Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a633030303a3a2f33342d3334203d3e20323639303735.roa
File:                     323830343a356631343a633030303a3a2f33342d3334203d3e20323639303735.roa (raw, json)
Hash identifier:          f7kLiTpRHgT2jN2/RxQnTmwhji5YtU/0S72dHoW+Ck0=
Subject key identifier:   14:2D:3A:71:A5:9E:1A:FF:66:2E:6A:0D:57:90:A2:27:5D:B9:E5:A7
Certificate issuer:       /CN=A04E01C2C7CEF30C9831FD37C94F10585E93B941
Certificate serial:       122BF4D5BFC4F9854726C3C129FA2EB49512072F
Authority key identifier: A0:4E:01:C2:C7:CE:F3:0C:98:31:FD:37:C9:4F:10:58:5E:93:B9:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A04E01C2C7CEF30C9831FD37C94F10585E93B941.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a633030303a3a2f33342d3334203d3e20323639303735.roa
Signing time:             Tue 25 Oct 2022 21:42:08 +0000
ROA not before:           Tue 25 Oct 2022 21:37:08 +0000
ROA not after:            Tue 24 Oct 2023 21:42:08 +0000
asID:                     269075
IP address blocks:        2804:5f14:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2b:f4:d5:bf:c4:f9:85:47:26:c3:c1:29:fa:2e:b4:95:12:07:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A04E01C2C7CEF30C9831FD37C94F10585E93B941
        Validity
            Not Before: Oct 25 21:37:08 2022 GMT
            Not After : Oct 24 21:42:08 2023 GMT
        Subject: CN=142D3A71A59E1AFF662E6A0D5790A2275DB9E5A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:38:48:f7:c2:9f:5c:ae:95:cb:74:ac:3a:d8:
                    61:d5:e9:6d:68:70:e0:a8:69:d0:06:99:3e:bd:fc:
                    15:dc:67:f6:fa:ff:84:e6:1e:69:8f:4b:32:63:e8:
                    90:66:7a:de:d2:43:22:a5:23:70:68:4a:a7:cd:a5:
                    35:3a:19:55:f3:fc:67:b5:7b:25:42:54:1e:8a:31:
                    88:c4:2e:2a:dd:6a:ef:ae:e8:9c:c5:84:3c:22:67:
                    a0:94:21:d9:a6:37:cd:df:63:4a:b7:e8:4c:22:87:
                    22:87:35:be:61:74:a4:2b:05:61:db:b5:d2:fd:f4:
                    9e:51:c4:08:76:b1:53:be:13:e8:e7:06:65:ac:ca:
                    2b:cb:1c:77:b0:5d:27:f4:50:f4:d2:8d:fa:f0:2f:
                    59:5f:02:83:aa:d0:d1:27:02:e3:46:e0:42:dc:7d:
                    9a:7d:0f:22:db:94:d8:e9:08:53:70:b0:f1:5b:2f:
                    22:a9:b1:69:15:11:d1:2d:e4:7d:73:5a:32:73:72:
                    c9:ee:1f:31:f8:06:f1:a3:bf:bd:f6:ba:14:7f:59:
                    51:b8:7a:5a:98:55:f0:b3:e2:a7:b8:79:1b:54:ea:
                    79:a5:6b:2f:8c:ed:06:44:1f:0f:a6:91:f2:40:9e:
                    9a:26:9b:52:65:95:7e:46:5a:87:99:07:e0:37:6a:
                    87:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2D:3A:71:A5:9E:1A:FF:66:2E:6A:0D:57:90:A2:27:5D:B9:E5:A7
            X509v3 Authority Key Identifier:
                keyid:A0:4E:01:C2:C7:CE:F3:0C:98:31:FD:37:C9:4F:10:58:5E:93:B9:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/A04E01C2C7CEF30C9831FD37C94F10585E93B941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A04E01C2C7CEF30C9831FD37C94F10585E93B941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a633030303a3a2f33342d3334203d3e20323639303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f14:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         15:92:f6:cf:48:2e:4d:6c:6f:05:07:dd:a9:87:70:b5:c2:55:
         1b:c8:59:03:dd:3a:68:65:78:e6:31:47:8c:60:b0:a1:7a:64:
         0f:6b:56:33:d6:b2:20:8a:a6:0d:9a:ff:a0:5e:bc:65:f0:7b:
         ba:22:99:71:3f:17:31:05:37:d1:2c:15:96:67:50:60:ac:1b:
         5e:d6:ef:b6:cc:95:a1:de:a3:2f:02:ef:d0:0d:1a:89:65:ed:
         c5:f5:7f:2e:39:f8:0b:77:92:50:4a:e4:dc:66:b1:b1:d9:bb:
         b7:57:31:3a:94:44:93:e3:7b:7e:f4:48:e9:52:c4:ee:97:05:
         59:81:e7:fa:e3:52:7e:f4:2b:17:33:e5:1b:3b:bb:ff:0e:24:
         69:af:20:f6:0b:41:78:7c:0f:9d:09:14:29:b4:4f:9c:d5:9e:
         b4:67:b4:9a:30:f1:98:14:44:b4:d2:5b:ad:9b:c6:71:ab:a6:
         b1:10:74:bb:52:89:fa:d4:d1:0e:34:fb:6a:9e:c7:5e:fe:5b:
         be:ec:1d:11:2d:78:3f:4d:71:0b:1f:3d:e6:ed:24:d6:12:a0:
         00:5a:0d:e4:b1:53:b5:e9:c9:ea:96:97:10:1a:84:f7:51:c4:
         34:b7:20:bc:e8:d4:c5:a0:50:cc:7e:15:a2:34:5c:8b:87:fc:
         23:35:23:e0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEiv01b/E+YVHJsPBKfoutJUSBy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA0RTAxQzJDN0NFRjMwQzk4MzFGRDM3Qzk0RjEwNTg1
RTkzQjk0MTAeFw0yMjEwMjUyMTM3MDhaFw0yMzEwMjQyMTQyMDhaMDMxMTAvBgNV
BAMTKDE0MkQzQTcxQTU5RTFBRkY2NjJFNkEwRDU3OTBBMjI3NURCOUU1QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjOEj3wp9crpXLdKw62GHV6W1o
cOCoadAGmT69/BXcZ/b6/4TmHmmPSzJj6JBmet7SQyKlI3BoSqfNpTU6GVXz/Ge1
eyVCVB6KMYjELirdau+u6JzFhDwiZ6CUIdmmN83fY0q36EwihyKHNb5hdKQrBWHb
tdL99J5RxAh2sVO+E+jnBmWsyivLHHewXSf0UPTSjfrwL1lfAoOq0NEnAuNG4ELc
fZp9DyLblNjpCFNwsPFbLyKpsWkVEdEt5H1zWjJzcsnuHzH4BvGjv732uhR/WVG4
elqYVfCz4qe4eRtU6nmlay+M7QZEHw+mkfJAnpomm1JllX5GWoeZB+A3aod3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUFC06caWeGv9mLmoNV5CiJ1255acwHwYDVR0j
BBgwFoAUoE4BwsfO8wyYMf03yU8QWF6TuUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVc3dVNTeE1OOUhIU0RLRkxSWmNmOVFQN3VQOG82NGFKa1F5ejdLa0di
QXAvMC9BMDRFMDFDMkM3Q0VGMzBDOTgzMUZEMzdDOTRGMTA1ODVFOTNCOTQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwNEUwMUMyQzdDRUYzMEM5
ODMxRkQzN0M5NEYxMDU4NUU5M0I5NDEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVXN3VTU3hNTjlISFNES0ZMUlpjZjlRUDd1UDhvNjRhSmtReXo3S2tHYkFwLzAv
MzIzODMwMzQzYTM1NjYzMTM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTMwMzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEXxTAMA0GCSqGSIb3DQEBCwUA
A4IBAQAVkvbPSC5NbG8FB92ph3C1wlUbyFkD3TpoZXjmMUeMYLChemQPa1Yz1rIg
iqYNmv+gXrxl8Hu6IplxPxcxBTfRLBWWZ1BgrBte1u+2zJWh3qMvAu/QDRqJZe3F
9X8uOfgLd5JQSuTcZrGx2bu3VzE6lEST43t+9EjpUsTulwVZgef641J+9CsXM+Ub
O7v/DiRpryD2C0F4fA+dCRQptE+c1Z60Z7SaMPGYFES00lutm8Zxq6axEHS7Uon6
1NEONPtqnsde/lu+7B0RLXg/TXELHz3m7STWEqAAWg3ksVO16cnqlpcQGoT3UcQ0
tyC86NTFoFDMfhWiNFyLh/wjNSPg
-----END CERTIFICATE-----