Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/323830343a323366303a3a2f33322d3332203d3e20323634313932.roa
File:                     323830343a323366303a3a2f33322d3332203d3e20323634313932.roa (raw, json)
Hash identifier:          6FZbuvBHWKi8yAFA/+kwbDchOsJSt0ok3ZB3XiZbP7w=
Subject key identifier:   10:3B:38:C9:1C:6F:17:C7:35:F4:A3:81:FE:B9:50:37:2C:DD:51:3B
Certificate issuer:       /CN=7416BDE8982661C0715BA0ADF262F83EB49F1381
Certificate serial:       6F458522725B83E56FA8229C5F90C9665F3C5E8B
Authority key identifier: 74:16:BD:E8:98:26:61:C0:71:5B:A0:AD:F2:62:F8:3E:B4:9F:13:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7416BDE8982661C0715BA0ADF262F83EB49F1381.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/323830343a323366303a3a2f33322d3332203d3e20323634313932.roa
Signing time:             Wed 13 Dec 2023 12:38:04 +0000
ROA not before:           Wed 13 Dec 2023 12:33:04 +0000
ROA not after:            Wed 11 Dec 2024 12:38:04 +0000
asID:                     264192
IP address blocks:        2804:23f0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:45:85:22:72:5b:83:e5:6f:a8:22:9c:5f:90:c9:66:5f:3c:5e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7416BDE8982661C0715BA0ADF262F83EB49F1381
        Validity
            Not Before: Dec 13 12:33:04 2023 GMT
            Not After : Dec 11 12:38:04 2024 GMT
        Subject: CN=103B38C91C6F17C735F4A381FEB950372CDD513B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:08:d2:b4:cc:b3:f3:04:34:64:7c:d7:35:b1:
                    7c:48:3c:3b:34:f4:af:1f:64:33:62:aa:56:04:1a:
                    c8:9f:cf:f5:c0:f4:c3:c8:cb:00:bf:0b:8e:22:be:
                    25:dc:44:1e:39:2d:a3:47:6c:a1:b7:da:d9:4c:32:
                    70:d0:37:bb:b7:d4:4b:c4:0e:d1:fc:4e:a4:6a:fa:
                    57:6a:d6:43:4e:32:ca:ed:71:61:46:26:83:97:6f:
                    c4:1b:0c:67:d4:f8:d0:a2:5d:2f:5f:7e:ed:74:ca:
                    87:60:a5:7f:e0:17:28:dd:42:14:c3:d1:d5:30:c4:
                    31:f4:31:1e:21:65:27:80:32:fe:35:92:86:79:b6:
                    4d:0f:9d:bf:62:8c:28:d1:be:89:aa:dc:5b:e9:c4:
                    8f:d1:72:fd:13:52:59:6d:f0:4d:ad:5b:f9:4d:52:
                    ed:ca:a1:4b:15:fe:08:d1:43:6e:b7:23:d1:1c:20:
                    ff:84:62:57:cb:de:1e:a5:eb:a5:14:84:03:69:69:
                    fb:de:35:20:9f:92:0e:5f:af:56:22:be:44:46:b7:
                    5e:3b:64:2b:6b:43:b2:1e:62:12:ef:31:86:72:f7:
                    5f:0a:b3:fd:25:3d:42:5f:64:ce:9b:f3:a9:20:c8:
                    d4:b0:17:fc:01:8b:db:ac:32:2f:40:4c:68:de:ae:
                    59:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3B:38:C9:1C:6F:17:C7:35:F4:A3:81:FE:B9:50:37:2C:DD:51:3B
            X509v3 Authority Key Identifier:
                keyid:74:16:BD:E8:98:26:61:C0:71:5B:A0:AD:F2:62:F8:3E:B4:9F:13:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/7416BDE8982661C0715BA0ADF262F83EB49F1381.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7416BDE8982661C0715BA0ADF262F83EB49F1381.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/323830343a323366303a3a2f33322d3332203d3e20323634313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:be:f5:2b:49:9a:91:e3:59:b9:26:87:7d:d9:48:0e:5e:8b:
         0a:f8:ba:01:05:f8:48:1e:c4:3a:a7:47:19:d6:f7:ac:8e:0c:
         6c:93:4e:6f:fb:9f:de:53:b4:ac:17:7d:8d:df:49:75:fe:e4:
         5d:02:ae:b2:08:18:be:e9:e9:ab:ed:62:cb:0a:8f:4c:ad:e1:
         72:f0:9b:9b:58:f8:06:1b:9d:f8:7e:6f:ca:83:0b:7f:30:3f:
         8c:bd:28:45:c3:e5:ce:2e:c8:9f:3c:cc:ac:af:30:66:e1:cb:
         dd:4c:6c:aa:b7:c9:1a:9c:f7:c9:4b:16:d8:2a:75:28:39:86:
         52:e0:4c:ed:40:9e:03:c4:87:78:1a:d6:a1:2b:67:e2:19:aa:
         6a:39:dc:3e:90:ea:e4:68:75:d1:68:e9:80:55:52:b0:ce:5f:
         16:c8:6e:d5:fb:45:50:cf:0c:0d:6a:59:ef:e7:d7:4c:87:2a:
         b5:1b:31:d5:f1:29:e3:d4:43:f9:08:f5:d7:cc:ca:62:6d:00:
         3f:83:0e:57:f3:f7:f8:f0:0d:24:8a:16:0b:ba:99:ae:9b:ab:
         c2:aa:80:7c:b2:a6:fb:d9:22:ec:a5:bc:6d:eb:aa:07:ad:93:
         04:bd:78:98:31:a9:95:cd:43:fd:f9:fd:51:d6:4e:d3:27:d8:
         61:46:d2:f3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUb0WFInJbg+VvqCKcX5DJZl88XoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQxNkJERTg5ODI2NjFDMDcxNUJBMEFERjI2MkY4M0VC
NDlGMTM4MTAeFw0yMzEyMTMxMjMzMDRaFw0yNDEyMTExMjM4MDRaMDMxMTAvBgNV
BAMTKDEwM0IzOEM5MUM2RjE3QzczNUY0QTM4MUZFQjk1MDM3MkNERDUxM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICNK0zLPzBDRkfNc1sXxIPDs0
9K8fZDNiqlYEGsifz/XA9MPIywC/C44iviXcRB45LaNHbKG32tlMMnDQN7u31EvE
DtH8TqRq+ldq1kNOMsrtcWFGJoOXb8QbDGfU+NCiXS9ffu10yodgpX/gFyjdQhTD
0dUwxDH0MR4hZSeAMv41koZ5tk0Pnb9ijCjRvomq3FvpxI/Rcv0TUllt8E2tW/lN
Uu3KoUsV/gjRQ263I9EcIP+EYlfL3h6l66UUhANpafveNSCfkg5fr1YivkRGt147
ZCtrQ7IeYhLvMYZy918Ks/0lPUJfZM6b86kgyNSwF/wBi9usMi9ATGjerlkzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUEDs4yRxvF8c19KOB/rlQNyzdUTswHwYDVR0j
BBgwFoAUdBa96JgmYcBxW6Ct8mL4PrSfE4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODN1amdnd3lhSlVFRzJLcHA0d0toNmZCZ0J5WDJOUDVHVlQ1cUoxUDdL
QVAvMS83NDE2QkRFODk4MjY2MUMwNzE1QkEwQURGMjYyRjgzRUI0OUYxMzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc0MTZCREU4OTgyNjYxQzA3
MTVCQTBBREYyNjJGODNFQjQ5RjEzODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgzdWpnZ3d5YUpVRUcyS3BwNHdLaDZmQmdCeVgyTlA1R1ZUNXFKMVA3S0FQLzEv
MzIzODMwMzQzYTMyMzM2NjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzEzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQj8DANBgkqhkiG9w0BAQsFAAOCAQEAyb71K0ma
keNZuSaHfdlIDl6LCvi6AQX4SB7EOqdHGdb3rI4MbJNOb/uf3lO0rBd9jd9Jdf7k
XQKusggYvunpq+1iywqPTK3hcvCbm1j4Bhud+H5vyoMLfzA/jL0oRcPlzi7InzzM
rK8wZuHL3UxsqrfJGpz3yUsW2Cp1KDmGUuBM7UCeA8SHeBrWoStn4hmqajncPpDq
5Gh10WjpgFVSsM5fFshu1ftFUM8MDWpZ7+fXTIcqtRsx1fEp49RD+Qj118zKYm0A
P4MOV/P3+PANJIoWC7qZrpurwqqAfLKm+9ki7KW8beuqB62TBL14mDGplc1D/fn9
UdZO0yfYYUbS8w==
-----END CERTIFICATE-----