Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/0/323830343a333936633a3a2f33322d3438203d3e20323632383436.roa
File:                     323830343a333936633a3a2f33322d3438203d3e20323632383436.roa (raw, json)
Hash identifier:          6CvtEruXqYKxi04AY2NaEYbUHKIjRTZWXyVZ9f+j24w=
Subject key identifier:   59:08:61:D4:61:6A:8B:1A:81:E4:70:6F:D2:2E:65:5A:78:A3:03:47
Certificate issuer:       /CN=2B52B1DB686046175EE418BD9ACE67606D48092C
Certificate serial:       206A942B5747C51BF3CBA6FF76E7B4E509162A4E
Authority key identifier: 2B:52:B1:DB:68:60:46:17:5E:E4:18:BD:9A:CE:67:60:6D:48:09:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B52B1DB686046175EE418BD9ACE67606D48092C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/0/323830343a333936633a3a2f33322d3438203d3e20323632383436.roa
Signing time:             Fri 19 May 2023 11:12:38 +0000
ROA not before:           Fri 19 May 2023 11:07:38 +0000
ROA not after:            Fri 17 May 2024 11:12:38 +0000
asID:                     262846
IP address blocks:        2804:396c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6a:94:2b:57:47:c5:1b:f3:cb:a6:ff:76:e7:b4:e5:09:16:2a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B52B1DB686046175EE418BD9ACE67606D48092C
        Validity
            Not Before: May 19 11:07:38 2023 GMT
            Not After : May 17 11:12:38 2024 GMT
        Subject: CN=590861D4616A8B1A81E4706FD22E655A78A30347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:92:0b:e6:30:b6:0e:ec:27:66:15:a8:5f:58:
                    d6:69:e3:51:b7:13:2e:01:63:cd:b3:6a:e9:2a:dc:
                    10:8b:93:f3:ac:de:ac:bb:88:68:aa:75:1b:bd:c3:
                    6a:eb:f1:30:2b:28:cb:3a:12:27:e8:e0:fd:ec:1d:
                    83:f8:36:55:c0:21:ad:cc:97:24:7e:e7:55:c6:da:
                    09:ef:cd:e5:1b:13:8e:ed:8a:fd:48:21:85:56:30:
                    52:18:7f:ff:b7:0b:0a:bc:66:2f:36:0e:66:4f:49:
                    ca:f2:3f:d9:16:fe:91:2d:ac:bb:9f:33:a0:7e:c4:
                    dd:cf:4a:cb:27:88:0d:59:4a:4e:a1:3e:10:0c:68:
                    69:f3:1d:94:a9:a5:a3:fb:a5:e6:c2:a4:f9:b0:c2:
                    49:d7:93:6b:33:cf:6c:cf:bd:15:c0:cb:c6:bb:28:
                    54:b6:45:71:6e:85:05:a2:28:ca:f2:84:38:cd:84:
                    45:2f:17:02:7b:83:1c:35:87:2f:a8:85:9f:bf:fa:
                    06:a7:64:e4:8b:04:11:0b:b8:15:b1:de:6e:8f:0e:
                    5b:5e:e5:10:7f:1a:0f:dc:37:52:d4:cc:72:e5:c8:
                    b4:fe:c7:8a:93:8b:16:5f:d0:27:05:d2:68:f4:a9:
                    27:2e:5a:36:cf:0a:e6:e1:45:0a:56:24:be:92:4a:
                    2f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:08:61:D4:61:6A:8B:1A:81:E4:70:6F:D2:2E:65:5A:78:A3:03:47
            X509v3 Authority Key Identifier:
                keyid:2B:52:B1:DB:68:60:46:17:5E:E4:18:BD:9A:CE:67:60:6D:48:09:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/0/2B52B1DB686046175EE418BD9ACE67606D48092C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B52B1DB686046175EE418BD9ACE67606D48092C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/0/323830343a333936633a3a2f33322d3438203d3e20323632383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:396c::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:e1:f2:7e:64:41:f7:70:b3:2d:19:29:9f:56:8c:35:b3:8b:
         1f:f2:8e:1c:4c:5d:22:2b:13:aa:1d:50:b6:aa:8e:f4:4b:0d:
         39:2d:d4:c0:f3:98:7b:f2:3b:78:7a:12:69:e8:8f:ff:bc:f5:
         5d:85:78:43:99:38:2b:12:9e:97:e9:a5:c4:cc:50:4d:e3:ca:
         50:fd:3d:db:4b:7d:75:f5:25:3c:2d:19:ee:9c:dd:4b:6c:44:
         24:aa:47:32:c2:7d:e6:28:2f:3a:46:58:7a:78:aa:6a:29:86:
         fb:10:f1:17:dd:f7:33:66:a9:59:b6:eb:dd:56:04:7f:16:52:
         06:3e:2d:99:8e:b7:84:67:3d:32:3f:f7:93:7c:e5:5c:1c:27:
         98:ec:4b:50:67:70:26:04:e4:2a:dc:1d:e3:ed:f8:10:65:98:
         15:45:8d:ae:b2:9c:e0:3b:04:69:e0:aa:54:25:1d:50:fd:dd:
         09:bf:3a:7d:0d:92:4a:bb:94:38:43:3c:a4:bc:41:8b:13:9f:
         34:ae:e1:a3:36:86:c6:5e:08:5a:c0:2c:3d:c9:de:5b:57:cf:
         6d:55:41:01:99:c9:a1:0a:9d:f5:da:9f:58:bf:fe:98:71:0e:
         c3:67:fb:a5:9e:76:19:96:00:81:fc:60:52:80:7c:20:ae:37:
         1a:55:d3:db
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIGqUK1dHxRvzy6b/due05QkWKk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI1MkIxREI2ODYwNDYxNzVFRTQxOEJEOUFDRTY3NjA2
RDQ4MDkyQzAeFw0yMzA1MTkxMTA3MzhaFw0yNDA1MTcxMTEyMzhaMDMxMTAvBgNV
BAMTKDU5MDg2MUQ0NjE2QThCMUE4MUU0NzA2RkQyMkU2NTVBNzhBMzAzNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kgvmMLYO7CdmFahfWNZp41G3
Ey4BY82zaukq3BCLk/Os3qy7iGiqdRu9w2rr8TArKMs6Eifo4P3sHYP4NlXAIa3M
lyR+51XG2gnvzeUbE47tiv1IIYVWMFIYf/+3Cwq8Zi82DmZPScryP9kW/pEtrLuf
M6B+xN3PSssniA1ZSk6hPhAMaGnzHZSppaP7pebCpPmwwknXk2szz2zPvRXAy8a7
KFS2RXFuhQWiKMryhDjNhEUvFwJ7gxw1hy+ohZ+/+ganZOSLBBELuBWx3m6PDlte
5RB/Gg/cN1LUzHLlyLT+x4qTixZf0CcF0mj0qScuWjbPCubhRQpWJL6SSi9nAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUWQhh1GFqixqB5HBv0i5lWnijA0cwHwYDVR0j
BBgwFoAUK1Kx22hgRhde5Bi9ms5nYG1ICSwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzNvM1lndUNvOGhvUnF6VkhidEpwamJGRjdOenZHQkNiUDhYUEZjd2dl
Y0QvMC8yQjUyQjFEQjY4NjA0NjE3NUVFNDE4QkQ5QUNFNjc2MDZENDgwOTJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJCNTJCMURCNjg2MDQ2MTc1
RUU0MThCRDlBQ0U2NzYwNkQ0ODA5MkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMzbzNZZ3VDbzhob1JxelZIYnRKcGpiRkY3Tnp2R0JDYlA4WFBGY3dnZWNELzAv
MzIzODMwMzQzYTMzMzkzNjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMy
MzgzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ5bDANBgkqhkiG9w0BAQsFAAOCAQEAIOHyfmRB
93CzLRkpn1aMNbOLH/KOHExdIisTqh1QtqqO9EsNOS3UwPOYe/I7eHoSaeiP/7z1
XYV4Q5k4KxKel+mlxMxQTePKUP0920t9dfUlPC0Z7pzdS2xEJKpHMsJ95igvOkZY
eniqaimG+xDxF933M2apWbbr3VYEfxZSBj4tmY63hGc9Mj/3k3zlXBwnmOxLUGdw
JgTkKtwd4+34EGWYFUWNrrKc4DsEaeCqVCUdUP3dCb86fQ2SSruUOEM8pLxBixOf
NK7hozaGxl4IWsAsPcneW1fPbVVBAZnJoQqd9dqfWL/+mHEOw2f7pZ52GZYAgfxg
UoB8IK43GlXT2w==
-----END CERTIFICATE-----