Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a3a2f33322d3332203d3e20323632373635.roa
File:                     323830343a316466633a3a2f33322d3332203d3e20323632373635.roa (raw, json)
Hash identifier:          9+HWMsGWNbQr1j9hLhyvE7Vv8n5N9jR3JAToYPgKD1I=
Subject key identifier:   47:04:0F:79:60:6F:EA:26:33:C0:F9:5A:08:0D:B9:2F:43:3A:B7:D0
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       250AB9D7216C240D926B848782DB3E773CB8A724
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a3a2f33322d3332203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:28 +0000
ROA not before:           Tue 20 Jun 2023 13:48:28 +0000
ROA not after:            Tue 18 Jun 2024 13:53:28 +0000
asID:                     262765
IP address blocks:        2804:1dfc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0a:b9:d7:21:6c:24:0d:92:6b:84:87:82:db:3e:77:3c:b8:a7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:28 2023 GMT
            Not After : Jun 18 13:53:28 2024 GMT
        Subject: CN=47040F79606FEA2633C0F95A080DB92F433AB7D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:65:76:39:7c:a5:73:64:2d:74:40:f3:6c:
                    14:36:31:f3:91:db:1e:95:69:67:d0:54:b1:b2:27:
                    d1:5c:80:fa:c7:0a:7f:7e:c2:59:24:ef:95:39:f1:
                    6b:43:58:84:7a:5d:8c:1b:f1:e3:a1:d0:f1:ce:82:
                    2c:59:d9:d2:04:62:eb:cb:29:7a:4c:4a:0e:f4:8e:
                    22:2b:72:e9:05:74:5f:5e:d9:6b:68:ba:80:22:46:
                    d2:e1:4a:68:8c:20:77:13:a1:99:8f:7c:0d:ad:2c:
                    dd:88:6b:f7:d6:f9:53:e0:1f:08:40:88:3e:d6:a2:
                    96:ec:93:af:68:9b:47:1f:22:6f:8c:11:a5:56:1f:
                    1f:7f:cf:7d:d1:cd:c9:9c:82:e5:45:dd:81:e0:32:
                    e3:6c:fa:f9:fc:d7:6f:58:90:05:d9:78:ea:ff:87:
                    bc:06:bb:f7:e6:06:56:d3:56:c6:a3:46:14:81:5f:
                    b9:a7:fa:46:a9:92:3d:ab:7d:1d:f0:97:d1:09:40:
                    14:92:c5:dd:25:e1:b5:6a:f1:5f:47:7e:0e:6e:00:
                    a5:22:64:96:00:09:61:99:3d:3a:ba:8d:87:74:bb:
                    6d:22:06:99:7a:16:bd:2c:e1:63:4a:bb:72:e1:cd:
                    e8:fd:ba:e9:be:56:0a:27:07:66:70:90:81:6a:dc:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:04:0F:79:60:6F:EA:26:33:C0:F9:5A:08:0D:B9:2F:43:3A:B7:D0
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a3a2f33322d3332203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:0f:75:4e:b1:5a:4f:77:cd:1f:d8:75:eb:bd:f4:f9:15:38:
         ed:a5:24:21:00:b3:bd:d5:d7:77:5f:3d:18:58:d2:95:1e:24:
         89:3f:af:b4:0e:cc:fc:73:ab:78:fb:c2:44:d2:f7:56:35:82:
         13:19:a8:97:7e:52:55:86:48:b9:84:1b:55:67:f3:d6:49:58:
         64:77:91:5e:f7:91:0d:65:00:5a:9f:8a:1b:2f:c3:a8:f6:e5:
         c4:fd:80:22:8a:4f:e7:43:90:00:76:95:8a:77:ad:fd:e8:1a:
         2a:a2:1e:be:05:0c:e4:51:d5:a6:95:0d:88:5c:b0:7b:12:e0:
         21:80:46:28:d3:4f:a3:68:88:aa:82:68:a4:05:0a:fc:37:4e:
         9e:d4:54:fb:31:41:dd:1f:4a:08:24:48:bf:f8:f8:53:16:4d:
         9f:a7:86:76:1a:02:ae:13:74:54:e2:4c:9b:32:1c:2a:0c:81:
         2e:35:0c:bf:5c:d7:94:b7:2c:8f:7c:42:c7:c1:9c:cb:d1:6c:
         8f:c7:8a:eb:49:ec:c7:40:79:de:fb:94:6c:c3:07:da:2d:94:
         32:06:2a:c8:5d:03:1e:ef:90:90:68:4b:22:a5:b9:5c:b3:da:
         83:2d:e9:a9:40:83:31:59:6c:f1:60:e6:02:3d:34:a5:36:82:
         d4:cc:f0:64
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJQq51yFsJA2Sa4SHgts+dzy4pyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNFMUEzODA1MjIyNTc5OEE3QzVBMjU5MjY5MDMzRkM2
RDhCNTNBNDAeFw0yMzA2MjAxMzQ4MjhaFw0yNDA2MTgxMzUzMjhaMDMxMTAvBgNV
BAMTKDQ3MDQwRjc5NjA2RkVBMjYzM0MwRjk1QTA4MERCOTJGNDMzQUI3RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8B2V2OXylc2QtdEDzbBQ2MfOR
2x6VaWfQVLGyJ9FcgPrHCn9+wlkk75U58WtDWIR6XYwb8eOh0PHOgixZ2dIEYuvL
KXpMSg70jiIrcukFdF9e2WtouoAiRtLhSmiMIHcToZmPfA2tLN2Ia/fW+VPgHwhA
iD7Wopbsk69om0cfIm+MEaVWHx9/z33RzcmcguVF3YHgMuNs+vn8129YkAXZeOr/
h7wGu/fmBlbTVsajRhSBX7mn+kapkj2rfR3wl9EJQBSSxd0l4bVq8V9Hfg5uAKUi
ZJYACWGZPTq6jYd0u20iBpl6Fr0s4WNKu3Lhzej9uum+VgonB2ZwkIFq3NCHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQURwQPeWBv6iYzwPlaCA25L0M6t9AwHwYDVR0j
BBgwFoAUXOGjgFIiV5inxaJZJpAz/G2LU6QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzAvNUNFMUEzODA1MjIyNTc5OEE3QzVBMjU5MjY5MDMzRkM2RDhCNTNBNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81Q0UxQTM4MDUyMjI1Nzk4QTdD
NUEyNTkyNjkwMzNGQzZEOEI1M0E0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzAvMzIz
ODMwMzQzYTMxNjQ2NjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMyMzcz
NjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQd/DANBgkqhkiG9w0BAQsFAAOCAQEAcw91TrFaT3fN
H9h16730+RU47aUkIQCzvdXXd189GFjSlR4kiT+vtA7M/HOrePvCRNL3VjWCExmo
l35SVYZIuYQbVWfz1klYZHeRXveRDWUAWp+KGy/DqPblxP2AIopP50OQAHaVinet
/egaKqIevgUM5FHVppUNiFywexLgIYBGKNNPo2iIqoJopAUK/DdOntRU+zFB3R9K
CCRIv/j4UxZNn6eGdhoCrhN0VOJMmzIcKgyBLjUMv1zXlLcsj3xCx8Gcy9Fsj8eK
60nsx0B53vuUbMMH2i2UMgYqyF0DHu+QkGhLIqW5XLPagy3pqUCDMVls8WDmAj00
pTaC1MzwZA==
-----END CERTIFICATE-----