Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a3a2f33322d3332203d3e203532383538.roa
File:                     323830343a3737343a3a2f33322d3332203d3e203532383538.roa (raw, json)
Hash identifier:          XkfoZK6/uhcQ/xmbt5HICR5FiOd6cAYHA1ZuWFK3PvY=
Subject key identifier:   AA:41:44:91:72:46:19:9C:52:10:2C:AA:85:FF:E3:2A:C2:E4:18:A9
Certificate issuer:       /CN=5B263F0F259C154495BFEADDE220CF73F0E6D7D0
Certificate serial:       5B084D3F8A88C0A9039817BA2D3DE435E462C541
Authority key identifier: 5B:26:3F:0F:25:9C:15:44:95:BF:EA:DD:E2:20:CF:73:F0:E6:D7:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a3a2f33322d3332203d3e203532383538.roa
Signing time:             Tue 05 Dec 2023 15:44:38 +0000
ROA not before:           Tue 05 Dec 2023 15:39:38 +0000
ROA not after:            Tue 03 Dec 2024 15:44:38 +0000
asID:                     52858
IP address blocks:        2804:774::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:08:4d:3f:8a:88:c0:a9:03:98:17:ba:2d:3d:e4:35:e4:62:c5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B263F0F259C154495BFEADDE220CF73F0E6D7D0
        Validity
            Not Before: Dec  5 15:39:38 2023 GMT
            Not After : Dec  3 15:44:38 2024 GMT
        Subject: CN=AA4144917246199C52102CAA85FFE32AC2E418A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c1:55:dd:94:bf:8a:3a:02:e7:1c:66:0f:c2:
                    0d:2f:1d:75:38:02:80:5e:16:d0:bb:69:28:30:b2:
                    93:8e:88:6f:2c:ff:6c:84:af:05:99:10:b9:92:e8:
                    2c:c8:7c:05:8e:12:b0:ff:dd:7c:b1:1f:0a:7d:d3:
                    38:a3:35:b7:b1:ff:f5:a0:0c:e6:bb:30:d3:29:28:
                    0a:7d:7f:bc:3f:9e:f1:d8:9c:38:2a:c4:23:9e:00:
                    7a:80:31:d9:44:77:b6:00:f2:d7:cd:78:6a:82:05:
                    5f:5d:05:35:f4:2d:63:03:ac:bc:be:bc:18:ff:1c:
                    87:23:7e:8d:55:63:0d:f1:f0:51:3e:fe:9d:11:23:
                    ef:2b:e8:10:70:97:04:5e:24:98:c6:db:42:fa:3a:
                    07:45:09:38:9c:8f:96:5a:6c:43:6f:e3:3d:67:2f:
                    5d:45:ed:84:c8:65:7e:0e:70:40:dc:ce:2a:b6:9c:
                    5f:95:a8:bd:50:7f:55:f7:69:a1:6a:33:42:d7:f6:
                    66:08:1b:9d:b8:8a:24:e3:26:04:e8:4d:fa:e4:ed:
                    d7:31:b2:b1:f2:f8:53:f4:60:af:c8:12:0b:3d:f8:
                    93:c6:ed:b4:70:a2:07:0e:fe:58:0d:e5:af:19:41:
                    00:68:dc:e3:08:a7:63:68:35:e7:68:e7:2b:39:b0:
                    f6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:41:44:91:72:46:19:9C:52:10:2C:AA:85:FF:E3:2A:C2:E4:18:A9
            X509v3 Authority Key Identifier:
                keyid:5B:26:3F:0F:25:9C:15:44:95:BF:EA:DD:E2:20:CF:73:F0:E6:D7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/323830343a3737343a3a2f33322d3332203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:b6:2b:b1:b6:15:82:9c:ce:bb:72:f4:8a:06:da:5e:79:4c:
         79:15:cc:ca:df:ce:37:fa:ee:99:42:2c:f4:74:2d:d2:67:f2:
         4a:4b:38:60:73:c3:40:23:df:96:a6:0c:91:2d:d7:71:cc:23:
         bf:9a:92:82:00:95:9a:dd:b6:50:14:9d:73:ff:29:3d:bf:8e:
         1b:ae:23:71:48:ed:d8:c9:de:b6:02:c3:88:86:fd:1f:99:44:
         01:40:65:c3:89:18:d8:94:0f:5c:2d:aa:39:a0:8c:64:f2:68:
         62:a6:28:72:f7:c2:22:70:3d:df:da:dc:ab:f7:31:bf:7a:47:
         c4:eb:f5:6c:e3:12:50:f9:e5:c6:ae:23:2f:2a:90:f6:f8:d8:
         3c:4d:5f:e9:1e:8e:81:40:98:4b:4a:1f:fb:82:36:b9:53:3f:
         bc:90:bc:ec:39:cb:ea:9b:d8:b4:6d:f3:6d:2f:aa:0b:a2:0a:
         1a:df:e9:b4:71:1a:31:21:31:bd:0a:bf:cb:9c:f4:6d:e3:33:
         da:97:e0:1a:a5:53:2b:06:b6:4b:47:ef:a4:6a:a6:12:58:ec:
         55:9e:b6:45:4c:de:cf:6b:d6:47:6c:aa:fd:81:98:28:25:31:
         68:a9:40:60:2c:7c:70:4b:48:26:00:20:ea:dd:4a:7e:19:19:
         1f:47:4c:01
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUWwhNP4qIwKkDmBe6LT3kNeRixUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUIyNjNGMEYyNTlDMTU0NDk1QkZFQURERTIyMENGNzNG
MEU2RDdEMDAeFw0yMzEyMDUxNTM5MzhaFw0yNDEyMDMxNTQ0MzhaMDMxMTAvBgNV
BAMTKEFBNDE0NDkxNzI0NjE5OUM1MjEwMkNBQTg1RkZFMzJBQzJFNDE4QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZwVXdlL+KOgLnHGYPwg0vHXU4
AoBeFtC7aSgwspOOiG8s/2yErwWZELmS6CzIfAWOErD/3XyxHwp90zijNbex//Wg
DOa7MNMpKAp9f7w/nvHYnDgqxCOeAHqAMdlEd7YA8tfNeGqCBV9dBTX0LWMDrLy+
vBj/HIcjfo1VYw3x8FE+/p0RI+8r6BBwlwReJJjG20L6OgdFCTicj5ZabENv4z1n
L11F7YTIZX4OcEDcziq2nF+VqL1Qf1X3aaFqM0LX9mYIG524iiTjJgToTfrk7dcx
srHy+FP0YK/IEgs9+JPG7bRwogcO/lgN5a8ZQQBo3OMIp2NoNedo5ys5sPbLAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUqkFEkXJGGZxSECyqhf/jKsLkGKkwHwYDVR0j
BBgwFoAUWyY/DyWcFUSVv+rd4iDPc/Dm19AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkJwa2hrSm10VWZZQXV2YnltVEpQOVEzVTRlS2ZFcEVISmlDcXdNVFNk
REMvMC81QjI2M0YwRjI1OUMxNTQ0OTVCRkVBRERFMjIwQ0Y3M0YwRTZEN0QwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCMjYzRjBGMjU5QzE1NDQ5
NUJGRUFEREUyMjBDRjczRjBFNkQ3RDAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCcGtoa0ptdFVmWUF1dmJ5bVRKUDlRM1U0ZUtmRXBFSEppQ3F3TVRTZERDLzAv
MzIzODMwMzQzYTM3MzczNDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzODM1
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAd0MA0GCSqGSIb3DQEBCwUAA4IBAQCwtiuxthWCnM67
cvSKBtpeeUx5FczK3843+u6ZQiz0dC3SZ/JKSzhgc8NAI9+WpgyRLddxzCO/mpKC
AJWa3bZQFJ1z/yk9v44briNxSO3Yyd62AsOIhv0fmUQBQGXDiRjYlA9cLao5oIxk
8mhipihy98IicD3f2tyr9zG/ekfE6/Vs4xJQ+eXGriMvKpD2+Ng8TV/pHo6BQJhL
Sh/7gja5Uz+8kLzsOcvqm9i0bfNtL6oLogoa3+m0cRoxITG9Cr/LnPRt4zPal+Aa
pVMrBrZLR++kaqYSWOxVnrZFTN7Pa9ZHbKr9gZgoJTFoqUBgLHxwS0gmACDq3Up+
GRkfR0wB
-----END CERTIFICATE-----