Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a3a2f33322d3438203d3e20323731343134.roa
File:                     323830343a376232383a3a2f33322d3438203d3e20323731343134.roa (raw, json)
Hash identifier:          m+OMEwZ8neep9WAaM+kXbJFyZORMxpUHdaAg3mJPGGc=
Subject key identifier:   73:33:56:21:5E:BD:D7:58:FE:5F:3F:1B:49:C2:7B:1A:07:AD:4D:25
Certificate issuer:       /CN=FDF912AB43D9EC498247AB2AA097FCC4CF726502
Certificate serial:       4818234C83F6B45A064831E441729984661C1709
Authority key identifier: FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a3a2f33322d3438203d3e20323731343134.roa
Signing time:             Mon 21 Mar 2022 14:50:49 +0000
ROA not before:           Mon 21 Mar 2022 14:45:49 +0000
ROA not after:            Mon 20 Mar 2023 14:50:49 +0000
asID:                     271414
IP address blocks:        2804:7b28::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:18:23:4c:83:f6:b4:5a:06:48:31:e4:41:72:99:84:66:1c:17:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDF912AB43D9EC498247AB2AA097FCC4CF726502
        Validity
            Not Before: Mar 21 14:45:49 2022 GMT
            Not After : Mar 20 14:50:49 2023 GMT
        Subject: CN=733356215EBDD758FE5F3F1B49C27B1A07AD4D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e0:d6:21:bd:04:c8:03:39:38:d8:ef:87:53:
                    7f:c9:61:a3:97:0d:31:96:50:0d:75:3a:ca:93:96:
                    23:48:d2:6d:93:be:27:f3:fd:10:c4:14:c1:23:3b:
                    c6:83:18:25:4b:bb:e1:31:79:5d:0c:9f:c0:89:9b:
                    b4:62:21:65:2c:fd:7a:5e:7c:08:28:63:2c:c3:f0:
                    11:58:5e:10:65:36:c8:0f:ab:e7:d2:18:8f:53:7f:
                    ea:ee:ae:a1:71:53:d5:d8:0a:9d:25:f8:bf:f6:76:
                    dc:b7:7e:b4:51:b0:1a:97:68:4e:10:81:b0:b7:d1:
                    c6:13:3e:c3:7f:9d:75:c8:60:1a:f0:1f:78:1d:af:
                    41:d0:3c:7a:ee:79:a0:fd:de:b1:8f:a9:e8:33:2f:
                    d2:19:d5:50:77:68:66:dd:a4:2c:70:4a:96:3c:1f:
                    9a:6e:36:3a:a3:5f:3e:d4:c1:1d:be:6f:c4:55:ea:
                    1c:68:a7:e8:77:07:79:5e:85:86:34:81:7a:7d:9d:
                    07:e1:1f:5b:b5:46:8a:10:b8:cb:2d:5e:c9:38:a3:
                    b7:61:16:92:11:de:e0:23:51:c1:38:4f:fc:9b:0e:
                    cd:10:ae:d7:a9:5a:cd:71:19:8c:e5:b4:dc:d7:d5:
                    9d:db:f5:01:33:d7:00:4d:20:a0:53:f5:8b:65:e5:
                    0d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:33:56:21:5E:BD:D7:58:FE:5F:3F:1B:49:C2:7B:1A:07:AD:4D:25
            X509v3 Authority Key Identifier:
                keyid:FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a3a2f33322d3438203d3e20323731343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b28::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:31:8b:69:67:03:df:0e:14:f7:40:5b:13:36:7e:de:88:9e:
         f1:95:dc:09:04:07:20:b7:e3:f7:8f:0c:74:ba:0a:a7:dd:56:
         7f:94:0e:d9:de:fa:5c:bb:e2:e3:c0:65:30:06:9c:1b:84:f4:
         5f:6d:8a:a2:d6:45:5c:7c:90:78:44:73:fe:c8:f4:87:f8:33:
         8c:70:8c:3a:b0:8d:0b:c1:5d:2d:4b:80:43:94:a8:88:84:92:
         17:a9:7c:48:20:2a:0e:23:50:ac:1b:c7:e0:67:1f:7f:72:62:
         a7:f9:10:f1:f4:b5:e1:43:cd:9a:f6:ab:79:51:8e:fd:fb:e0:
         df:69:71:36:84:e5:c9:1d:19:6f:35:83:5f:2d:1c:99:be:c7:
         b8:5b:7a:ea:0a:e7:66:ed:4b:ec:93:89:ef:79:0b:8f:69:a5:
         0d:20:2e:90:4f:98:70:1a:aa:0f:82:3d:86:75:5d:50:48:61:
         fd:6e:0e:84:bd:ea:71:12:d8:8b:84:b3:73:30:90:e6:fb:65:
         7c:31:7a:95:35:89:8b:3b:5f:dd:60:48:a6:ec:b3:0f:27:10:
         bd:60:e0:f0:76:e3:0c:5b:75:c1:9a:da:c4:fe:85:90:bf:d7:
         4f:a8:be:35:73:70:2e:a2:4f:ea:71:96:e8:29:07:84:38:f7:
         6b:27:39:3d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSBgjTIP2tFoGSDHkQXKZhGYcFwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRGOTEyQUI0M0Q5RUM0OTgyNDdBQjJBQTA5N0ZDQzRD
RjcyNjUwMjAeFw0yMjAzMjExNDQ1NDlaFw0yMzAzMjAxNDUwNDlaMDMxMTAvBgNV
BAMTKDczMzM1NjIxNUVCREQ3NThGRTVGM0YxQjQ5QzI3QjFBMDdBRDREMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD44NYhvQTIAzk42O+HU3/JYaOX
DTGWUA11OsqTliNI0m2Tvifz/RDEFMEjO8aDGCVLu+ExeV0Mn8CJm7RiIWUs/Xpe
fAgoYyzD8BFYXhBlNsgPq+fSGI9Tf+rurqFxU9XYCp0l+L/2dty3frRRsBqXaE4Q
gbC30cYTPsN/nXXIYBrwH3gdr0HQPHrueaD93rGPqegzL9IZ1VB3aGbdpCxwSpY8
H5puNjqjXz7UwR2+b8RV6hxop+h3B3lehYY0gXp9nQfhH1u1RooQuMstXsk4o7dh
FpIR3uAjUcE4T/ybDs0QrtepWs1xGYzltNzX1Z3b9QEz1wBNIKBT9Ytl5Q1lAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUczNWIV6911j+Xz8bScJ7GgetTSUwHwYDVR0j
BBgwFoAU/fkSq0PZ7EmCR6sqoJf8xM9yZQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWkxQXZyQ0Y2Smhyc0Nmam5NZVJObXZkNlZodU1LeWJjZ3NRRzRVcm1z
WHcvMC9GREY5MTJBQjQzRDlFQzQ5ODI0N0FCMkFBMDk3RkNDNENGNzI2NTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZERjkxMkFCNDNEOUVDNDk4
MjQ3QUIyQUEwOTdGQ0M0Q0Y3MjY1MDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVpMUF2ckNGNkpocnNDZmpuTWVSTm12ZDZWaHVNS3liY2dzUUc0VXJtc1h3LzAv
MzIzODMwMzQzYTM3NjIzMjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzQzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR7KDANBgkqhkiG9w0BAQsFAAOCAQEAeDGLaWcD
3w4U90BbEzZ+3oie8ZXcCQQHILfj948MdLoKp91Wf5QO2d76XLvi48BlMAacG4T0
X22KotZFXHyQeERz/sj0h/gzjHCMOrCNC8FdLUuAQ5SoiISSF6l8SCAqDiNQrBvH
4Gcff3Jip/kQ8fS14UPNmvareVGO/fvg32lxNoTlyR0ZbzWDXy0cmb7HuFt66grn
Zu1L7JOJ73kLj2mlDSAukE+YcBqqD4I9hnVdUEhh/W4OhL3qcRLYi4SzczCQ5vtl
fDF6lTWJiztf3WBIpuyzDycQvWDg8HbjDFt1wZraxP6FkL/XT6i+NXNwLqJP6nGW
6CkHhDj3ayc5PQ==
-----END CERTIFICATE-----