Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/323830343a376164383a31323a3a2f34382d3438203d3e20323731333935.roa
File:                     323830343a376164383a31323a3a2f34382d3438203d3e20323731333935.roa (raw, json)
Hash identifier:          ScMIsDc3dKukKpZv9Od7o6guHqyRM/KVP3uxzFKRY74=
Subject key identifier:   67:BF:CC:68:7D:79:0E:38:28:68:54:72:DF:77:69:1D:F1:9B:F8:1D
Certificate issuer:       /CN=F86C970181A2EA77E7BA82EC8C2F9D699CB790BA
Certificate serial:       4204A20E14F00785068074601C8022B4C69602A9
Authority key identifier: F8:6C:97:01:81:A2:EA:77:E7:BA:82:EC:8C:2F:9D:69:9C:B7:90:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/323830343a376164383a31323a3a2f34382d3438203d3e20323731333935.roa
Signing time:             Fri 28 Jul 2023 17:41:59 +0000
ROA not before:           Fri 28 Jul 2023 17:36:59 +0000
ROA not after:            Fri 26 Jul 2024 17:41:59 +0000
asID:                     271395
IP address blocks:        2804:7ad8:12::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:04:a2:0e:14:f0:07:85:06:80:74:60:1c:80:22:b4:c6:96:02:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F86C970181A2EA77E7BA82EC8C2F9D699CB790BA
        Validity
            Not Before: Jul 28 17:36:59 2023 GMT
            Not After : Jul 26 17:41:59 2024 GMT
        Subject: CN=67BFCC687D790E3828685472DF77691DF19BF81D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:cf:7b:8a:fc:90:f1:7f:8e:1c:54:27:fa:
                    1b:42:da:d8:38:3b:ce:d9:5d:c9:db:b7:6b:81:2a:
                    6c:11:5c:d5:42:28:33:01:fd:a2:5c:da:e1:3c:0c:
                    e7:d9:c2:fb:f0:83:e5:23:42:c5:21:4e:dd:8c:79:
                    d1:bc:5b:6a:01:ab:f2:88:01:a7:89:5e:38:3b:d5:
                    53:09:6a:c1:a1:62:d7:76:e7:fa:2a:c9:a0:9c:fd:
                    36:8b:15:a1:58:b1:3b:64:9b:9b:e7:68:2c:97:f3:
                    ec:52:ba:d0:f6:7c:46:a7:a1:f4:06:5f:38:b9:b7:
                    50:26:bd:9e:fb:22:28:50:2b:b9:34:ef:b3:cd:7f:
                    ce:1a:c7:7e:6b:13:7f:6f:bb:ac:b2:e4:a3:15:61:
                    04:52:df:90:32:90:b8:b7:ce:3c:eb:f9:c5:e1:17:
                    a5:63:ea:d4:6c:8c:5e:20:63:81:11:17:d0:d2:af:
                    2f:70:a4:3c:c5:d5:5a:3f:a7:2f:50:dd:54:1f:7c:
                    0e:96:43:f6:c7:fb:d2:de:3a:22:af:40:ee:4e:2d:
                    b4:f9:5c:b7:c2:81:35:22:2b:e6:90:81:41:9f:e9:
                    3c:50:aa:47:4a:25:c8:94:7f:18:ad:73:d4:d7:56:
                    55:cd:88:61:18:ea:0e:41:b5:e7:64:c9:b7:d0:68:
                    5b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BF:CC:68:7D:79:0E:38:28:68:54:72:DF:77:69:1D:F1:9B:F8:1D
            X509v3 Authority Key Identifier:
                keyid:F8:6C:97:01:81:A2:EA:77:E7:BA:82:EC:8C:2F:9D:69:9C:B7:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/323830343a376164383a31323a3a2f34382d3438203d3e20323731333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ad8:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         ce:32:fc:78:3f:51:25:36:6c:9a:cb:75:23:41:23:01:32:25:
         50:fe:5f:ce:28:85:a4:12:83:b9:9b:ad:e0:b5:a2:f1:25:a2:
         c5:aa:69:d2:33:42:e3:8e:a1:05:28:8c:2e:73:ce:79:6c:a8:
         a4:e3:9a:cd:c6:04:ef:6c:bc:2f:ca:d8:74:e5:49:29:5a:61:
         65:df:f2:92:5c:aa:75:15:7a:30:9f:05:91:88:7e:cd:c4:99:
         61:39:c4:c3:e2:c9:dc:cc:85:b7:67:89:85:37:28:28:34:91:
         ff:6d:bb:93:78:c1:2e:16:10:bb:0b:63:53:b0:3f:b6:d7:30:
         cd:4b:f6:8b:df:50:a9:ff:f6:5f:af:ca:43:be:78:69:79:ed:
         8b:fc:44:71:25:16:60:9c:51:3a:04:50:f5:90:e6:ed:72:b2:
         f6:3d:ce:f6:5a:69:37:d6:49:75:93:9e:60:a1:31:14:69:08:
         d5:e3:cf:11:06:ff:83:76:40:09:51:43:4e:65:0e:ed:99:2f:
         3d:47:de:df:0f:ca:5a:56:43:a9:3d:e0:56:81:92:91:a7:c3:
         fa:94:75:6e:2c:6a:65:ee:cf:ff:f5:d7:fb:54:7c:52:14:f0:
         91:26:7f:72:22:b9:3d:2c:d1:61:5d:d1:f7:66:02:eb:7d:59:
         38:e1:cd:c2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUQgSiDhTwB4UGgHRgHIAitMaWAqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg2Qzk3MDE4MUEyRUE3N0U3QkE4MkVDOEMyRjlENjk5
Q0I3OTBCQTAeFw0yMzA3MjgxNzM2NTlaFw0yNDA3MjYxNzQxNTlaMDMxMTAvBgNV
BAMTKDY3QkZDQzY4N0Q3OTBFMzgyODY4NTQ3MkRGNzc2OTFERjE5QkY4MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpc97ivyQ8X+OHFQn+htC2tg4
O87ZXcnbt2uBKmwRXNVCKDMB/aJc2uE8DOfZwvvwg+UjQsUhTt2MedG8W2oBq/KI
AaeJXjg71VMJasGhYtd25/oqyaCc/TaLFaFYsTtkm5vnaCyX8+xSutD2fEanofQG
Xzi5t1AmvZ77IihQK7k077PNf84ax35rE39vu6yy5KMVYQRS35AykLi3zjzr+cXh
F6Vj6tRsjF4gY4ERF9DSry9wpDzF1Vo/py9Q3VQffA6WQ/bH+9LeOiKvQO5OLbT5
XLfCgTUiK+aQgUGf6TxQqkdKJciUfxitc9TXVlXNiGEY6g5BtedkybfQaFtHAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUZ7/MaH15DjgoaFRy33dpHfGb+B0wHwYDVR0j
BBgwFoAU+GyXAYGi6nfnuoLsjC+daZy3kLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWpXWE13dGlaWGtudVl4ejR6eUtyUGlaSlBlY3pWVk13RFRzTjFyc3BG
b1kvMC9GODZDOTcwMTgxQTJFQTc3RTdCQTgyRUM4QzJGOUQ2OTlDQjc5MEJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y4NkM5NzAxODFBMkVBNzdF
N0JBODJFQzhDMkY5RDY5OUNCNzkwQkEuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FqV1hNd3RpWlhrbnVZeHo0enlLclBpWkpQZWN6VlZNd0RUc04xcnNwRm9ZLzAv
MzIzODMwMzQzYTM3NjE2NDM4M2EzMTMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzNzMxMzMzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAR62AASMA0GCSqGSIb3DQEBCwUAA4IB
AQDOMvx4P1ElNmyay3UjQSMBMiVQ/l/OKIWkEoO5m63gtaLxJaLFqmnSM0LjjqEF
KIwuc855bKik45rNxgTvbLwvyth05UkpWmFl3/KSXKp1FXownwWRiH7NxJlhOcTD
4snczIW3Z4mFNygoNJH/bbuTeMEuFhC7C2NTsD+21zDNS/aL31Cp//Zfr8pDvnhp
ee2L/ERxJRZgnFE6BFD1kObtcrL2Pc72Wmk31kl1k55goTEUaQjV488RBv+DdkAJ
UUNOZQ7tmS89R97fD8paVkOpPeBWgZKRp8P6lHVuLGpl7s//9df7VHxSFPCRJn9y
Irk9LNFhXdH3ZgLrfVk44c3C
-----END CERTIFICATE-----