Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/323830343a356236633a383030303a3a2f33352d3335203d3e20323638383432.roa
File:                     323830343a356236633a383030303a3a2f33352d3335203d3e20323638383432.roa (raw, json)
Hash identifier:          +k1o6y/5nF0q76iAdwlo+gdXCE3MBbnogESR9+aUeHM=
Subject key identifier:   13:B6:0F:C7:59:F4:05:7B:BF:E0:CF:0A:E8:21:F4:EB:6D:F0:85:CD
Certificate issuer:       /CN=B1DC8A4583119FD74615E8A11D8796C0EFFD183E
Certificate serial:       5BEEA013DA8D65AAFDBD3EE72B6EC4137377A2D4
Authority key identifier: B1:DC:8A:45:83:11:9F:D7:46:15:E8:A1:1D:87:96:C0:EF:FD:18:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DC8A4583119FD74615E8A11D8796C0EFFD183E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/323830343a356236633a383030303a3a2f33352d3335203d3e20323638383432.roa
Signing time:             Wed 20 Jul 2022 15:51:17 +0000
ROA not before:           Wed 20 Jul 2022 15:46:17 +0000
ROA not after:            Wed 19 Jul 2023 15:51:17 +0000
asID:                     268842
IP address blocks:        2804:5b6c:8000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ee:a0:13:da:8d:65:aa:fd:bd:3e:e7:2b:6e:c4:13:73:77:a2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1DC8A4583119FD74615E8A11D8796C0EFFD183E
        Validity
            Not Before: Jul 20 15:46:17 2022 GMT
            Not After : Jul 19 15:51:17 2023 GMT
        Subject: CN=13B60FC759F4057BBFE0CF0AE821F4EB6DF085CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:6c:8e:5a:b2:7c:28:3d:62:38:dd:e9:e4:66:
                    56:3e:ea:4b:e4:f2:6c:a3:96:61:eb:bd:d7:60:48:
                    3d:f3:56:07:92:ef:f3:db:c4:0f:e5:31:88:01:a7:
                    bd:db:4f:c8:b2:71:2a:54:f7:7e:02:e9:17:6e:11:
                    e7:59:51:c3:2b:d6:c9:20:65:bc:87:ef:a0:e3:90:
                    22:36:10:d8:49:99:43:a1:f5:8e:4a:74:2f:4a:f4:
                    02:29:89:b1:1c:19:28:d3:75:05:b3:00:14:14:ce:
                    eb:95:f1:45:0e:16:51:8c:c0:9a:c6:45:20:0d:70:
                    48:8f:10:85:42:8b:95:19:0a:7d:28:e5:3c:b7:28:
                    e4:69:71:90:9e:8c:fa:56:39:1d:cd:57:7f:01:62:
                    5c:0d:26:5e:8e:6e:d4:75:d0:79:4f:13:41:02:b7:
                    40:c9:b6:95:f5:18:96:a7:4a:06:15:b2:af:8b:c9:
                    9f:f9:9d:e6:da:6f:4d:0f:07:da:8a:70:f8:3b:1a:
                    63:b2:ee:98:0e:8d:40:4d:3b:cc:1d:80:3b:dd:dc:
                    c9:35:6c:dc:a4:a7:4d:42:0b:ad:20:4b:1c:13:99:
                    df:3a:51:75:72:56:f5:fb:8a:b9:82:93:92:ef:50:
                    4f:1e:f4:83:5b:68:07:58:d5:65:11:af:b9:94:3d:
                    da:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B6:0F:C7:59:F4:05:7B:BF:E0:CF:0A:E8:21:F4:EB:6D:F0:85:CD
            X509v3 Authority Key Identifier:
                keyid:B1:DC:8A:45:83:11:9F:D7:46:15:E8:A1:1D:87:96:C0:EF:FD:18:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/B1DC8A4583119FD74615E8A11D8796C0EFFD183E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DC8A4583119FD74615E8A11D8796C0EFFD183E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/323830343a356236633a383030303a3a2f33352d3335203d3e20323638383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b6c:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         61:65:c9:d6:30:bc:d7:18:c8:92:ad:45:64:f1:52:a2:7d:95:
         13:26:24:89:a7:0f:09:86:ee:de:dd:e4:f0:a7:82:65:54:a2:
         e0:68:bb:5a:b0:f7:39:e1:63:9d:6f:a8:59:71:e9:65:fb:f0:
         03:1c:3b:43:7e:66:49:96:65:7d:ac:f9:18:fe:38:c5:fd:2f:
         02:e5:9c:71:9f:96:3c:70:e9:34:cf:07:bd:b9:9a:63:83:1c:
         10:ef:9f:de:47:d1:f7:10:b5:7d:c9:2f:0c:32:57:c4:66:24:
         e9:ad:1c:db:0e:80:1e:58:7a:c2:96:28:75:9a:f1:29:41:80:
         51:f6:0d:f4:ac:c2:dc:54:bc:03:42:0c:fd:f3:4f:f6:a9:3f:
         e2:be:70:c6:ea:3c:a0:f8:a6:91:6d:9d:40:a1:f3:89:fe:4c:
         aa:d4:31:94:ee:04:52:d8:17:5b:c1:12:b5:37:0e:f0:6d:26:
         2c:e2:49:2c:88:b3:8f:29:31:42:d7:a4:31:ce:d7:22:99:97:
         44:68:39:17:79:03:2c:aa:f6:55:32:a6:47:cf:fe:a5:05:6e:
         d3:76:73:02:ea:e3:8b:9d:cb:7b:ec:3a:3d:c5:2c:30:ea:33:
         ec:f3:43:2c:a1:63:a7:8a:e4:27:bb:0d:b8:8f:78:86:55:7a:
         c8:bb:0b:25
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUW+6gE9qNZar9vT7nK27EE3N3otQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFEQzhBNDU4MzExOUZENzQ2MTVFOEExMUQ4Nzk2QzBF
RkZEMTgzRTAeFw0yMjA3MjAxNTQ2MTdaFw0yMzA3MTkxNTUxMTdaMDMxMTAvBgNV
BAMTKDEzQjYwRkM3NTlGNDA1N0JCRkUwQ0YwQUU4MjFGNEVCNkRGMDg1Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2bI5asnwoPWI43enkZlY+6kvk
8myjlmHrvddgSD3zVgeS7/PbxA/lMYgBp73bT8iycSpU934C6RduEedZUcMr1skg
ZbyH76DjkCI2ENhJmUOh9Y5KdC9K9AIpibEcGSjTdQWzABQUzuuV8UUOFlGMwJrG
RSANcEiPEIVCi5UZCn0o5Ty3KORpcZCejPpWOR3NV38BYlwNJl6ObtR10HlPE0EC
t0DJtpX1GJanSgYVsq+LyZ/5nebab00PB9qKcPg7GmOy7pgOjUBNO8wdgDvd3Mk1
bNykp01CC60gSxwTmd86UXVyVvX7irmCk5LvUE8e9INbaAdY1WURr7mUPdpFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUE7YPx1n0BXu/4M8K6CH0623whc0wHwYDVR0j
BBgwFoAUsdyKRYMRn9dGFeihHYeWwO/9GD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjNlVGhOTDhRS0YzU2F4cGhuUDNvalJMaERBQmZaaG9vaTJIUUgyMXg4
SHEvMC9CMURDOEE0NTgzMTE5RkQ3NDYxNUU4QTExRDg3OTZDMEVGRkQxODNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IxREM4QTQ1ODMxMTlGRDc0
NjE1RThBMTFEODc5NkMwRUZGRDE4M0UuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYzZVRoTkw4UUtGM1NheHBoblAzb2pSTGhEQUJmWmhvb2kySFFIMjF4OEhxLzAv
MzIzODMwMzQzYTM1NjIzNjYzM2EzODMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzODM4MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEW2yAMA0GCSqGSIb3DQEBCwUA
A4IBAQBhZcnWMLzXGMiSrUVk8VKifZUTJiSJpw8Jhu7e3eTwp4JlVKLgaLtasPc5
4WOdb6hZcell+/ADHDtDfmZJlmV9rPkY/jjF/S8C5Zxxn5Y8cOk0zwe9uZpjgxwQ
75/eR9H3ELV9yS8MMlfEZiTprRzbDoAeWHrClih1mvEpQYBR9g30rMLcVLwDQgz9
80/2qT/ivnDG6jyg+KaRbZ1AofOJ/kyq1DGU7gRS2BdbwRK1Nw7wbSYs4kksiLOP
KTFC16QxztcimZdEaDkXeQMsqvZVMqZHz/6lBW7TdnMC6uOLnct77Do9xSww6jPs
80MsoWOniuQnuw24j3iGVXrIuwsl
-----END CERTIFICATE-----