Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/323830343a353235633a3a2f33332d3333203d3e2030.roa
File:                     323830343a353235633a3a2f33332d3333203d3e2030.roa (raw, json)
Hash identifier:          BXJenNWGtVqYoENgxZM5z0v3EVNpikX60A70snlfx4U=
Subject key identifier:   B7:EF:ED:F0:24:FD:34:89:E7:A4:51:3E:C0:11:34:35:6C:DB:38:0B
Certificate issuer:       /CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
Certificate serial:       4EAF63726B2B1D30DBB6183476A218A1F1C297A6
Authority key identifier: 7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/323830343a353235633a3a2f33332d3333203d3e2030.roa
Signing time:             Sat 02 Dec 2023 15:46:09 +0000
ROA not before:           Sat 02 Dec 2023 15:41:09 +0000
ROA not after:            Sat 30 Nov 2024 15:46:09 +0000
asID:                     0
IP address blocks:        2804:525c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:af:63:72:6b:2b:1d:30:db:b6:18:34:76:a2:18:a1:f1:c2:97:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
        Validity
            Not Before: Dec  2 15:41:09 2023 GMT
            Not After : Nov 30 15:46:09 2024 GMT
        Subject: CN=B7EFEDF024FD3489E7A4513EC01134356CDB380B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:f5:44:0c:a5:d8:c8:c3:d5:b9:b4:01:86:
                    ff:61:cb:20:63:cc:1a:1d:6d:24:45:c7:7d:c5:00:
                    62:ea:19:14:d1:a0:c7:d3:37:e3:10:dc:c6:42:8d:
                    70:fb:20:47:e5:cb:04:9f:10:5f:72:65:a8:20:d4:
                    b4:d5:ed:93:a5:24:36:c6:dc:41:58:bb:10:84:9d:
                    99:b3:1f:d6:57:67:2b:8e:36:e9:13:2a:5a:28:08:
                    97:52:0a:e8:bc:ba:6c:65:fa:b4:c2:cc:9e:cd:cb:
                    1d:13:7a:4e:d5:02:2c:44:42:ba:11:63:77:36:61:
                    b2:47:44:7d:b3:cb:aa:a3:12:82:4d:06:82:ef:31:
                    4f:23:14:22:d9:87:94:61:0a:d8:53:a4:3a:03:22:
                    8a:48:20:4f:66:a8:66:cf:46:ea:b4:25:83:02:af:
                    e7:6d:32:7b:18:bc:b6:28:29:7b:2f:ef:6f:60:6d:
                    a6:4d:b2:4c:03:42:30:3c:89:fe:5a:86:b6:4a:00:
                    d9:4a:2a:2c:0e:f1:5f:23:7e:e2:6a:20:56:2a:c6:
                    92:b6:94:1d:b3:30:54:26:ec:44:06:eb:db:ea:41:
                    d0:fa:ec:04:ba:5f:e4:8d:c4:32:96:47:dc:76:82:
                    7d:29:b8:61:ad:88:4c:9d:c7:87:20:58:ec:d7:1d:
                    1e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EF:ED:F0:24:FD:34:89:E7:A4:51:3E:C0:11:34:35:6C:DB:38:0B
            X509v3 Authority Key Identifier:
                keyid:7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/323830343a353235633a3a2f33332d3333203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:525c::/33

    Signature Algorithm: sha256WithRSAEncryption
         6b:18:64:0b:17:f9:9d:08:d0:cf:bf:65:2f:26:10:c1:b2:d0:
         ef:03:51:ca:f3:68:96:80:67:91:9f:2d:a2:bf:c9:30:a3:b7:
         dd:bf:18:91:9f:33:10:e8:7d:34:9f:40:d5:a4:dd:1a:6d:2d:
         43:8f:5c:4d:8d:fb:de:3e:b1:46:94:8f:ff:e3:67:59:1d:06:
         62:80:ee:7c:2f:3d:66:d3:0e:12:4e:39:5c:37:e4:32:25:4b:
         33:97:33:d8:63:b5:7b:d5:a3:55:76:f6:dd:d3:bf:3c:45:60:
         7d:d7:ae:b5:e8:38:c1:2c:69:52:a3:a6:20:25:a0:87:dd:66:
         9e:68:c2:8e:f4:df:d4:7f:f3:b0:d1:fd:ea:22:72:c8:e9:c7:
         d0:04:fe:c2:24:b1:72:3c:5c:f6:2e:00:a0:f9:d2:04:ba:69:
         fe:93:51:a0:3f:6f:84:37:45:bc:70:9a:bd:13:ac:c1:03:11:
         d5:64:46:14:6d:88:1c:d3:0e:10:7d:3d:f4:ca:2a:4c:7b:6e:
         dc:0a:76:ad:b1:e4:36:73:ef:fd:86:62:01:85:12:0f:63:61:
         c1:3d:d7:21:4d:4c:4b:f8:9f:3c:38:89:d0:af:0d:18:17:1e:
         56:5e:16:98:1b:c2:e6:34:75:98:72:74:03:fb:80:34:76:a0:
         b3:3a:2c:4a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUTq9jcmsrHTDbthg0dqIYofHCl6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0MTI1MEI4NjRDQ0FDNzVCQURCOUIyNDcxMjYzMEJF
MEY5QzI2NTAeFw0yMzEyMDIxNTQxMDlaFw0yNDExMzAxNTQ2MDlaMDMxMTAvBgNV
BAMTKEI3RUZFREYwMjRGRDM0ODlFN0E0NTEzRUMwMTEzNDM1NkNEQjM4MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClovVEDKXYyMPVubQBhv9hyyBj
zBodbSRFx33FAGLqGRTRoMfTN+MQ3MZCjXD7IEflywSfEF9yZagg1LTV7ZOlJDbG
3EFYuxCEnZmzH9ZXZyuONukTKlooCJdSCui8umxl+rTCzJ7Nyx0Tek7VAixEQroR
Y3c2YbJHRH2zy6qjEoJNBoLvMU8jFCLZh5RhCthTpDoDIopIIE9mqGbPRuq0JYMC
r+dtMnsYvLYoKXsv729gbaZNskwDQjA8if5ahrZKANlKKiwO8V8jfuJqIFYqxpK2
lB2zMFQm7EQG69vqQdD67AS6X+SNxDKWR9x2gn0puGGtiEydx4cgWOzXHR7HAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUt+/t8CT9NInnpFE+wBE0NWzbOAswHwYDVR0j
BBgwFoAUfUElC4ZMysdbrbmyRxJjC+D5wmUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGZhdnBQVVlFdGFEWHp1bUJvQmo0ZmhQVTV2Y21Ld0ozSEJ1cmRlWkJi
b2IvMC83RDQxMjUwQjg2NENDQUM3NUJBREI5QjI0NzEyNjMwQkUwRjlDMjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdENDEyNTBCODY0Q0NBQzc1
QkFEQjlCMjQ3MTI2MzBCRTBGOUMyNjUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCB
jwYIKwYBBQUHMAuGgYJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRmYXZwUFVZRXRhRFh6dW1Cb0JqNGZoUFU1dmNtS3dKM0hCdXJkZVpCYm9iLzAv
MzIzODMwMzQzYTM1MzIzNTYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgcoBFJcADANBgkqhkiG9w0BAQsFAAOCAQEAaxhkCxf5nQjQz79lLyYQ
wbLQ7wNRyvNoloBnkZ8tor/JMKO33b8YkZ8zEOh9NJ9A1aTdGm0tQ49cTY373j6x
RpSP/+NnWR0GYoDufC89ZtMOEk45XDfkMiVLM5cz2GO1e9WjVXb23dO/PEVgfdeu
teg4wSxpUqOmICWgh91mnmjCjvTf1H/zsNH96iJyyOnH0AT+wiSxcjxc9i4AoPnS
BLpp/pNRoD9vhDdFvHCavROswQMR1WRGFG2IHNMOEH099MoqTHtu3Ap2rbHkNnPv
/YZiAYUSD2NhwT3XIU1MS/ifPDiJ0K8NGBceVl4WmBvC5jR1mHJ0A/uANHagszos
Sg==
-----END CERTIFICATE-----