Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/323830343a333736383a3a2f33322d313238203d3e20323636343130.roa
File:                     323830343a333736383a3a2f33322d313238203d3e20323636343130.roa (raw, json)
Hash identifier:          kYYu2MNcWZHwCQYIwgiSoaC3hzgNMj1yktaZ5WmyX8A=
Subject key identifier:   BE:FB:1D:36:B7:67:1F:78:81:0D:41:0A:8F:D3:08:74:DF:BB:00:4A
Certificate issuer:       /CN=5D3E9920CB3EA518E5033995FF7833D02B0BA31D
Certificate serial:       50CB4AB4127DFE30A6055D75824EA2DF496EF1B2
Authority key identifier: 5D:3E:99:20:CB:3E:A5:18:E5:03:39:95:FF:78:33:D0:2B:0B:A3:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D3E9920CB3EA518E5033995FF7833D02B0BA31D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/323830343a333736383a3a2f33322d313238203d3e20323636343130.roa
Signing time:             Wed 22 Nov 2023 16:00:23 +0000
ROA not before:           Wed 22 Nov 2023 15:55:23 +0000
ROA not after:            Wed 20 Nov 2024 16:00:23 +0000
asID:                     266410
IP address blocks:        2804:3768::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:cb:4a:b4:12:7d:fe:30:a6:05:5d:75:82:4e:a2:df:49:6e:f1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D3E9920CB3EA518E5033995FF7833D02B0BA31D
        Validity
            Not Before: Nov 22 15:55:23 2023 GMT
            Not After : Nov 20 16:00:23 2024 GMT
        Subject: CN=BEFB1D36B7671F78810D410A8FD30874DFBB004A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ad:3e:7c:29:c4:fb:d6:90:c9:64:52:d4:42:
                    10:c5:ae:a3:a9:38:47:8d:74:37:c9:34:84:e5:58:
                    fb:7f:af:f7:d8:90:23:77:76:df:b7:8a:79:85:70:
                    67:69:be:d5:1e:67:dd:f5:4d:d9:82:0d:8e:dd:66:
                    66:ea:8e:2c:27:28:28:b1:e5:c4:f4:e2:e5:39:7f:
                    5b:5b:53:ea:52:5a:4f:47:08:d0:f7:12:1f:ec:eb:
                    52:f6:f2:51:87:23:eb:f9:a8:26:ee:91:57:7b:8f:
                    76:4f:a2:ef:9a:f9:62:c8:02:7d:48:25:94:79:b2:
                    3d:66:ae:8b:f4:67:cc:0e:12:fb:86:41:0c:23:73:
                    2c:d4:2c:ba:cf:72:c8:ff:1a:fa:28:ed:be:42:d5:
                    99:1d:67:70:ab:02:c7:c0:e3:32:d3:8d:13:56:8c:
                    f4:83:f7:aa:ab:ab:da:0e:be:af:05:e7:e1:66:90:
                    ed:83:cb:f5:89:5f:e8:f7:21:55:fa:6d:2e:98:c5:
                    7f:1d:40:b4:7e:ce:ed:a4:d0:80:d9:d7:b3:e1:ed:
                    0a:91:c3:25:69:e8:db:48:1c:14:ec:9b:7c:2f:1d:
                    95:ff:5a:c2:ea:27:36:6b:f2:f6:d7:a2:29:c8:ea:
                    99:f9:63:13:e5:ac:e2:71:c5:bd:ba:ab:21:01:6d:
                    9c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FB:1D:36:B7:67:1F:78:81:0D:41:0A:8F:D3:08:74:DF:BB:00:4A
            X509v3 Authority Key Identifier:
                keyid:5D:3E:99:20:CB:3E:A5:18:E5:03:39:95:FF:78:33:D0:2B:0B:A3:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/5D3E9920CB3EA518E5033995FF7833D02B0BA31D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D3E9920CB3EA518E5033995FF7833D02B0BA31D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/323830343a333736383a3a2f33322d313238203d3e20323636343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3768::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:d3:fb:1a:56:2f:67:84:31:27:35:6a:07:8a:f8:2e:f7:89:
         f4:73:4d:a2:c9:35:3f:ac:cc:c0:ec:13:d5:e5:01:68:97:a6:
         42:ea:d2:e7:b1:68:13:a8:5d:96:29:d7:82:cc:4e:e8:90:de:
         a1:a3:d8:be:f1:5d:53:6a:dd:13:13:cd:08:92:ff:34:2f:64:
         a5:f9:39:31:b1:c5:d4:1c:97:a1:27:b3:89:53:ba:c8:e9:b7:
         34:26:da:4d:5c:8b:13:59:7d:cf:60:e9:5d:21:8a:b0:08:1e:
         8a:f1:63:f0:ca:34:6c:ee:8f:2f:3d:82:f4:f8:62:81:51:d6:
         dd:d6:ec:47:c2:86:b1:6a:dd:38:27:2b:3d:19:9b:70:c3:42:
         88:2c:c2:82:0f:ca:97:e2:be:ff:66:f5:82:07:73:a8:0e:e2:
         04:f8:6c:17:f0:4c:43:01:90:28:ab:2e:7e:57:f8:cb:7b:9e:
         75:df:b3:e8:d4:5a:ea:51:f3:30:5b:3a:20:ec:b0:fd:eb:16:
         d7:61:c7:39:5d:22:96:d0:ae:8a:d3:2f:f9:0a:44:51:10:43:
         75:9b:fc:af:be:d1:31:83:2e:6f:60:a0:15:74:17:95:65:4b:
         3c:ed:16:f2:43:29:e6:4c:79:d8:32:45:b6:5a:5b:57:6b:e7:
         1a:1b:93:6b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUUMtKtBJ9/jCmBV11gk6i30lu8bIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQzRTk5MjBDQjNFQTUxOEU1MDMzOTk1RkY3ODMzRDAy
QjBCQTMxRDAeFw0yMzExMjIxNTU1MjNaFw0yNDExMjAxNjAwMjNaMDMxMTAvBgNV
BAMTKEJFRkIxRDM2Qjc2NzFGNzg4MTBENDEwQThGRDMwODc0REZCQjAwNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhrT58KcT71pDJZFLUQhDFrqOp
OEeNdDfJNITlWPt/r/fYkCN3dt+3inmFcGdpvtUeZ931TdmCDY7dZmbqjiwnKCix
5cT04uU5f1tbU+pSWk9HCND3Eh/s61L28lGHI+v5qCbukVd7j3ZPou+a+WLIAn1I
JZR5sj1mrov0Z8wOEvuGQQwjcyzULLrPcsj/Gvoo7b5C1ZkdZ3CrAsfA4zLTjRNW
jPSD96qrq9oOvq8F5+FmkO2Dy/WJX+j3IVX6bS6YxX8dQLR+zu2k0IDZ17Ph7QqR
wyVp6NtIHBTsm3wvHZX/WsLqJzZr8vbXoinI6pn5YxPlrOJxxb26qyEBbZzBAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUvvsdNrdnH3iBDUEKj9MIdN+7AEowHwYDVR0j
BBgwFoAUXT6ZIMs+pRjlAzmV/3gz0CsLox0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzNSc0JOc2NLNVZqNkVHMmlueDRqTGl2a1FHcDg3ZVFoM0s5dEhlZ3pW
bmUvMC81RDNFOTkyMENCM0VBNTE4RTUwMzM5OTVGRjc4MzNEMDJCMEJBMzFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVEM0U5OTIwQ0IzRUE1MThF
NTAzMzk5NUZGNzgzM0QwMkIwQkEzMUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMzUnNCTnNjSzVWajZFRzJpbng0akxpdmtRR3A4N2VRaDNLOXRIZWd6Vm5lLzAv
MzIzODMwMzQzYTMzMzczNjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzNDMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDdoMA0GCSqGSIb3DQEBCwUAA4IBAQBQ0/sa
Vi9nhDEnNWoHivgu94n0c02iyTU/rMzA7BPV5QFol6ZC6tLnsWgTqF2WKdeCzE7o
kN6ho9i+8V1Tat0TE80Ikv80L2Sl+TkxscXUHJehJ7OJU7rI6bc0JtpNXIsTWX3P
YOldIYqwCB6K8WPwyjRs7o8vPYL0+GKBUdbd1uxHwoaxat04Jys9GZtww0KILMKC
D8qX4r7/ZvWCB3OoDuIE+GwX8ExDAZAoqy5+V/jLe55137Po1FrqUfMwWzog7LD9
6xbXYcc5XSKW0K6K0y/5CkRREEN1m/yvvtExgy5vYKAVdBeVZUs87RbyQynmTHnY
MkW2WltXa+caG5Nr
-----END CERTIFICATE-----