Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a393a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a393a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          86NhHrtgOMEaEZ8+XlKORA1WUt58TisZkx83oeWpg5s=
Subject key identifier:   99:2A:09:10:CC:94:B9:BB:B0:AC:AB:08:0C:46:2F:EB:E9:58:3A:F7
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       14E482D47E13F9C2F740B6A49B4AE739815EBDD4
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a393a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:18 +0000
ROA not before:           Wed 23 Nov 2022 18:34:18 +0000
ROA not after:            Wed 22 Nov 2023 18:39:18 +0000
asID:                     53048
IP address blocks:        2804:1b04:9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e4:82:d4:7e:13:f9:c2:f7:40:b6:a4:9b:4a:e7:39:81:5e:bd:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:18 2022 GMT
            Not After : Nov 22 18:39:18 2023 GMT
        Subject: CN=992A0910CC94B9BBB0ACAB080C462FEBE9583AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:dc:98:b0:71:51:d3:0e:28:04:61:64:73:
                    76:c0:3c:37:ff:fc:6a:21:34:e9:d3:dc:8d:47:b6:
                    7c:dc:68:d1:10:68:a2:c9:73:20:8a:59:64:cd:c8:
                    68:44:87:3f:bf:5f:30:f2:df:2c:c2:55:8c:48:c0:
                    8a:85:b2:88:98:30:45:d7:0d:de:d5:34:20:84:40:
                    f4:91:a1:76:3e:e8:4a:40:3f:88:74:9e:08:61:d9:
                    56:3a:77:2f:76:f8:95:62:56:3f:16:8b:db:99:e4:
                    71:fa:8e:e5:48:c8:9f:e2:f3:96:b4:aa:a7:63:82:
                    c5:d9:f2:a0:22:6b:15:7e:e9:62:9b:c7:1b:bb:07:
                    d9:5d:92:9c:20:25:86:23:9b:d6:c6:45:a0:30:b2:
                    6f:6b:b9:b3:17:d6:36:14:9d:3b:db:0c:0e:c7:78:
                    fd:62:45:77:c7:4e:cf:4c:14:4c:90:d4:b8:44:07:
                    5d:00:34:a3:8d:6c:31:a8:ac:e1:90:e3:3b:9e:cc:
                    f6:5d:cc:9e:2e:fe:b9:22:96:92:b0:0d:8c:20:96:
                    a7:b9:df:e0:2e:60:90:10:b5:68:59:8e:16:25:98:
                    34:24:da:77:ad:49:24:44:3d:45:a6:6d:b4:7e:23:
                    55:b4:9f:67:27:b8:19:9a:9d:33:fe:6e:86:45:b3:
                    6e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2A:09:10:CC:94:B9:BB:B0:AC:AB:08:0C:46:2F:EB:E9:58:3A:F7
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a393a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:b6:2c:2f:a1:86:f6:11:e0:7c:81:a7:e9:1b:71:42:4f:45:
         d2:f4:1e:ef:fa:b3:27:1d:12:11:c2:df:c2:c1:16:02:72:1b:
         21:fc:50:fb:24:ff:d1:cc:2a:5f:fd:95:d9:e0:b9:cd:72:92:
         74:3f:52:6b:62:45:39:1d:80:fd:f6:bd:49:03:04:72:3a:8f:
         78:a6:f1:d2:68:b9:0b:c7:e5:e8:58:5e:57:9b:56:68:83:31:
         5b:74:af:39:de:6e:b5:22:7a:64:97:43:02:2d:bc:33:79:19:
         26:3c:00:57:28:d3:87:24:4b:d4:1a:d5:66:8a:09:9f:fa:3e:
         8b:dc:45:3e:3d:b1:f6:2f:fd:c4:74:66:54:9f:43:6a:d2:03:
         f6:98:ef:68:7e:d9:7a:70:b9:52:15:f0:b4:68:ce:b1:8d:4e:
         e7:bd:dc:6b:b2:93:d7:6b:55:4b:4b:f3:7d:cb:cf:42:35:73:
         f0:2a:1a:70:f9:95:72:88:79:b7:16:9b:6d:93:4f:b3:dc:d4:
         0e:9f:c3:85:ba:55:89:ec:34:7f:8e:a4:bc:53:a9:9c:bb:3e:
         17:df:dc:4f:cb:1b:e1:39:3d:18:dc:63:f8:e9:ef:f7:6d:36:
         bd:55:04:d8:4e:1a:df:a6:80:21:ae:13:e8:16:14:16:f3:50:
         15:5f:50:7c
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUFOSC1H4T+cL3QLakm0rnOYFevdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIyRDhDMzhDNzU4QzhGRDVFQ0M3N0M1NDBGMTVERjUx
RDJGMUMzRjAeFw0yMjExMjMxODM0MThaFw0yMzExMjIxODM5MThaMDMxMTAvBgNV
BAMTKDk5MkEwOTEwQ0M5NEI5QkJCMEFDQUIwODBDNDYyRkVCRTk1ODNBRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvE9yYsHFR0w4oBGFkc3bAPDf/
/GohNOnT3I1HtnzcaNEQaKLJcyCKWWTNyGhEhz+/XzDy3yzCVYxIwIqFsoiYMEXX
Dd7VNCCEQPSRoXY+6EpAP4h0nghh2VY6dy92+JViVj8Wi9uZ5HH6juVIyJ/i85a0
qqdjgsXZ8qAiaxV+6WKbxxu7B9ldkpwgJYYjm9bGRaAwsm9rubMX1jYUnTvbDA7H
eP1iRXfHTs9MFEyQ1LhEB10ANKONbDGorOGQ4zuezPZdzJ4u/rkilpKwDYwglqe5
3+AuYJAQtWhZjhYlmDQk2netSSREPUWmbbR+I1W0n2cnuBmanTP+boZFs26pAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUmSoJEMyUubuwrKsIDEYv6+lYOvcwHwYDVR0j
BBgwFoAUEi2MOMdYyP1ezHfFQPFd9R0vHD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1g1dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNF
QWkvMC8xMjJEOEMzOEM3NThDOEZENUVDQzc3QzU0MEYxNURGNTFEMkYxQzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyMkQ4QzM4Qzc1OEM4RkQ1
RUNDNzdDNTQwRjE1REY1MUQyRjFDM0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNYNXVmeDJuclJDa3Y3c2VZcXVQR2UxY0hVU3BqWTFWWVZvUjRCZ05DRUFpLzAv
MzIzODMwMzQzYTMxNjIzMDM0M2EzOTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1
MzMzMDM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBBsEAAkwDQYJKoZIhvcNAQELBQADggEBABi2
LC+hhvYR4HyBp+kbcUJPRdL0Hu/6sycdEhHC38LBFgJyGyH8UPsk/9HMKl/9ldng
uc1yknQ/UmtiRTkdgP32vUkDBHI6j3im8dJouQvH5ehYXlebVmiDMVt0rznebrUi
emSXQwItvDN5GSY8AFco04ckS9Qa1WaKCZ/6PovcRT49sfYv/cR0ZlSfQ2rSA/aY
72h+2XpwuVIV8LRozrGNTue93Guyk9drVUtL833Lz0I1c/AqGnD5lXKIebcWm22T
T7Pc1A6fw4W6VYnsNH+OpLxTqZy7Phff3E/LG+E5PRjcY/jp7/dtNr1VBNhOGt+m
gCGuE+gWFBbzUBVfUHw=
-----END CERTIFICATE-----