Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31643a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a31643a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          zLsGyRAWrXUTuJbSQRFZFWLiq2g7dpsRAiC8arlWOtQ=
Subject key identifier:   F4:A2:31:77:A3:F9:19:7C:A5:BF:36:91:5A:74:BB:E3:84:F7:EB:A5
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       67DD1E31DF95EEA4218AC86FF4973ABD828E766A
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31643a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:13 +0000
ROA not before:           Wed 23 Nov 2022 18:34:13 +0000
ROA not after:            Wed 22 Nov 2023 18:39:13 +0000
asID:                     53048
IP address blocks:        2804:1b04:1d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:dd:1e:31:df:95:ee:a4:21:8a:c8:6f:f4:97:3a:bd:82:8e:76:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:13 2022 GMT
            Not After : Nov 22 18:39:13 2023 GMT
        Subject: CN=F4A23177A3F9197CA5BF36915A74BBE384F7EBA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:14:f3:d7:dd:ed:4c:4c:2b:05:a4:d3:bd:47:
                    f1:5b:78:8a:71:a5:6e:88:72:55:cc:44:5b:55:b6:
                    9f:cc:10:45:39:31:61:c4:18:3e:a5:3e:3c:2f:e1:
                    e2:c6:44:22:b6:9e:a9:3d:64:58:ce:3e:89:1a:c3:
                    f3:a2:ca:76:26:5e:47:c5:43:cd:2e:3b:18:47:8f:
                    6b:5a:f3:f6:84:b1:14:56:92:60:bf:58:e7:76:f5:
                    1c:5c:59:bb:21:09:b0:ec:c8:3b:0a:c5:7c:85:34:
                    be:44:dc:d6:d8:bc:82:a3:06:38:37:3a:de:30:26:
                    2f:4f:80:8c:99:47:45:5a:43:9f:ba:05:a8:e3:10:
                    58:e8:42:75:77:21:08:ae:73:b1:a7:47:ba:3f:2e:
                    1b:b0:88:a8:9b:dc:a3:48:c9:e6:df:a6:20:dc:0a:
                    be:4c:21:cf:76:62:a1:dc:b9:a1:c0:14:7c:45:30:
                    fa:99:68:4a:de:02:a1:53:f0:68:5e:3d:3f:b3:54:
                    24:04:b7:ba:af:0e:2a:23:ea:c4:35:97:88:c7:25:
                    1c:b8:5b:65:8c:61:89:5b:40:f0:46:c6:a3:26:a5:
                    13:c1:b0:2f:1d:c3:cb:4d:4e:a1:21:14:59:fc:f8:
                    a4:f5:5a:83:85:75:07:b2:13:7c:86:18:89:82:01:
                    66:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A2:31:77:A3:F9:19:7C:A5:BF:36:91:5A:74:BB:E3:84:F7:EB:A5
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31643a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:bf:93:1c:37:2e:ae:ac:6a:3f:e5:29:cb:8f:8e:2e:fd:a5:
         94:c3:b7:4a:94:61:83:3c:db:84:ee:c8:3f:16:3f:e2:43:ad:
         ab:51:94:fc:ee:c7:f8:94:6f:c3:5e:bd:69:de:ad:af:29:2b:
         08:59:d0:7d:da:a9:8e:a2:47:d0:44:94:b4:1a:98:b3:30:f4:
         60:71:f3:9a:7d:ed:eb:84:40:2f:fc:60:89:e2:0c:d5:c9:c9:
         71:c8:5d:ea:d6:e5:fc:f4:44:24:81:b9:c5:09:d6:e6:d7:08:
         f7:3e:e1:65:b8:2d:04:46:a8:b6:84:df:d4:b4:1c:eb:0d:29:
         39:94:cf:dd:19:d9:5d:47:f9:de:d8:ec:dd:2b:17:4f:d1:5c:
         68:23:49:ac:8f:d1:48:40:37:66:f1:e7:f3:c9:a7:b8:4d:9d:
         bf:a0:67:5e:e8:b9:ea:3e:86:53:cc:e0:05:74:92:21:7f:f8:
         91:f7:e9:c2:81:ef:85:a5:3b:3e:5b:17:bc:f8:71:55:25:84:
         a8:11:0d:21:39:76:b8:fe:9f:e2:a7:cf:dc:22:50:ff:e7:29:
         e3:f3:15:f4:9c:ac:7e:c4:9f:81:61:86:d0:82:e5:08:de:12:
         0b:11:ff:2c:49:40:ad:6d:fb:04:e6:76:c5:36:7b:96:7a:5f:
         06:08:57:ac
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUZ90eMd+V7qQhishv9Jc6vYKOdmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIyRDhDMzhDNzU4QzhGRDVFQ0M3N0M1NDBGMTVERjUx
RDJGMUMzRjAeFw0yMjExMjMxODM0MTNaFw0yMzExMjIxODM5MTNaMDMxMTAvBgNV
BAMTKEY0QTIzMTc3QTNGOTE5N0NBNUJGMzY5MTVBNzRCQkUzODRGN0VCQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoFPPX3e1MTCsFpNO9R/FbeIpx
pW6IclXMRFtVtp/MEEU5MWHEGD6lPjwv4eLGRCK2nqk9ZFjOPokaw/OiynYmXkfF
Q80uOxhHj2ta8/aEsRRWkmC/WOd29RxcWbshCbDsyDsKxXyFNL5E3NbYvIKjBjg3
Ot4wJi9PgIyZR0VaQ5+6BajjEFjoQnV3IQiuc7GnR7o/LhuwiKib3KNIyebfpiDc
Cr5MIc92YqHcuaHAFHxFMPqZaEreAqFT8GhePT+zVCQEt7qvDioj6sQ1l4jHJRy4
W2WMYYlbQPBGxqMmpRPBsC8dw8tNTqEhFFn8+KT1WoOFdQeyE3yGGImCAWa7AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU9KIxd6P5GXylvzaRWnS744T366UwHwYDVR0j
BBgwFoAUEi2MOMdYyP1ezHfFQPFd9R0vHD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1g1dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNF
QWkvMC8xMjJEOEMzOEM3NThDOEZENUVDQzc3QzU0MEYxNURGNTFEMkYxQzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyMkQ4QzM4Qzc1OEM4RkQ1
RUNDNzdDNTQwRjE1REY1MUQyRjFDM0YuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNYNXVmeDJuclJDa3Y3c2VZcXVQR2UxY0hVU3BqWTFWWVZvUjRCZ05DRUFpLzAv
MzIzODMwMzQzYTMxNjIzMDM0M2EzMTY0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMzMwMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEGwQAHTANBgkqhkiG9w0BAQsFAAOCAQEA
fL+THDcurqxqP+Upy4+OLv2llMO3SpRhgzzbhO7IPxY/4kOtq1GU/O7H+JRvw169
ad6trykrCFnQfdqpjqJH0ESUtBqYszD0YHHzmn3t64RAL/xgieIM1cnJcchd6tbl
/PREJIG5xQnW5tcI9z7hZbgtBEaotoTf1LQc6w0pOZTP3RnZXUf53tjs3SsXT9Fc
aCNJrI/RSEA3ZvHn88mnuE2dv6BnXui56j6GU8zgBXSSIX/4kffpwoHvhaU7PlsX
vPhxVSWEqBENITl2uP6f4qfP3CJQ/+cp4/MV9JysfsSfgWGG0ILlCN4SCxH/LElA
rW37BOZ2xTZ7lnpfBghXrA==
-----END CERTIFICATE-----