv
MzEzNjM4MmUzMDJlMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzUzMjM0
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGoAAQwDQYJKoZIhvcNAQELBQADggEBADIKN45eShDJvDRH
JwQcyc6xMCpSSaQ43WSCBwh6PUIdx7D23oI42/4fkUULvCwCA4+no97PL31+KMi3
phC4JI2QQWGXbwDTw0w1CwtLbAMW1OXrCp4bGvK5DjnWQ6KQtaTNXrerAZURibna
dkf71lAgPWlzPJXWu6M0DDdMrlbxWRz3Tf7TdTXmPVX6UqlpF6ClapqeHF5t8H8j
uJ+uVS8aTDcp+k4aUdIkJD9d6pLuU+cB4JdSbwzNg9visGAB5krErby5oyFcygtw
zKl41gEYZTmJsLvuPKBU/eGRpZnd+DWUeMQ82SDAFaxImB7AAOuc4+Fqitbg67yU
DH+3k9o=
-----END CERTIFICATE-----