Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/323830343a313831343a3a2f33322d3430203d3e20323633323633.roa
File:                     323830343a313831343a3a2f33322d3430203d3e20323633323633.roa (raw, json)
Hash identifier:          BF2KuUDHZw9CGFjX4P2yeMixRjAl6bM/sVHmVUAGXUw=
Subject key identifier:   45:47:3B:74:4F:4A:5F:7E:EB:89:DF:96:3E:4E:08:C0:69:A4:FE:5D
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       75E58998B3CBC119066C4EC2548C8006CC368765
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/323830343a313831343a3a2f33322d3430203d3e20323633323633.roa
Signing time:             Wed 17 May 2023 14:12:45 +0000
ROA not before:           Wed 17 May 2023 14:07:45 +0000
ROA not after:            Wed 15 May 2024 14:12:45 +0000
asID:                     263263
IP address blocks:        2804:1814::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e5:89:98:b3:cb:c1:19:06:6c:4e:c2:54:8c:80:06:cc:36:87:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 17 14:07:45 2023 GMT
            Not After : May 15 14:12:45 2024 GMT
        Subject: CN=45473B744F4A5F7EEB89DF963E4E08C069A4FE5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d6:ce:b5:dc:28:f8:4f:87:5c:ed:48:db:fa:
                    de:50:84:62:41:b4:b4:6b:4a:3d:f2:8e:23:56:36:
                    70:f0:5b:57:b7:dc:93:3b:96:4f:56:cc:0e:44:0d:
                    c1:be:00:99:b6:0c:b9:92:65:06:6c:23:6e:28:1e:
                    43:bf:78:0c:f1:c2:6c:38:fa:b9:e4:92:27:e2:77:
                    8d:92:e0:af:5a:97:ef:61:4d:ae:88:5c:df:49:4f:
                    95:17:6d:f1:0c:17:38:30:22:0b:cf:5c:7f:cf:f9:
                    30:ec:8e:83:5b:e8:b7:12:b6:cf:6e:9b:32:6a:ca:
                    9b:d4:11:41:e3:4c:c0:1c:42:ad:9c:be:71:bf:a3:
                    dc:4e:67:77:50:89:7e:77:c5:55:4d:5e:1f:fd:28:
                    e1:ce:56:bd:3b:b4:78:5b:12:86:2b:d9:10:51:fb:
                    d1:a3:39:6d:1d:98:71:5b:27:97:6b:76:8d:dd:1b:
                    cd:bc:ca:d9:5f:08:f4:96:b6:11:60:ba:9c:7f:2b:
                    e4:17:69:f0:53:be:35:6d:5c:d8:da:98:d9:b5:10:
                    9e:48:26:b0:48:c6:2d:43:74:8d:01:63:74:29:ae:
                    da:0c:d4:53:08:59:a7:f7:61:e3:59:46:30:3a:32:
                    a9:e6:1f:80:1b:f5:b0:36:75:79:90:6f:39:5a:3d:
                    18:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:47:3B:74:4F:4A:5F:7E:EB:89:DF:96:3E:4E:08:C0:69:A4:FE:5D
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/323830343a313831343a3a2f33322d3430203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1814::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:9f:9b:a2:10:96:f5:fe:81:6f:db:42:6d:c0:16:cc:25:3d:
         47:27:5c:aa:a7:60:c3:10:2f:f2:bd:42:0a:0b:c3:56:7b:af:
         5d:7d:b0:d7:26:b0:04:ec:95:60:93:44:28:9e:88:16:35:f7:
         73:ca:39:e1:b5:72:56:a7:16:25:c8:a5:ba:72:a3:2f:51:c4:
         7b:ce:87:f8:a4:48:0e:57:7a:41:e0:5f:f9:75:f2:fc:aa:f5:
         7b:03:23:47:ca:ae:7b:f2:0b:cb:85:a5:28:78:cb:a2:01:d1:
         05:df:13:bd:98:6b:96:65:6e:6e:50:68:f9:44:4b:0b:9f:8a:
         47:17:99:a3:08:f2:1b:bf:ce:f6:a7:ee:49:34:c5:b5:60:f2:
         a5:e5:e1:eb:69:d0:0f:fe:7a:21:87:aa:54:49:3f:5a:ae:b1:
         4e:e7:9a:fe:88:9f:00:12:ba:5b:36:fa:11:43:0b:5e:b9:54:
         fd:0a:f6:63:93:4d:fa:f5:e1:ba:6f:ba:44:38:fd:58:9d:c7:
         23:b7:ec:13:50:25:60:d7:59:82:dd:88:4d:0d:d7:e3:26:cc:
         2e:dc:2b:ae:02:69:ef:da:24:97:82:77:91:82:69:37:8c:31:
         1d:f8:d0:0f:59:f2:57:00:2b:d5:c0:eb:d6:26:5f:94:d6:6f:
         3d:12:5d:ad
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdeWJmLPLwRkGbE7CVIyABsw2h2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVGRTNGNUM3RjRDMTYxRUI3RjEzRTBDQjI0Qjg4MjlG
RTM4MTI2MDAeFw0yMzA1MTcxNDA3NDVaFw0yNDA1MTUxNDEyNDVaMDMxMTAvBgNV
BAMTKDQ1NDczQjc0NEY0QTVGN0VFQjg5REY5NjNFNEUwOEMwNjlBNEZFNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq1s613Cj4T4dc7Ujb+t5QhGJB
tLRrSj3yjiNWNnDwW1e33JM7lk9WzA5EDcG+AJm2DLmSZQZsI24oHkO/eAzxwmw4
+rnkkifid42S4K9al+9hTa6IXN9JT5UXbfEMFzgwIgvPXH/P+TDsjoNb6LcSts9u
mzJqypvUEUHjTMAcQq2cvnG/o9xOZ3dQiX53xVVNXh/9KOHOVr07tHhbEoYr2RBR
+9GjOW0dmHFbJ5drdo3dG828ytlfCPSWthFgupx/K+QXafBTvjVtXNjamNm1EJ5I
JrBIxi1DdI0BY3QprtoM1FMIWaf3YeNZRjA6MqnmH4Ab9bA2dXmQbzlaPRhfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQURUc7dE9KX37rid+WPk4IwGmk/l0wHwYDVR0j
BBgwFoAU/v4/XH9MFh638T4MskuIKf44EmAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVDVEZuOHdudTRveXNqWUozTFNRZHRLOFBIbnhObTVtRDRWSFl2SDlD
aUQvMC9GRUZFM0Y1QzdGNEMxNjFFQjdGMTNFMENCMjRCODgyOUZFMzgxMjYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZFRkUzRjVDN0Y0QzE2MUVC
N0YxM0UwQ0IyNEI4ODI5RkUzODEyNjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Q1RGbjh3bnU0b3lzallKM0xTUWR0SzhQSG54Tm01bUQ0VkhZdkg5Q2lELzAv
MzIzODMwMzQzYTMxMzgzMTM0M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjMz
MzIzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQYFDANBgkqhkiG9w0BAQsFAAOCAQEAaJ+bohCW
9f6Bb9tCbcAWzCU9RydcqqdgwxAv8r1CCgvDVnuvXX2w1yawBOyVYJNEKJ6IFjX3
c8o54bVyVqcWJcilunKjL1HEe86H+KRIDld6QeBf+XXy/Kr1ewMjR8que/ILy4Wl
KHjLogHRBd8TvZhrlmVublBo+URLC5+KRxeZowjyG7/O9qfuSTTFtWDypeXh62nQ
D/56IYeqVEk/Wq6xTuea/oifABK6Wzb6EUMLXrlU/Qr2Y5NN+vXhum+6RDj9WJ3H
I7fsE1AlYNdZgt2ITQ3X4ybMLtwrrgJp79okl4J3kYJpN4wxHfjQD1nyVwAr1cDr
1iZflNZvPRJdrQ==
-----END CERTIFICATE-----