Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/323830343a376564343a3a2f33322d3332203d3e20323731363530.roa
File:                     323830343a376564343a3a2f33322d3332203d3e20323731363530.roa (raw, json)
Hash identifier:          5cUQJDanyqiSk3V9QGyo2JT0/pkjVr5NKNgY2DTMjvg=
Subject key identifier:   B4:9C:57:51:7E:E2:98:D0:E4:0F:FD:23:88:90:EB:D4:CB:CD:76:4E
Certificate issuer:       /CN=62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED
Certificate serial:       0F16DD082AE00FDFED52B10403071E2A7594DE18
Authority key identifier: 62:E7:CA:E7:AA:D5:F2:C4:5D:76:2F:13:F5:53:A8:FF:38:D0:76:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/323830343a376564343a3a2f33322d3332203d3e20323731363530.roa
Signing time:             Tue 14 Nov 2023 19:22:38 +0000
ROA not before:           Tue 14 Nov 2023 19:17:38 +0000
ROA not after:            Tue 12 Nov 2024 19:22:38 +0000
asID:                     271650
IP address blocks:        2804:7ed4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:16:dd:08:2a:e0:0f:df:ed:52:b1:04:03:07:1e:2a:75:94:de:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED
        Validity
            Not Before: Nov 14 19:17:38 2023 GMT
            Not After : Nov 12 19:22:38 2024 GMT
        Subject: CN=B49C57517EE298D0E40FFD238890EBD4CBCD764E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e4:64:1c:2b:b2:0e:b4:5d:0f:4f:0b:9a:26:
                    d9:5c:43:35:11:20:5a:39:c5:20:40:9a:b5:89:93:
                    93:56:9d:8c:5c:a4:32:d8:b3:ca:86:cb:26:c9:3c:
                    20:a1:e9:ec:6a:25:df:c6:54:59:8b:4f:58:b7:7d:
                    e6:ad:2d:86:67:41:fd:b9:2b:47:fa:ea:af:59:67:
                    0c:15:de:c5:12:64:5c:a6:7b:99:5a:74:ee:a4:d4:
                    53:8d:65:f0:31:e3:d1:ba:31:ab:80:c9:df:79:03:
                    31:fe:9b:9f:72:e6:8d:86:11:f2:51:39:8f:59:4f:
                    0f:c5:0d:08:21:2e:bd:a1:40:c7:79:02:67:03:71:
                    6c:77:7c:a2:21:43:e6:13:b8:14:65:08:18:f8:a5:
                    ad:d5:63:0d:cb:e8:a6:4d:d0:3e:14:15:b7:03:09:
                    fe:8b:7c:90:76:e2:51:54:fa:8d:8d:c0:a3:9c:20:
                    f3:f6:88:0c:5c:e0:c6:32:fe:53:56:23:28:69:6d:
                    4d:18:18:f4:ad:d3:d6:e1:7d:d5:b8:f4:a0:33:16:
                    9f:b7:78:b2:37:0a:32:19:3f:46:e2:0e:62:2b:64:
                    3d:aa:5e:8f:c2:ee:02:0d:f6:a9:d4:9b:4a:9c:dc:
                    ee:1e:44:91:aa:c2:45:96:71:98:d3:02:fc:1d:b1:
                    c0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9C:57:51:7E:E2:98:D0:E4:0F:FD:23:88:90:EB:D4:CB:CD:76:4E
            X509v3 Authority Key Identifier:
                keyid:62:E7:CA:E7:AA:D5:F2:C4:5D:76:2F:13:F5:53:A8:FF:38:D0:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/323830343a376564343a3a2f33322d3332203d3e20323731363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ed4::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:c2:5b:a2:36:0a:3e:32:b8:06:d4:a4:e4:6e:77:86:8b:d5:
         29:dc:46:8e:fa:fc:b9:5f:90:d3:4e:d8:d8:9f:76:e3:0e:a0:
         f3:77:0f:30:28:1a:2f:40:7d:60:d8:9b:41:d9:dc:8d:89:6d:
         44:a9:08:36:64:98:5e:d1:04:fd:ec:f4:9d:d4:4e:df:9b:8e:
         f7:5b:d6:f7:5c:b2:9e:e8:51:94:84:9d:5d:7a:a9:c0:8a:10:
         c2:3c:49:84:b5:88:4e:c6:ee:74:fa:84:af:c1:54:d0:d7:79:
         a9:c4:43:cc:91:da:50:78:4f:4a:95:02:19:8c:a4:9f:9e:0b:
         92:50:40:bf:97:4a:8c:02:cd:92:6f:58:9e:7d:d5:40:21:e5:
         c7:1e:55:c9:3f:7f:2a:51:39:66:2c:ff:1e:f8:85:c4:21:46:
         71:a0:fc:67:60:5b:67:8c:7a:5f:c0:af:b2:44:11:12:c0:ed:
         8c:2e:5f:8a:81:4a:f2:8d:c9:b4:b5:56:73:32:6d:2f:73:71:
         2b:43:de:ba:6e:0e:6d:65:ca:9b:76:63:d8:09:44:5c:88:b5:
         b8:2b:69:9b:95:5d:d0:eb:aa:53:ec:37:f0:36:a6:f2:03:bc:
         5a:7e:ef:f0:f4:04:57:0a:8c:06:9b:1d:da:7e:82:18:a9:e8:
         fd:cc:ab:35
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDxbdCCrgD9/tUrEEAwceKnWU3hgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJFN0NBRTdBQUQ1RjJDNDVENzYyRjEzRjU1M0E4RkYz
OEQwNzZFRDAeFw0yMzExMTQxOTE3MzhaFw0yNDExMTIxOTIyMzhaMDMxMTAvBgNV
BAMTKEI0OUM1NzUxN0VFMjk4RDBFNDBGRkQyMzg4OTBFQkQ0Q0JDRDc2NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm5GQcK7IOtF0PTwuaJtlcQzUR
IFo5xSBAmrWJk5NWnYxcpDLYs8qGyybJPCCh6exqJd/GVFmLT1i3featLYZnQf25
K0f66q9ZZwwV3sUSZFyme5ladO6k1FONZfAx49G6MauAyd95AzH+m59y5o2GEfJR
OY9ZTw/FDQghLr2hQMd5AmcDcWx3fKIhQ+YTuBRlCBj4pa3VYw3L6KZN0D4UFbcD
Cf6LfJB24lFU+o2NwKOcIPP2iAxc4MYy/lNWIyhpbU0YGPSt09bhfdW49KAzFp+3
eLI3CjIZP0biDmIrZD2qXo/C7gIN9qnUm0qc3O4eRJGqwkWWcZjTAvwdscDdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtJxXUX7imNDkD/0jiJDr1MvNdk4wHwYDVR0j
BBgwFoAUYufK56rV8sRddi8T9VOo/zjQdu0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NKYThXMkNENlB5WDY4a2s3VUY5TjJDZW1MZGVKRDdybjZRNHN5eWZt
TGovMC82MkU3Q0FFN0FBRDVGMkM0NUQ3NjJGMTNGNTUzQThGRjM4RDA3NkVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYyRTdDQUU3QUFENUYyQzQ1
RDc2MkYxM0Y1NTNBOEZGMzhEMDc2RUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNTSmE4VzJDRDZQeVg2OGtrN1VGOU4yQ2VtTGRlSkQ3cm42UTRzeXlmbUxqLzAv
MzIzODMwMzQzYTM3NjU2NDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR+1DANBgkqhkiG9w0BAQsFAAOCAQEAZsJbojYK
PjK4BtSk5G53hovVKdxGjvr8uV+Q007Y2J924w6g83cPMCgaL0B9YNibQdncjYlt
RKkINmSYXtEE/ez0ndRO35uO91vW91yynuhRlISdXXqpwIoQwjxJhLWITsbudPqE
r8FU0Nd5qcRDzJHaUHhPSpUCGYykn54LklBAv5dKjALNkm9Ynn3VQCHlxx5VyT9/
KlE5Ziz/HviFxCFGcaD8Z2BbZ4x6X8CvskQREsDtjC5fioFK8o3JtLVWczJtL3Nx
K0Peum4ObWXKm3Zj2AlEXIi1uCtpm5Vd0OuqU+w38Dam8gO8Wn7v8PQEVwqMBpsd
2n6CGKno/cyrNQ==
-----END CERTIFICATE-----