Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3a2f33322d3332203d3e20323639323334.roa
File:                     323830343a363137303a3a2f33322d3332203d3e20323639323334.roa (raw, json)
Hash identifier:          L6Q4T3QMPVKoGnONvS22orbmUbmuOSDQEH5zwlU3wy0=
Subject key identifier:   C7:3A:3A:4E:93:FE:1C:E4:7E:BD:52:0B:23:36:F2:C9:A1:EE:51:2C
Certificate issuer:       /CN=5AD163E3334A2AF515A739140ED43D8500612D54
Certificate serial:       057F9343D64AE5D4EC35B4AD388DFB9FBC8B947B
Authority key identifier: 5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3a2f33322d3332203d3e20323639323334.roa
Signing time:             Tue 14 Jun 2022 18:29:40 +0000
ROA not before:           Tue 14 Jun 2022 18:24:40 +0000
ROA not after:            Tue 13 Jun 2023 18:29:40 +0000
asID:                     269234
IP address blocks:        2804:6170::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7f:93:43:d6:4a:e5:d4:ec:35:b4:ad:38:8d:fb:9f:bc:8b:94:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AD163E3334A2AF515A739140ED43D8500612D54
        Validity
            Not Before: Jun 14 18:24:40 2022 GMT
            Not After : Jun 13 18:29:40 2023 GMT
        Subject: CN=C73A3A4E93FE1CE47EBD520B2336F2C9A1EE512C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:03:c8:db:7e:45:6d:e1:7e:0f:fe:85:5f:
                    40:f4:e7:e2:20:1e:3a:05:13:9f:4c:8e:24:6c:c9:
                    9d:65:2c:9a:2b:99:3f:c3:67:f7:d8:29:a3:51:22:
                    1e:75:ef:c5:69:29:a6:02:27:f3:c0:c3:3a:6a:70:
                    62:27:b5:12:c4:a5:eb:dc:b2:f2:15:a3:68:a6:8b:
                    b4:d6:4e:86:b1:a8:ac:d4:e5:4b:e0:3b:fe:62:1d:
                    39:9e:fc:c9:c0:09:68:66:2d:4b:ef:c7:64:56:72:
                    79:86:8e:97:dc:79:02:95:9b:82:b5:e7:05:94:fc:
                    30:ef:93:1a:0b:b6:cf:fa:48:c1:ae:18:be:cf:12:
                    82:0b:6d:80:00:f1:6d:c5:6e:b0:96:07:76:87:cc:
                    79:bb:88:79:9c:b9:35:25:ca:c6:e4:36:55:30:79:
                    a4:6f:88:86:81:22:e8:e5:07:00:fe:74:45:6c:f0:
                    0a:e2:8e:d6:09:91:04:d9:66:75:f0:59:9b:42:47:
                    d1:02:6e:e7:a6:18:4f:c8:66:58:55:06:ea:8a:13:
                    9a:ab:b0:47:59:16:c6:93:ce:5a:2a:0f:66:31:79:
                    85:87:22:0c:0d:42:d1:1f:54:c5:90:c9:d3:91:0e:
                    e0:0c:09:c6:f6:35:27:67:8c:52:e0:9f:8c:9c:e1:
                    3b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3A:3A:4E:93:FE:1C:E4:7E:BD:52:0B:23:36:F2:C9:A1:EE:51:2C
            X509v3 Authority Key Identifier:
                keyid:5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/5AD163E3334A2AF515A739140ED43D8500612D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3a2f33322d3332203d3e20323639323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6170::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:f4:d5:8b:b3:44:c3:6e:ba:a2:bf:35:83:1b:ef:e4:1d:ff:
         16:85:d3:c2:31:d5:b0:4f:86:bd:1d:a7:12:a3:2f:75:27:9f:
         a9:ff:8c:db:ac:16:f5:92:36:af:3b:e4:16:cb:29:48:3b:0a:
         c2:81:f9:67:09:45:4f:e3:4f:35:53:62:04:91:f2:6e:e0:f5:
         4d:c2:26:88:01:65:f5:d5:15:29:fe:c9:a4:26:e6:cc:7e:f9:
         bc:a3:4b:dc:71:ff:69:e9:c5:4c:70:b4:dd:ed:4b:ce:49:60:
         47:b0:8a:44:e0:dd:c8:55:9b:34:2a:a0:aa:e4:b6:f0:1a:ac:
         7c:cc:81:8d:2a:52:03:7e:20:09:a5:7f:3f:1d:54:7c:51:a0:
         5a:03:fc:bb:2c:c0:43:42:22:93:72:a9:f5:c3:67:c8:39:11:
         90:21:ab:bd:a2:0b:53:f1:1e:e8:ea:47:3a:8f:9c:0f:f9:23:
         17:8f:47:0e:91:59:d9:ec:72:48:3b:33:c8:e2:ae:24:89:58:
         20:96:b4:37:58:6f:ff:df:9a:d8:04:32:e3:b0:55:5e:e2:63:
         5c:35:61:bf:74:6e:41:e6:9a:79:d2:b0:02:56:ae:d2:7e:75:
         96:88:a8:46:16:bf:cd:bd:00:95:54:89:38:ee:25:82:dd:80:
         a1:4b:6b:55
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBX+TQ9ZK5dTsNbStOI37n7yLlHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFEMTYzRTMzMzRBMkFGNTE1QTczOTE0MEVENDNEODUw
MDYxMkQ1NDAeFw0yMjA2MTQxODI0NDBaFw0yMzA2MTMxODI5NDBaMDMxMTAvBgNV
BAMTKEM3M0EzQTRFOTNGRTFDRTQ3RUJENTIwQjIzMzZGMkM5QTFFRTUxMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9gPI235FbeF+D/6FX0D05+Ig
HjoFE59MjiRsyZ1lLJormT/DZ/fYKaNRIh5178VpKaYCJ/PAwzpqcGIntRLEpevc
svIVo2imi7TWToaxqKzU5UvgO/5iHTme/MnACWhmLUvvx2RWcnmGjpfceQKVm4K1
5wWU/DDvkxoLts/6SMGuGL7PEoILbYAA8W3FbrCWB3aHzHm7iHmcuTUlysbkNlUw
eaRviIaBIujlBwD+dEVs8ArijtYJkQTZZnXwWZtCR9ECbuemGE/IZlhVBuqKE5qr
sEdZFsaTzloqD2YxeYWHIgwNQtEfVMWQydORDuAMCcb2NSdnjFLgn4yc4TvJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUxzo6TpP+HOR+vVILIzbyyaHuUSwwHwYDVR0j
BBgwFoAUWtFj4zNKKvUVpzkUDtQ9hQBhLVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkRpSnRNMzJxMlNpU0huM2hGYk0zV1d6NjR2YU1BRzZUYWtEVVZvbWlR
UVYvMC81QUQxNjNFMzMzNEEyQUY1MTVBNzM5MTQwRUQ0M0Q4NTAwNjEyRDU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVBRDE2M0UzMzM0QTJBRjUx
NUE3MzkxNDBFRDQzRDg1MDA2MTJENTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJEaUp0TTMycTJTaVNIbjNoRmJNM1dXejY0dmFNQUc2VGFrRFVWb21pUVFWLzAv
MzIzODMwMzQzYTM2MzEzNzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzIzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARhcDANBgkqhkiG9w0BAQsFAAOCAQEAF/TVi7NE
w266or81gxvv5B3/FoXTwjHVsE+GvR2nEqMvdSefqf+M26wW9ZI2rzvkFsspSDsK
woH5ZwlFT+NPNVNiBJHybuD1TcImiAFl9dUVKf7JpCbmzH75vKNL3HH/aenFTHC0
3e1LzklgR7CKRODdyFWbNCqgquS28BqsfMyBjSpSA34gCaV/Px1UfFGgWgP8uyzA
Q0Iik3Kp9cNnyDkRkCGrvaILU/Ee6OpHOo+cD/kjF49HDpFZ2exySDszyOKuJIlY
IJa0N1hv/9+a2AQy47BVXuJjXDVhv3RuQeaaedKwAlau0n51loioRha/zb0AlVSJ
OO4lgt2AoUtrVQ==
-----END CERTIFICATE-----