Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/0/323830343a6630383a3a2f33322d3332203d3e20323633353633.roa
File:                     323830343a6630383a3a2f33322d3332203d3e20323633353633.roa (raw, json)
Hash identifier:          x+yvsvY+9IbHEPgOEaKsS1XeK3vHz/fZ/19LX8U6lOs=
Subject key identifier:   20:6B:E1:53:54:02:75:A8:09:90:7D:50:4F:69:1E:16:C9:88:10:98
Certificate issuer:       /CN=4BCC581581148CD1639867743FA1351FC5C7EE8F
Certificate serial:       714B1B35A846E95821BD65D74866D0568DAEA4F7
Authority key identifier: 4B:CC:58:15:81:14:8C:D1:63:98:67:74:3F:A1:35:1F:C5:C7:EE:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BCC581581148CD1639867743FA1351FC5C7EE8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/0/323830343a6630383a3a2f33322d3332203d3e20323633353633.roa
Signing time:             Mon 24 Jul 2023 21:20:57 +0000
ROA not before:           Mon 24 Jul 2023 21:15:57 +0000
ROA not after:            Mon 22 Jul 2024 21:20:57 +0000
asID:                     263563
IP address blocks:        2804:f08::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4b:1b:35:a8:46:e9:58:21:bd:65:d7:48:66:d0:56:8d:ae:a4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BCC581581148CD1639867743FA1351FC5C7EE8F
        Validity
            Not Before: Jul 24 21:15:57 2023 GMT
            Not After : Jul 22 21:20:57 2024 GMT
        Subject: CN=206BE153540275A809907D504F691E16C9881098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f6:cb:3d:17:9d:49:44:c5:e1:9c:a4:81:05:
                    0f:ba:d2:30:59:87:04:52:75:29:9e:85:bb:76:16:
                    ca:95:2d:48:6b:12:a1:ee:a2:95:e1:cd:66:35:90:
                    64:55:7e:26:fc:48:5f:dd:79:dc:b0:91:1e:8e:81:
                    b8:b5:f9:7d:65:87:18:49:e2:47:6e:ae:ce:12:2c:
                    5a:4c:3b:39:9c:3c:6d:a9:98:28:ba:ba:5f:95:6f:
                    de:44:bf:51:b7:0c:1a:45:2c:cf:2e:bc:a5:23:1a:
                    a0:97:26:bf:89:0a:1f:04:7c:9c:43:d1:84:d5:5f:
                    b6:9d:95:80:d6:9b:21:7e:04:63:ac:62:f6:bb:5f:
                    94:44:e7:47:c6:20:e6:c1:fb:b6:e6:67:bb:51:1d:
                    7e:93:eb:a4:2f:e5:26:66:b7:67:9f:c4:db:86:2d:
                    5e:f0:bc:27:e8:6b:a7:39:5d:bb:fd:91:cb:ec:fd:
                    b6:2a:61:fe:5a:2f:e1:7f:b4:56:89:06:9c:e4:9b:
                    06:d7:7c:46:9e:8e:65:a0:7b:eb:93:4f:97:38:f7:
                    7e:9c:37:a6:be:85:a0:c6:db:00:d5:80:2a:cb:d4:
                    bd:26:ae:09:35:55:f6:7e:a7:a7:db:6a:7a:90:e7:
                    6f:c1:53:8b:b8:49:30:d3:71:17:73:a0:f4:2c:e2:
                    1e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6B:E1:53:54:02:75:A8:09:90:7D:50:4F:69:1E:16:C9:88:10:98
            X509v3 Authority Key Identifier:
                keyid:4B:CC:58:15:81:14:8C:D1:63:98:67:74:3F:A1:35:1F:C5:C7:EE:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/0/4BCC581581148CD1639867743FA1351FC5C7EE8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BCC581581148CD1639867743FA1351FC5C7EE8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/0/323830343a6630383a3a2f33322d3332203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f08::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:09:89:3c:81:a4:92:e3:6d:6d:d3:7c:50:5b:e6:53:f0:92:
         c0:20:58:d5:d8:43:a1:7c:24:bf:bf:7d:3c:57:b5:95:77:f4:
         1a:b2:5f:e1:13:6b:2b:bb:2f:1a:60:48:ac:8c:b5:4f:89:80:
         c4:7b:d9:35:88:b0:c8:4e:06:29:c6:5e:57:0e:21:df:a2:7d:
         c0:5a:7b:9d:59:66:e5:6d:5a:2a:b9:14:8d:dc:1d:2c:97:9c:
         2a:a6:06:0e:28:4d:92:04:85:8b:b8:f5:a6:af:7c:36:76:91:
         3d:b9:cc:86:c6:7e:0c:06:93:d0:d7:35:54:17:b1:1a:e5:51:
         5b:9c:ca:94:97:d1:3f:56:5a:c8:86:e7:7d:50:01:9e:d7:f0:
         c2:29:5b:45:c0:d6:40:c3:7a:8e:19:77:6e:85:ef:f1:27:d9:
         d4:0a:26:11:cc:86:17:05:07:f6:4f:c8:12:ec:cc:bb:65:39:
         7e:f7:a6:91:0e:0c:9e:04:c2:db:fe:cd:10:3b:e7:96:8b:8c:
         c7:b7:d8:c0:21:d3:74:7f:1f:36:ab:03:04:51:59:3f:c6:52:
         3a:e7:5e:3f:dd:28:72:83:f7:8c:19:c2:a9:4e:c2:3e:86:5b:
         f1:f7:b5:ef:b5:0f:fa:02:a2:94:98:1f:f5:6e:c9:a1:f2:f0:
         29:33:70:44
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUcUsbNahG6VghvWXXSGbQVo2upPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJDQzU4MTU4MTE0OENEMTYzOTg2Nzc0M0ZBMTM1MUZD
NUM3RUU4RjAeFw0yMzA3MjQyMTE1NTdaFw0yNDA3MjIyMTIwNTdaMDMxMTAvBgNV
BAMTKDIwNkJFMTUzNTQwMjc1QTgwOTkwN0Q1MDRGNjkxRTE2Qzk4ODEwOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd9ss9F51JRMXhnKSBBQ+60jBZ
hwRSdSmehbt2FsqVLUhrEqHuopXhzWY1kGRVfib8SF/dedywkR6Ogbi1+X1lhxhJ
4kdurs4SLFpMOzmcPG2pmCi6ul+Vb95Ev1G3DBpFLM8uvKUjGqCXJr+JCh8EfJxD
0YTVX7adlYDWmyF+BGOsYva7X5RE50fGIObB+7bmZ7tRHX6T66Qv5SZmt2efxNuG
LV7wvCfoa6c5Xbv9kcvs/bYqYf5aL+F/tFaJBpzkmwbXfEaejmWge+uTT5c4936c
N6a+haDG2wDVgCrL1L0mrgk1VfZ+p6fbanqQ52/BU4u4STDTcRdzoPQs4h4tAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUIGvhU1QCdagJkH1QT2keFsmIEJgwHwYDVR0j
BBgwFoAUS8xYFYEUjNFjmGd0P6E1H8XH7o8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFNNdm1zcTFhZXY4QzEzdnJuNWRVMXBMekdwMXdHRkJuemdtTkpqOHNX
NkovMC80QkNDNTgxNTgxMTQ4Q0QxNjM5ODY3NzQzRkExMzUxRkM1QzdFRThGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRCQ0M1ODE1ODExNDhDRDE2
Mzk4Njc3NDNGQTEzNTFGQzVDN0VFOEYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRTTXZtc3ExYWV2OEMxM3ZybjVkVTFwTHpHcDF3R0ZCbnpnbU5KajhzVzZKLzAv
MzIzODMwMzQzYTY2MzAzODNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM1
MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEDwgwDQYJKoZIhvcNAQELBQADggEBAFEJiTyBpJLj
bW3TfFBb5lPwksAgWNXYQ6F8JL+/fTxXtZV39BqyX+ETayu7LxpgSKyMtU+JgMR7
2TWIsMhOBinGXlcOId+ifcBae51ZZuVtWiq5FI3cHSyXnCqmBg4oTZIEhYu49aav
fDZ2kT25zIbGfgwGk9DXNVQXsRrlUVucypSX0T9WWsiG531QAZ7X8MIpW0XA1kDD
eo4Zd26F7/En2dQKJhHMhhcFB/ZPyBLszLtlOX73ppEODJ4Ewtv+zRA755aLjMe3
2MAh03R/HzarAwRRWT/GUjrnXj/dKHKD94wZwqlOwj6GW/H3te+1D/oCopSYH/Vu
yaHy8CkzcEQ=
-----END CERTIFICATE-----