Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/0/323830343a6138633a3a2f33322d3438203d3e20323632323939.roa
File:                     323830343a6138633a3a2f33322d3438203d3e20323632323939.roa (raw, json)
Hash identifier:          lDw/NeWWzGzKUUi0uop0XdQ3HBErb1l88ZdA/luBZyQ=
Subject key identifier:   5A:B4:CB:38:6D:F9:C2:0E:C4:71:80:55:F2:2F:6B:86:2C:BC:F0:2D
Certificate issuer:       /CN=77FE0D03E7B7A347ED97E3E3A2933835335D8075
Certificate serial:       2D2773DBF0D7C725429EEEE9425DD175630DFD9A
Authority key identifier: 77:FE:0D:03:E7:B7:A3:47:ED:97:E3:E3:A2:93:38:35:33:5D:80:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77FE0D03E7B7A347ED97E3E3A2933835335D8075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/0/323830343a6138633a3a2f33322d3438203d3e20323632323939.roa
Signing time:             Thu 13 Jul 2023 13:26:06 +0000
ROA not before:           Thu 13 Jul 2023 13:21:06 +0000
ROA not after:            Thu 11 Jul 2024 13:26:06 +0000
asID:                     262299
IP address blocks:        2804:a8c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:27:73:db:f0:d7:c7:25:42:9e:ee:e9:42:5d:d1:75:63:0d:fd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77FE0D03E7B7A347ED97E3E3A2933835335D8075
        Validity
            Not Before: Jul 13 13:21:06 2023 GMT
            Not After : Jul 11 13:26:06 2024 GMT
        Subject: CN=5AB4CB386DF9C20EC4718055F22F6B862CBCF02D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2d:bd:e8:56:a6:33:8a:13:45:f8:b0:00:27:
                    a1:9f:b5:bf:27:dd:9a:dd:b4:07:7e:95:38:09:85:
                    ef:21:04:e7:e0:3e:03:ea:61:12:ca:71:8e:51:97:
                    12:47:6b:d4:4b:d2:91:97:29:f3:6a:16:fd:13:2e:
                    cd:65:35:b7:32:8f:87:c5:56:0f:14:1b:d6:61:18:
                    37:87:8e:9f:0c:cb:48:c4:b2:a0:46:45:78:b3:7f:
                    4a:e6:7f:49:2c:0f:87:30:fa:f9:49:0b:e2:c0:e9:
                    bc:94:69:9b:30:f3:a2:1d:af:65:87:88:99:a3:01:
                    01:75:02:f7:59:fb:4e:ba:7b:b0:eb:22:fb:44:04:
                    96:38:fa:e9:d5:1a:70:55:37:64:0a:23:87:a0:c3:
                    fd:c9:32:14:d1:94:88:d7:a9:da:90:02:3d:b3:bb:
                    55:c0:c0:70:7c:b7:87:d0:df:4b:9f:44:d8:16:5c:
                    b8:89:51:00:8c:5b:e8:95:23:6d:91:d4:3a:cf:eb:
                    2a:2b:af:02:dc:61:00:6d:3e:de:19:33:a6:4e:1e:
                    06:cd:4c:ec:ac:a2:32:ee:64:fe:4c:0e:53:4c:e9:
                    e4:6b:72:29:96:b4:55:a8:7a:1c:7f:42:fd:b5:66:
                    75:54:bf:ff:23:43:4a:59:70:89:6a:9c:7b:96:56:
                    fa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B4:CB:38:6D:F9:C2:0E:C4:71:80:55:F2:2F:6B:86:2C:BC:F0:2D
            X509v3 Authority Key Identifier:
                keyid:77:FE:0D:03:E7:B7:A3:47:ED:97:E3:E3:A2:93:38:35:33:5D:80:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/0/77FE0D03E7B7A347ED97E3E3A2933835335D8075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77FE0D03E7B7A347ED97E3E3A2933835335D8075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/0/323830343a6138633a3a2f33322d3438203d3e20323632323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:13:4c:d5:73:b4:0e:9f:12:6f:ce:4e:d2:7e:83:77:ef:ad:
         a8:6a:42:94:ec:8f:7c:ae:e7:0d:91:05:88:9f:c7:a7:9b:da:
         eb:22:3d:9d:d8:bd:31:68:0e:a6:a3:88:29:16:87:c8:c6:44:
         9e:df:8b:be:f8:08:98:3a:6b:58:53:3e:52:6c:4f:f2:5f:a0:
         6c:70:de:25:95:27:c9:0b:84:ff:68:e8:d4:ab:29:42:84:aa:
         ee:78:05:88:49:41:4c:df:dc:f8:a9:d2:0d:92:a7:1a:7d:32:
         4e:c7:3d:b1:b1:4b:53:8b:07:51:63:97:19:33:17:6b:e1:6b:
         b0:b4:f9:25:a3:22:a0:b0:d1:2e:bd:37:54:d6:7b:84:fa:da:
         34:b2:b9:29:ac:dd:1b:0b:ea:91:ad:16:5c:f5:14:f6:be:53:
         94:e1:41:d1:cb:e8:ef:da:90:f4:fd:36:85:c5:22:99:5f:f7:
         86:23:ae:de:b1:ae:e7:61:3a:aa:9d:7d:93:61:e2:e9:9f:fb:
         d9:4c:c4:2d:88:cb:10:65:90:63:6a:31:21:3f:ba:e7:46:ea:
         f2:76:f4:f1:96:99:50:e6:39:f4:2d:6a:ee:e4:06:12:17:2c:
         de:51:51:a5:b9:c1:2c:ab:6f:b8:12:6f:cb:e8:51:7f:c6:1d:
         25:aa:24:94
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIULSdz2/DXxyVCnu7pQl3RdWMN/ZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdGRTBEMDNFN0I3QTM0N0VEOTdFM0UzQTI5MzM4MzUz
MzVEODA3NTAeFw0yMzA3MTMxMzIxMDZaFw0yNDA3MTExMzI2MDZaMDMxMTAvBgNV
BAMTKDVBQjRDQjM4NkRGOUMyMEVDNDcxODA1NUYyMkY2Qjg2MkNCQ0YwMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWLb3oVqYzihNF+LAAJ6Gftb8n
3ZrdtAd+lTgJhe8hBOfgPgPqYRLKcY5RlxJHa9RL0pGXKfNqFv0TLs1lNbcyj4fF
Vg8UG9ZhGDeHjp8My0jEsqBGRXizf0rmf0ksD4cw+vlJC+LA6byUaZsw86Idr2WH
iJmjAQF1AvdZ+066e7DrIvtEBJY4+unVGnBVN2QKI4egw/3JMhTRlIjXqdqQAj2z
u1XAwHB8t4fQ30ufRNgWXLiJUQCMW+iVI22R1DrP6yorrwLcYQBtPt4ZM6ZOHgbN
TOysojLuZP5MDlNM6eRrcimWtFWoehx/Qv21ZnVUv/8jQ0pZcIlqnHuWVvqLAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUWrTLOG35wg7EcYBV8i9rhiy88C0wHwYDVR0j
BBgwFoAUd/4NA+e3o0ftl+PjopM4NTNdgHUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BH
U0UvMC83N0ZFMEQwM0U3QjdBMzQ3RUQ5N0UzRTNBMjkzMzgzNTMzNUQ4MDc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc3RkUwRDAzRTdCN0EzNDdF
RDk3RTNFM0EyOTMzODM1MzM1RDgwNzUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCeHVMcENmM3lhZTlNR2VCMmM2VEM5YXhCWkdaRFY1d2NRNXZmRm9wR1NFLzAv
MzIzODMwMzQzYTYxMzg2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjMy
MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECowwDQYJKoZIhvcNAQELBQADggEBALATTNVztA6f
Em/OTtJ+g3fvrahqQpTsj3yu5w2RBYifx6eb2usiPZ3YvTFoDqajiCkWh8jGRJ7f
i774CJg6a1hTPlJsT/JfoGxw3iWVJ8kLhP9o6NSrKUKEqu54BYhJQUzf3Pip0g2S
pxp9Mk7HPbGxS1OLB1FjlxkzF2vha7C0+SWjIqCw0S69N1TWe4T62jSyuSms3RsL
6pGtFlz1FPa+U5ThQdHL6O/akPT9NoXFIplf94Yjrt6xrudhOqqdfZNh4umf+9lM
xC2IyxBlkGNqMSE/uudG6vJ29PGWmVDmOfQtau7kBhIXLN5RUaW5wSyrb7gSb8vo
UX/GHSWqJJQ=
-----END CERTIFICATE-----