Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa
File:                     323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa (raw, json)
Hash identifier:          SI7QI8G64SkOHvUjcgLbuVY8WMFgBydSAFqF3ILPWUU=
Subject key identifier:   39:6A:F7:F2:18:8C:77:79:7F:0E:DA:E0:17:69:AD:69:21:C4:F4:B5
Certificate issuer:       /CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
Certificate serial:       3A5B75C1F84FD503770C5F890228FB89F76AAAE9
Authority key identifier: 16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa
Signing time:             Wed 14 Feb 2024 20:09:51 +0000
ROA not before:           Wed 14 Feb 2024 20:04:51 +0000
ROA not after:            Wed 12 Feb 2025 20:09:51 +0000
asID:                     268678
IP address blocks:        2804:54ec:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5b:75:c1:f8:4f:d5:03:77:0c:5f:89:02:28:fb:89:f7:6a:aa:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
        Validity
            Not Before: Feb 14 20:04:51 2024 GMT
            Not After : Feb 12 20:09:51 2025 GMT
        Subject: CN=396AF7F2188C77797F0EDAE01769AD6921C4F4B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:00:eb:3e:e1:f5:6c:c4:a0:74:90:a9:f8:e1:
                    05:9e:f6:2e:fb:f7:a3:aa:87:bd:47:4e:2c:ec:44:
                    75:43:98:11:8b:c7:7f:44:26:03:32:8a:ee:d9:d5:
                    47:d1:5f:63:19:9a:e0:e2:e1:02:54:df:a8:48:01:
                    5e:c9:88:bf:21:ff:ea:ab:1b:6b:a0:15:93:86:cc:
                    82:d7:2e:b5:1d:7d:f9:f1:a5:c1:65:b9:78:10:3d:
                    25:b3:4a:67:ea:6c:19:c1:78:a3:6a:c1:bc:35:a9:
                    6d:83:03:1d:92:f9:01:96:90:63:3b:11:30:a6:46:
                    67:58:a0:d7:48:34:77:4c:44:77:0e:fc:47:35:8a:
                    1f:59:a3:7e:cc:84:ca:28:0b:4f:f5:d9:48:2d:be:
                    e1:91:1b:17:44:b9:8f:dd:c5:c0:42:7e:20:9a:61:
                    ca:a2:27:cd:6d:31:fe:30:de:0a:6b:88:ce:2e:67:
                    16:2e:ae:87:76:3a:ab:42:a6:9c:8b:42:a8:ee:f9:
                    a7:c1:24:e9:0d:27:a7:fc:4b:3f:8e:27:b8:ec:51:
                    05:05:12:bf:20:1d:4e:6b:38:6a:0c:8e:28:a0:a4:
                    fb:f5:38:50:5b:07:d3:f1:de:e2:22:43:63:82:1d:
                    47:56:2e:04:bf:f9:88:cd:96:0b:34:35:64:02:c6:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6A:F7:F2:18:8C:77:79:7F:0E:DA:E0:17:69:AD:69:21:C4:F4:B5
            X509v3 Authority Key Identifier:
                keyid:16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         53:58:91:46:8d:82:fd:43:a2:4b:4b:28:78:e4:03:ff:37:c9:
         38:70:99:ef:f6:7e:b2:18:72:7d:a5:d1:37:4b:88:d3:39:fe:
         29:c4:85:6d:48:82:10:de:0b:78:9d:b3:cd:b4:c6:e5:df:69:
         ca:41:77:4c:82:99:a2:ae:e2:fb:ae:64:3a:75:01:62:35:59:
         c1:8c:a8:1c:c5:40:5d:55:8f:36:aa:60:b9:f4:0f:31:54:80:
         97:33:f0:c9:60:91:70:3d:1f:5f:75:a8:b3:50:dd:59:1d:76:
         93:d5:c4:18:9d:d4:5a:ab:1d:0f:56:c1:83:8e:2d:45:8f:8e:
         8c:c1:d1:8e:db:d7:75:21:77:41:7c:8f:38:0f:52:50:c6:ac:
         3a:ac:f1:1b:c1:6c:35:af:56:a7:76:f9:54:16:c7:9c:20:af:
         5d:01:ed:6c:fd:15:7c:a1:3c:f3:a5:63:a3:c4:22:b8:9a:fd:
         a6:e6:40:18:97:ee:ea:77:69:f2:a8:5e:f4:68:b8:90:d7:b8:
         3e:e3:98:a4:2d:5b:28:8e:d5:6f:70:30:44:40:dd:2b:f1:ff:
         c7:e4:81:e9:f1:44:58:73:77:b1:94:34:2b:bd:2c:0d:2a:1d:
         09:66:f1:76:25:09:a7:ee:f2:ad:1e:72:56:1e:c2:24:34:3a:
         69:1a:dc:a1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOlt1wfhP1QN3DF+JAij7ifdqqukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZFMzk0QjdBRDg5MDQyRjFGNTRCODEzRUMwREE2REUx
MTJFQzBEMTAeFw0yNDAyMTQyMDA0NTFaFw0yNTAyMTIyMDA5NTFaMDMxMTAvBgNV
BAMTKDM5NkFGN0YyMTg4Qzc3Nzk3RjBFREFFMDE3NjlBRDY5MjFDNEY0QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmAOs+4fVsxKB0kKn44QWe9i77
96Oqh71HTizsRHVDmBGLx39EJgMyiu7Z1UfRX2MZmuDi4QJU36hIAV7JiL8h/+qr
G2ugFZOGzILXLrUdffnxpcFluXgQPSWzSmfqbBnBeKNqwbw1qW2DAx2S+QGWkGM7
ETCmRmdYoNdINHdMRHcO/Ec1ih9Zo37MhMooC0/12UgtvuGRGxdEuY/dxcBCfiCa
YcqiJ81tMf4w3gpriM4uZxYurod2OqtCppyLQqju+afBJOkNJ6f8Sz+OJ7jsUQUF
Er8gHU5rOGoMjiigpPv1OFBbB9Px3uIiQ2OCHUdWLgS/+YjNlgs0NWQCxqhHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUOWr38hiMd3l/DtrgF2mtaSHE9LUwHwYDVR0j
BBgwFoAUFuOUt62JBC8fVLgT7A2m3hEuwNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3Yy
VHovMC8xNkUzOTRCN0FEODkwNDJGMUY1NEI4MTNFQzBEQTZERTExMkVDMEQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2RTM5NEI3QUQ4OTA0MkYx
RjU0QjgxM0VDMERBNkRFMTEyRUMwRDEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHcmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzAv
MzIzODMwMzQzYTM1MzQ2NTYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEVOyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBTWJFGjYL9Q6JLSyh45AP/N8k4cJnv9n6yGHJ9pdE3S4jTOf4pxIVtSIIQ
3gt4nbPNtMbl32nKQXdMgpmiruL7rmQ6dQFiNVnBjKgcxUBdVY82qmC59A8xVICX
M/DJYJFwPR9fdaizUN1ZHXaT1cQYndRaqx0PVsGDji1Fj46MwdGO29d1IXdBfI84
D1JQxqw6rPEbwWw1r1andvlUFsecIK9dAe1s/RV8oTzzpWOjxCK4mv2m5kAYl+7q
d2nyqF70aLiQ17g+45ikLVsojtVvcDBEQN0r8f/H5IHp8URYc3exlDQrvSwNKh0J
ZvF2JQmn7vKtHnJWHsIkNDppGtyh
-----END CERTIFICATE-----