Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/323830343a3530303a3a2f33322d3332203d3e20323632343835.roa
File:                     323830343a3530303a3a2f33322d3332203d3e20323632343835.roa (raw, json)
Hash identifier:          WYm3k2TeWz3wNG4lwriUNCIz4uCJN4rTVfGLMF+Fu80=
Subject key identifier:   58:5E:42:FA:F2:6F:50:EF:AA:7F:A0:1D:92:A0:2D:6B:74:22:35:DC
Certificate issuer:       /CN=7F8163A857457D0C511E761F3AF9EBFAAEB15371
Certificate serial:       52DA4B028D190D88BA6E4C04AF75FCDE73516352
Authority key identifier: 7F:81:63:A8:57:45:7D:0C:51:1E:76:1F:3A:F9:EB:FA:AE:B1:53:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/323830343a3530303a3a2f33322d3332203d3e20323632343835.roa
Signing time:             Fri 09 Feb 2024 10:59:26 +0000
ROA not before:           Fri 09 Feb 2024 10:54:26 +0000
ROA not after:            Fri 07 Feb 2025 10:59:26 +0000
asID:                     262485
IP address blocks:        2804:500::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:da:4b:02:8d:19:0d:88:ba:6e:4c:04:af:75:fc:de:73:51:63:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F8163A857457D0C511E761F3AF9EBFAAEB15371
        Validity
            Not Before: Feb  9 10:54:26 2024 GMT
            Not After : Feb  7 10:59:26 2025 GMT
        Subject: CN=585E42FAF26F50EFAA7FA01D92A02D6B742235DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6c:19:a9:b0:ba:7e:a7:e7:4d:0a:91:32:b1:
                    34:28:ef:a1:6a:3e:87:89:3f:10:c2:e0:65:ba:a7:
                    7f:bf:19:ed:64:a9:46:bd:9d:6a:10:f1:5c:50:8f:
                    49:0a:03:26:5f:fb:9a:ed:c8:96:f9:c5:d8:5f:eb:
                    e6:de:ab:13:d0:6e:be:3f:25:f3:72:a5:bf:c2:dc:
                    c0:72:53:71:d4:2f:b2:be:bc:13:53:0e:f9:fb:1b:
                    ab:b0:f8:72:29:58:8d:3c:dc:e8:aa:2e:03:73:88:
                    38:e2:36:e0:92:c1:e1:45:d0:96:59:a8:85:00:b9:
                    f7:c5:0c:d8:89:76:83:b9:b6:03:d4:89:09:b1:28:
                    6e:67:38:38:93:5c:46:5e:92:b8:fa:51:92:50:45:
                    34:31:68:f8:d3:ba:23:8b:33:a9:7c:9b:69:cf:8d:
                    43:51:03:3b:45:80:f6:86:09:ef:b7:25:02:a3:4a:
                    94:4c:68:63:aa:6c:3c:f7:64:2f:92:ea:81:57:0c:
                    c3:5f:25:dd:f1:e7:53:cf:6d:ec:c8:c2:dc:88:35:
                    14:df:9e:a9:84:e1:c5:54:e3:bd:99:8f:57:47:21:
                    82:81:2e:d9:1c:81:3a:ba:77:27:27:fd:ea:1e:6b:
                    ed:45:2e:6d:40:26:4f:2b:18:6b:f4:79:98:f4:7b:
                    75:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5E:42:FA:F2:6F:50:EF:AA:7F:A0:1D:92:A0:2D:6B:74:22:35:DC
            X509v3 Authority Key Identifier:
                keyid:7F:81:63:A8:57:45:7D:0C:51:1E:76:1F:3A:F9:EB:FA:AE:B1:53:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/323830343a3530303a3a2f33322d3332203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:500::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:d6:54:9d:25:e0:27:9c:c3:ee:8f:5c:db:ef:10:7e:bc:d7:
         00:56:3b:c3:64:a8:7c:60:80:bf:62:df:72:ff:72:bd:80:ee:
         26:3a:51:e1:8c:76:29:cf:b6:a2:36:35:ce:3a:0e:9d:95:35:
         b7:71:7f:de:7d:9b:60:2c:e4:45:b2:30:c4:54:2c:99:a0:1a:
         7a:19:6b:20:61:5f:9a:ff:ab:42:23:2c:cb:7e:1a:c3:92:a3:
         68:06:34:73:1d:ba:ad:12:46:57:5d:d4:fa:4f:1c:bb:82:99:
         30:89:fc:f7:23:17:f3:96:5c:a1:ca:a8:96:46:09:39:76:ad:
         9c:17:ca:d3:8b:e3:a9:21:95:b5:e1:b9:b1:a1:b0:61:75:7d:
         41:d1:09:e1:7e:e1:a7:cc:43:69:b8:9c:25:f4:79:b3:25:5b:
         36:39:65:6d:b2:63:f0:f6:2c:1e:2a:fc:a5:1e:24:4c:08:00:
         e7:8f:b1:ac:c9:ef:5a:1c:e1:1e:f9:85:1d:4a:97:07:f8:cf:
         dc:78:41:75:ee:1d:70:de:d4:89:a3:a0:d9:35:87:ea:5f:59:
         78:0b:e0:a8:97:6b:75:65:3d:54:1f:b3:57:0d:72:f0:f8:70:
         d5:99:a5:1b:28:17:91:c0:cd:96:31:5c:73:96:87:74:37:a6:
         c6:36:b7:e7
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUUtpLAo0ZDYi6bkwEr3X83nNRY1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y4MTYzQTg1NzQ1N0QwQzUxMUU3NjFGM0FGOUVCRkFB
RUIxNTM3MTAeFw0yNDAyMDkxMDU0MjZaFw0yNTAyMDcxMDU5MjZaMDMxMTAvBgNV
BAMTKDU4NUU0MkZBRjI2RjUwRUZBQTdGQTAxRDkyQTAyRDZCNzQyMjM1REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsbBmpsLp+p+dNCpEysTQo76Fq
PoeJPxDC4GW6p3+/Ge1kqUa9nWoQ8VxQj0kKAyZf+5rtyJb5xdhf6+beqxPQbr4/
JfNypb/C3MByU3HUL7K+vBNTDvn7G6uw+HIpWI083OiqLgNziDjiNuCSweFF0JZZ
qIUAuffFDNiJdoO5tgPUiQmxKG5nODiTXEZekrj6UZJQRTQxaPjTuiOLM6l8m2nP
jUNRAztFgPaGCe+3JQKjSpRMaGOqbDz3ZC+S6oFXDMNfJd3x51PPbezIwtyINRTf
nqmE4cVU472Zj1dHIYKBLtkcgTq6dycn/eoea+1FLm1AJk8rGGv0eZj0e3XpAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUWF5C+vJvUO+qf6AdkqAta3QiNdwwHwYDVR0j
BBgwFoAUf4FjqFdFfQxRHnYfOvnr+q6xU3EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWV3eG1vMkROWEc2Unhnd1JnUkFqQ05CbmhxR1RONkU0OVVKWG9kQTJy
NTgvMC83RjgxNjNBODU3NDU3RDBDNTExRTc2MUYzQUY5RUJGQUFFQjE1MzcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdGODE2M0E4NTc0NTdEMEM1
MTFFNzYxRjNBRjlFQkZBQUVCMTUzNzEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVld3htbzJETlhHNlJ4Z3dSZ1JBakNOQm5ocUdUTjZFNDlVSlhvZEEycjU4LzAv
MzIzODMwMzQzYTM1MzAzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM0
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBQAwDQYJKoZIhvcNAQELBQADggEBAHnWVJ0l4Cec
w+6PXNvvEH681wBWO8NkqHxggL9i33L/cr2A7iY6UeGMdinPtqI2Nc46Dp2VNbdx
f959m2As5EWyMMRULJmgGnoZayBhX5r/q0IjLMt+GsOSo2gGNHMduq0SRldd1PpP
HLuCmTCJ/PcjF/OWXKHKqJZGCTl2rZwXytOL46khlbXhubGhsGF1fUHRCeF+4afM
Q2m4nCX0ebMlWzY5ZW2yY/D2LB4q/KUeJEwIAOePsazJ71oc4R75hR1Klwf4z9x4
QXXuHXDe1ImjoNk1h+pfWXgL4KiXa3VlPVQfs1cNcvD4cNWZpRsoF5HAzZYxXHOW
h3Q3psY2t+c=
-----END CERTIFICATE-----