Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/0/323830343a343635633a3a2f33322d3438203d3e20323636393835.roa
File:                     323830343a343635633a3a2f33322d3438203d3e20323636393835.roa (raw, json)
Hash identifier:          8a16a/0bGDxIyh6F6T09SYEjALlJMbGMrQaR+JafGrs=
Subject key identifier:   1E:86:92:27:A1:5A:78:54:D9:E7:D2:83:F3:27:C5:BA:ED:0B:80:C1
Certificate issuer:       /CN=132226CC177EAE340BDB20C4FFCAAB0375FBF403
Certificate serial:       42DBB95586B50C74687C9EDFF2AC1CD753FF4D24
Authority key identifier: 13:22:26:CC:17:7E:AE:34:0B:DB:20:C4:FF:CA:AB:03:75:FB:F4:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/132226CC177EAE340BDB20C4FFCAAB0375FBF403.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/0/323830343a343635633a3a2f33322d3438203d3e20323636393835.roa
Signing time:             Fri 12 Nov 2021 01:31:42 +0000
ROA not before:           Fri 12 Nov 2021 01:26:42 +0000
ROA not after:            Fri 11 Nov 2022 01:31:42 +0000
asID:                     266985
IP address blocks:        2804:465c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:db:b9:55:86:b5:0c:74:68:7c:9e:df:f2:ac:1c:d7:53:ff:4d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132226CC177EAE340BDB20C4FFCAAB0375FBF403
        Validity
            Not Before: Nov 12 01:26:42 2021 GMT
            Not After : Nov 11 01:31:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:41:47:bd:7a:dc:e7:b6:a2:a6:69:ff:55:
                    a5:4c:e6:58:bf:6d:d5:5a:2f:14:cf:1b:f9:94:5e:
                    73:70:d2:88:89:e1:2d:65:d4:54:15:f9:ef:8c:21:
                    75:00:17:09:96:c3:a4:44:21:ec:a0:38:ec:88:46:
                    8c:d3:d8:bc:e6:43:9e:39:16:c0:1f:1f:29:7f:12:
                    e8:a4:db:54:c4:8c:35:8f:2b:50:ce:a6:47:e6:d3:
                    84:27:a2:3f:23:11:4c:2d:f9:83:3f:81:e4:96:b5:
                    0d:06:3e:fb:42:60:0f:6f:c0:f5:8d:ab:7f:9d:19:
                    ae:4a:de:d1:d6:9a:2d:69:99:82:83:61:14:16:c5:
                    a5:9e:09:ff:ae:13:e3:50:a2:57:bf:fb:4b:10:d7:
                    86:8e:31:fe:32:a4:43:32:f1:6e:8c:a6:d2:fc:cb:
                    a5:9b:3b:8e:22:ab:b5:0c:c9:fd:87:89:8f:b6:bd:
                    71:22:94:08:72:37:f7:cf:b2:2e:82:c9:b5:f0:c8:
                    07:6e:15:77:66:ff:a2:1d:00:dc:66:36:f8:c7:3c:
                    d7:ab:64:e9:58:03:f8:9b:c4:34:0b:07:4a:c1:51:
                    81:40:d9:96:f3:89:af:c2:e1:17:80:7a:dd:5f:e0:
                    57:7f:e0:17:1c:1e:25:63:fe:ce:65:48:c6:7d:82:
                    1a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:86:92:27:A1:5A:78:54:D9:E7:D2:83:F3:27:C5:BA:ED:0B:80:C1
            X509v3 Authority Key Identifier:
                keyid:13:22:26:CC:17:7E:AE:34:0B:DB:20:C4:FF:CA:AB:03:75:FB:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/0/132226CC177EAE340BDB20C4FFCAAB0375FBF403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/132226CC177EAE340BDB20C4FFCAAB0375FBF403.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/0/323830343a343635633a3a2f33322d3438203d3e20323636393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:465c::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:a9:9e:ef:71:17:1b:4a:9a:37:4e:85:e0:06:82:58:34:8b:
         0f:cc:9f:aa:f2:d1:56:23:b2:99:5b:cb:58:e8:e1:28:bf:58:
         da:c4:6c:c6:76:cd:4d:5c:c3:52:61:72:55:60:24:f5:6b:48:
         32:a7:de:bf:c8:e8:c2:cc:1e:04:81:5f:cf:37:bf:4f:d0:b0:
         26:12:2e:f5:35:01:60:4b:17:5c:f1:c1:b1:60:e4:5b:f4:9e:
         76:a7:b7:aa:93:6d:74:ff:c7:d4:f8:fe:07:07:ea:fe:b4:e6:
         69:a5:06:dd:a0:81:e1:ee:91:96:92:a9:95:ec:aa:3d:16:ae:
         6c:5b:10:e9:e6:f8:ad:11:48:35:a6:a4:7c:88:2a:b2:9a:36:
         f3:93:b3:e7:ff:ce:85:89:57:2d:f2:f5:4d:6c:66:96:98:bc:
         52:14:da:21:6d:ca:87:e5:32:81:f4:f1:4c:5f:38:e7:69:19:
         31:4a:2a:68:85:83:e7:af:b4:de:52:77:93:09:59:d6:3d:61:
         dc:21:2f:d0:6e:a9:9c:15:20:2b:48:9a:41:85:5d:44:3d:d3:
         40:12:34:da:6e:da:8b:54:57:ec:f8:1a:bd:6c:6f:5a:f3:66:
         2e:df:98:65:6e:b9:a4:48:f3:ee:67:1e:43:92:6d:33:57:41:
         b1:da:f0:29
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUQtu5VYa1DHRofJ7f8qwc11P/TSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMyMjI2Q0MxNzdFQUUzNDBCREIyMEM0RkZDQUFCMDM3
NUZCRjQwMzAeFw0yMTExMTIwMTI2NDJaFw0yMjExMTEwMTMxNDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQyQzQxNDdCRDdBRENFN0I2
QTJBNjY5RkY1NUE1NENFNjU4QkY2REQ1NUEyRjE0Q0YxQkY5OTQ1RTczNzBEMjg4
ODlFMTJENjVENDU0MTVGOUVGOEMyMTc1MDAxNzA5OTZDM0E0NDQyMUVDQTAzOEVD
ODg0NjhDRDNEOEJDRTY0MzlFMzkxNkMwMUYxRjI5N0YxMkU4QTREQjU0QzQ4QzM1
OEYyQjUwQ0VBNjQ3RTZEMzg0MjdBMjNGMjMxMTRDMkRGOTgzM0Y4MUU0OTZCNTBE
MDYzRUZCNDI2MDBGNkZDMEY1OERBQjdGOUQxOUFFNEFERUQxRDY5QTJENjk5OTgy
ODM2MTE0MTZDNUE1OUUwOUZGQUUxM0UzNTBBMjU3QkZGQjRCMTBENzg2OEUzMUZF
MzJBNDQzMzJGMTZFOENBNkQyRkNDQkE1OUIzQjhFMjJBQkI1MENDOUZEODc4OThG
QjZCRDcxMjI5NDA4NzIzN0Y3Q0ZCMjJFODJDOUI1RjBDODA3NkUxNTc3NjZGRkEy
MUQwMERDNjYzNkY4QzczQ0Q3QUI2NEU5NTgwM0Y4OUJDNDM0MEIwNzRBQzE1MTgx
NDBEOTk2RjM4OUFGQzJFMTE3ODA3QURENUZFMDU3N0ZFMDE3MUMxRTI1NjNGRUNF
NjU0OEM2N0Q4MjFBMDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxCxBR7163Oe2oqZp/1WlTOZYv23VWi8Uzxv5lF5zcNKIieEtZdRU
FfnvjCF1ABcJlsOkRCHsoDjsiEaM09i85kOeORbAHx8pfxLopNtUxIw1jytQzqZH
5tOEJ6I/IxFMLfmDP4HklrUNBj77QmAPb8D1jat/nRmuSt7R1potaZmCg2EUFsWl
ngn/rhPjUKJXv/tLENeGjjH+MqRDMvFujKbS/MulmzuOIqu1DMn9h4mPtr1xIpQI
cjf3z7Iugsm18MgHbhV3Zv+iHQDcZjb4xzzXq2TpWAP4m8Q0CwdKwVGBQNmW84mv
wuEXgHrdX+BXf+AXHB4lY/7OZUjGfYIaBQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FB6GkiehWnhU2efSg/MnxbrtC4DBMB8GA1UdIwQYMBaAFBMiJswXfq40C9sgxP/K
qwN1+/QDMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhZUWVONWtYU0o2aXFz
VlE0WVFDbXNKZTgxODFVell3Q0pzaFR0bmVDcHNSLzAvMTMyMjI2Q0MxNzdFQUUz
NDBCREIyMEM0RkZDQUFCMDM3NUZCRjQwMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xMzIyMjZDQzE3N0VBRTM0MEJEQjIwQzRGRkNBQUIwMzc1RkJG
NDAzLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84WVFlTjVrWFNKNmlxc1ZRNFlR
Q21zSmU4MTgxVXpZd0NKc2hUdG5lQ3BzUi8wLzMyMzgzMDM0M2EzNDM2MzU2MzNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjM5MzgzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
RlwwDQYJKoZIhvcNAQELBQADggEBAISpnu9xFxtKmjdOheAGglg0iw/Mn6ry0VYj
splby1jo4Si/WNrEbMZ2zU1cw1JhclVgJPVrSDKn3r/I6MLMHgSBX883v0/QsCYS
LvU1AWBLF1zxwbFg5Fv0nnant6qTbXT/x9T4/gcH6v605mmlBt2ggeHukZaSqZXs
qj0WrmxbEOnm+K0RSDWmpHyIKrKaNvOTs+f/zoWJVy3y9U1sZpaYvFIU2iFtyofl
MoH08UxfOOdpGTFKKmiFg+evtN5Sd5MJWdY9YdwhL9BuqZwVICtImkGFXUQ900AS
NNpu2otUV+z4Gr1sb1rzZi7fmGVuuaRI8+5nHkOSbTNXQbHa8Ck=
-----END CERTIFICATE-----