Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31613a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a31613a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          fv7xKnemJkw89vFItmlb/mP1EANzW0It40AkjmItqOE=
Subject key identifier:   C7:AF:DC:43:DF:64:95:D1:A7:1B:B9:07:2D:6F:AE:23:46:57:D6:06
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       54D0E3F15860588037A648E557BB050A29B73CDB
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31613a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:14 +0000
ROA not before:           Wed 23 Nov 2022 18:34:14 +0000
ROA not after:            Wed 22 Nov 2023 18:39:14 +0000
asID:                     53048
IP address blocks:        2804:1b04:1a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d0:e3:f1:58:60:58:80:37:a6:48:e5:57:bb:05:0a:29:b7:3c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:14 2022 GMT
            Not After : Nov 22 18:39:14 2023 GMT
        Subject: CN=C7AFDC43DF6495D1A71BB9072D6FAE234657D606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:12:3b:1c:60:b0:78:2b:8c:ec:9a:95:a0:
                    71:e2:13:55:70:ee:85:ba:4d:d1:60:b7:53:01:32:
                    c7:a2:b9:30:1f:76:cc:bd:13:0e:9a:0d:ad:94:54:
                    8c:cd:77:7d:42:4c:0b:d0:c7:3b:e2:63:82:22:4f:
                    8c:6c:ad:1b:bf:af:89:f0:f7:41:29:e7:80:63:b7:
                    e9:17:ca:26:9b:c0:f8:fd:27:a9:d5:d9:68:4d:b5:
                    7c:1d:61:6e:0b:fb:72:9f:2c:20:7b:5b:a1:39:2c:
                    80:a0:f4:e7:7e:4e:81:54:11:66:ba:1d:62:fa:0c:
                    f7:06:b9:e8:41:d7:22:c1:8e:fe:83:47:23:69:11:
                    56:51:d8:27:df:ec:b1:81:fe:84:d1:9b:de:86:77:
                    4f:45:68:10:2f:77:7b:82:55:06:0b:d3:50:8b:80:
                    bd:eb:03:0b:fd:fa:4e:c6:f7:6b:ff:10:40:42:5d:
                    f4:24:87:7d:c3:23:52:b7:31:c2:66:b4:d7:0f:92:
                    82:2e:8f:d2:b6:ce:eb:c4:7d:f8:d6:48:b2:59:2d:
                    bd:16:65:af:27:8b:ec:5a:46:59:ac:68:c9:fa:ac:
                    b7:19:e0:53:73:f7:99:38:59:26:cf:26:49:d9:22:
                    04:b9:da:6c:9a:31:92:6f:70:c6:3e:78:fb:5d:f2:
                    31:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AF:DC:43:DF:64:95:D1:A7:1B:B9:07:2D:6F:AE:23:46:57:D6:06
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31613a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:1a::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:71:15:c7:e7:76:59:89:87:92:6a:4a:85:bc:9c:73:d2:db:
         7c:a2:ad:24:02:55:0b:2d:94:26:4d:e5:58:f2:8f:6f:51:1c:
         d1:a1:7d:d0:28:e3:40:06:71:fc:2b:e4:a5:d6:7d:e2:a1:aa:
         1d:f5:4b:f0:8e:91:bf:a7:3a:19:29:9b:a3:19:d4:4b:00:c1:
         34:7f:d4:aa:4a:86:92:cc:17:fc:dd:e4:4b:9b:60:b8:d2:67:
         28:e7:2c:b0:86:8a:b2:b2:30:e9:86:b2:f7:98:53:20:a1:1b:
         c5:24:e7:9f:89:af:69:b0:16:51:b8:80:4f:8a:b7:55:21:0b:
         dd:5e:e0:e6:d4:91:1c:82:66:be:c8:c7:fd:14:f6:d1:02:3d:
         74:cd:b2:c2:d7:0e:0d:20:78:61:a5:10:db:41:a6:2a:cd:d8:
         ec:a0:7c:a7:92:8b:33:13:54:9c:8a:53:8f:cc:21:6e:0a:0d:
         52:63:ce:8e:14:25:e9:92:5d:00:e2:cd:70:fe:d1:58:29:71:
         a9:cf:55:72:d0:92:fe:0f:d6:cd:bf:db:34:b3:e2:05:a7:9c:
         63:5b:20:2e:4d:be:72:6a:b1:b8:17:7e:7c:9e:a4:81:73:8d:
         a7:7b:6f:e3:07:61:53:33:d6:01:ee:82:11:1b:4c:4d:14:e5:
         1e:60:ba:81
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUVNDj8VhgWIA3pkjlV7sFCim3PNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIyRDhDMzhDNzU4QzhGRDVFQ0M3N0M1NDBGMTVERjUx
RDJGMUMzRjAeFw0yMjExMjMxODM0MTRaFw0yMzExMjIxODM5MTRaMDMxMTAvBgNV
BAMTKEM3QUZEQzQzREY2NDk1RDFBNzFCQjkwNzJENkZBRTIzNDY1N0Q2MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLBI7HGCweCuM7JqVoHHiE1Vw
7oW6TdFgt1MBMseiuTAfdsy9Ew6aDa2UVIzNd31CTAvQxzviY4IiT4xsrRu/r4nw
90Ep54Bjt+kXyiabwPj9J6nV2WhNtXwdYW4L+3KfLCB7W6E5LICg9Od+ToFUEWa6
HWL6DPcGuehB1yLBjv6DRyNpEVZR2Cff7LGB/oTRm96Gd09FaBAvd3uCVQYL01CL
gL3rAwv9+k7G92v/EEBCXfQkh33DI1K3McJmtNcPkoIuj9K2zuvEffjWSLJZLb0W
Za8ni+xaRlmsaMn6rLcZ4FNz95k4WSbPJknZIgS52myaMZJvcMY+ePtd8jFpAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUx6/cQ99kldGnG7kHLW+uI0ZX1gYwHwYDVR0j
BBgwFoAUEi2MOMdYyP1ezHfFQPFd9R0vHD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1g1dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNF
QWkvMC8xMjJEOEMzOEM3NThDOEZENUVDQzc3QzU0MEYxNURGNTFEMkYxQzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyMkQ4QzM4Qzc1OEM4RkQ1
RUNDNzdDNTQwRjE1REY1MUQyRjFDM0YuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNYNXVmeDJuclJDa3Y3c2VZcXVQR2UxY0hVU3BqWTFWWVZvUjRCZ05DRUFpLzAv
MzIzODMwMzQzYTMxNjIzMDM0M2EzMTYxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMzMwMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEGwQAGjANBgkqhkiG9w0BAQsFAAOCAQEA
QHEVx+d2WYmHkmpKhbycc9LbfKKtJAJVCy2UJk3lWPKPb1Ec0aF90CjjQAZx/Cvk
pdZ94qGqHfVL8I6Rv6c6GSmboxnUSwDBNH/UqkqGkswX/N3kS5tguNJnKOcssIaK
srIw6Yay95hTIKEbxSTnn4mvabAWUbiAT4q3VSEL3V7g5tSRHIJmvsjH/RT20QI9
dM2ywtcODSB4YaUQ20GmKs3Y7KB8p5KLMxNUnIpTj8whbgoNUmPOjhQl6ZJdAOLN
cP7RWClxqc9VctCS/g/Wzb/bNLPiBaecY1sgLk2+cmqxuBd+fJ6kgXONp3tv4wdh
UzPWAe6CERtMTRTlHmC6gQ==
-----END CERTIFICATE-----