Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/323830343a353335343a3a2f33322d3334203d3e20323638353737.roa
File:                     323830343a353335343a3a2f33322d3334203d3e20323638353737.roa (raw, json)
Hash identifier:          937HHvXZnhhGssQdswuwkJeJ0wEqh3ryPBlTT1l23Tc=
Subject key identifier:   50:05:8B:F9:4C:B6:A4:FA:79:C5:01:48:54:43:34:8C:07:07:09:18
Certificate issuer:       /CN=220249BB069A7AB17EC9F608DE544573D0214F45
Certificate serial:       1E60B42E69E5E7ECF5D7FA509C7810B72C818EE0
Authority key identifier: 22:02:49:BB:06:9A:7A:B1:7E:C9:F6:08:DE:54:45:73:D0:21:4F:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/220249BB069A7AB17EC9F608DE544573D0214F45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/323830343a353335343a3a2f33322d3334203d3e20323638353737.roa
Signing time:             Mon 24 Apr 2023 20:11:07 +0000
ROA not before:           Mon 24 Apr 2023 20:06:07 +0000
ROA not after:            Mon 22 Apr 2024 20:11:07 +0000
asID:                     268577
IP address blocks:        2804:5354::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:60:b4:2e:69:e5:e7:ec:f5:d7:fa:50:9c:78:10:b7:2c:81:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220249BB069A7AB17EC9F608DE544573D0214F45
        Validity
            Not Before: Apr 24 20:06:07 2023 GMT
            Not After : Apr 22 20:11:07 2024 GMT
        Subject: CN=50058BF94CB6A4FA79C501485443348C07070918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:95:f0:02:42:bb:29:e8:93:06:8e:f5:48:28:
                    58:ed:b7:67:16:ef:d6:90:03:64:c6:56:83:bd:b4:
                    0c:2b:e6:ff:cb:d5:76:5b:02:a0:2c:44:fc:8a:3d:
                    f7:24:13:cf:17:d3:bb:ef:3a:32:cd:fe:36:1a:a4:
                    e5:6f:93:54:0f:55:d7:54:37:c8:9d:b4:a2:09:f8:
                    70:48:17:12:d9:a6:46:66:d8:8d:a6:f5:4e:d8:cc:
                    99:ab:6f:33:29:25:af:02:bd:60:39:90:e4:62:e0:
                    72:55:55:4f:d9:3d:83:73:ad:cd:44:ae:5c:54:59:
                    df:2b:0a:ed:2b:04:c3:9b:10:a1:03:58:94:7b:dc:
                    07:e3:39:92:b6:f2:ef:3f:e3:f0:c5:d7:e4:2d:8f:
                    89:53:aa:7f:8c:fb:1c:a0:3d:cb:1e:b3:a0:cf:da:
                    db:27:73:46:c3:84:3a:9a:39:dc:e4:c7:3f:58:5c:
                    7f:59:a7:fb:e5:75:65:75:e8:7a:71:26:7f:4c:ea:
                    0e:e8:e4:50:21:06:99:2d:62:db:8d:2c:84:24:a0:
                    d7:a4:e7:6f:04:8f:43:85:57:c1:2e:01:e2:4d:38:
                    f2:4e:0a:13:8d:74:84:79:64:59:ed:2d:8c:48:c0:
                    07:ad:60:c7:fd:0b:d6:45:0e:c9:08:bf:6f:99:13:
                    e3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:05:8B:F9:4C:B6:A4:FA:79:C5:01:48:54:43:34:8C:07:07:09:18
            X509v3 Authority Key Identifier:
                keyid:22:02:49:BB:06:9A:7A:B1:7E:C9:F6:08:DE:54:45:73:D0:21:4F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/220249BB069A7AB17EC9F608DE544573D0214F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/220249BB069A7AB17EC9F608DE544573D0214F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/323830343a353335343a3a2f33322d3334203d3e20323638353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5354::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:3c:84:c0:bb:2d:84:0f:a3:6a:2c:95:1b:2d:ba:4b:0b:50:
         58:08:30:2f:f7:6f:d4:ea:2a:ce:79:52:f9:af:cb:f9:2c:c5:
         87:9a:65:87:a9:c9:b1:ec:f4:d8:6f:bd:39:78:49:92:fc:a3:
         c3:94:d8:b3:e0:6b:2f:d2:b5:c9:64:1f:47:f8:36:e5:5d:d9:
         6c:f4:4c:e7:b9:93:a2:89:ca:89:ca:85:32:f5:13:cc:f6:d0:
         49:02:a6:cb:51:46:96:ef:ac:f3:ca:e1:f3:45:d5:54:0e:a1:
         97:33:01:1d:56:b0:62:2f:32:63:75:00:0c:f9:99:61:86:16:
         e7:8a:63:8a:9d:6e:77:a1:7d:2a:0e:fa:98:ad:f1:e4:89:ee:
         e1:09:3d:55:d7:55:b6:c4:d9:04:b3:2a:1d:87:33:6d:10:19:
         c0:15:6d:d0:3e:88:0e:b6:29:37:a9:da:b3:ab:dd:0d:e4:4c:
         7a:65:c1:b5:3e:73:20:a3:f8:93:51:21:7a:7e:96:6f:15:4e:
         e9:99:ee:27:fc:bb:a3:5a:8e:55:25:49:d1:16:9a:54:f5:d8:
         b6:eb:10:8d:3e:d5:e4:31:0e:b3:3b:10:93:c6:b1:a9:ca:8e:
         bc:c2:e9:72:a8:b8:ed:44:67:b6:45:83:10:ce:df:ee:a2:96:
         12:1d:47:00
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHmC0Lmnl5+z11/pQnHgQtyyBjuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIwMjQ5QkIwNjlBN0FCMTdFQzlGNjA4REU1NDQ1NzNE
MDIxNEY0NTAeFw0yMzA0MjQyMDA2MDdaFw0yNDA0MjIyMDExMDdaMDMxMTAvBgNV
BAMTKDUwMDU4QkY5NENCNkE0RkE3OUM1MDE0ODU0NDMzNDhDMDcwNzA5MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjlfACQrsp6JMGjvVIKFjtt2cW
79aQA2TGVoO9tAwr5v/L1XZbAqAsRPyKPfckE88X07vvOjLN/jYapOVvk1QPVddU
N8idtKIJ+HBIFxLZpkZm2I2m9U7YzJmrbzMpJa8CvWA5kORi4HJVVU/ZPYNzrc1E
rlxUWd8rCu0rBMObEKEDWJR73AfjOZK28u8/4/DF1+Qtj4lTqn+M+xygPcses6DP
2tsnc0bDhDqaOdzkxz9YXH9Zp/vldWV16HpxJn9M6g7o5FAhBpktYtuNLIQkoNek
528Ej0OFV8EuAeJNOPJOChONdIR5ZFntLYxIwAetYMf9C9ZFDskIv2+ZE+O7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUAWL+Uy2pPp5xQFIVEM0jAcHCRgwHwYDVR0j
BBgwFoAUIgJJuwaaerF+yfYI3lRFc9AhT0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVhDN2ZVcGpVblNEc3JHaFlmZjE4VjgzYW10N2F1cDZ0VkRaSFlLRmY4
eHovMC8yMjAyNDlCQjA2OUE3QUIxN0VDOUY2MDhERTU0NDU3M0QwMjE0RjQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIyMDI0OUJCMDY5QTdBQjE3
RUM5RjYwOERFNTQ0NTczRDAyMTRGNDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVYQzdmVXBqVW5TRHNyR2hZZmYxOFY4M2FtdDdhdXA2dFZEWkhZS0ZmOHh6LzAv
MzIzODMwMzQzYTM1MzMzNTM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM4
MzUzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARTVDANBgkqhkiG9w0BAQsFAAOCAQEAqjyEwLst
hA+jaiyVGy26SwtQWAgwL/dv1OoqznlS+a/L+SzFh5plh6nJsez02G+9OXhJkvyj
w5TYs+BrL9K1yWQfR/g25V3ZbPRM57mToonKicqFMvUTzPbQSQKmy1FGlu+s88rh
80XVVA6hlzMBHVawYi8yY3UADPmZYYYW54pjip1ud6F9Kg76mK3x5Inu4Qk9VddV
tsTZBLMqHYczbRAZwBVt0D6IDrYpN6nas6vdDeRMemXBtT5zIKP4k1Ehen6WbxVO
6ZnuJ/y7o1qOVSVJ0RaaVPXYtusQjT7V5DEOszsQk8axqcqOvMLpcqi47URntkWD
EM7f7qKWEh1HAA==
-----END CERTIFICATE-----