Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/323830343a326532633a3a2f33322d3438203d3e20323635333239.roa
File:                     323830343a326532633a3a2f33322d3438203d3e20323635333239.roa (raw, json)
Hash identifier:          IoSbmzgv9i6A1waIfh3N6iCWIZg5rIE9Ql4zTnp9Xag=
Subject key identifier:   FF:70:0E:E0:50:EE:4B:2B:BB:54:1A:ED:D4:51:E1:D8:48:6D:5C:67
Certificate issuer:       /CN=4481A27D53C172F7D6C4614493892E9919009470
Certificate serial:       38F3AF21903847B4FA09FD303C5D0C6CF2F73E85
Authority key identifier: 44:81:A2:7D:53:C1:72:F7:D6:C4:61:44:93:89:2E:99:19:00:94:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4481A27D53C172F7D6C4614493892E9919009470.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/323830343a326532633a3a2f33322d3438203d3e20323635333239.roa
Signing time:             Wed 30 Mar 2022 17:45:43 +0000
ROA not before:           Wed 30 Mar 2022 17:40:43 +0000
ROA not after:            Wed 29 Mar 2023 17:45:43 +0000
asID:                     265329
IP address blocks:        2804:2e2c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f3:af:21:90:38:47:b4:fa:09:fd:30:3c:5d:0c:6c:f2:f7:3e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4481A27D53C172F7D6C4614493892E9919009470
        Validity
            Not Before: Mar 30 17:40:43 2022 GMT
            Not After : Mar 29 17:45:43 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:ae:fa:33:73:f4:15:2f:97:71:a2:3d:63:
                    72:e8:12:68:63:c5:9c:f3:a3:0a:1d:99:e6:f9:81:
                    9b:62:41:81:43:f7:ba:ff:f8:45:25:7e:f2:54:a1:
                    63:17:96:4e:dc:0d:c2:ef:7f:4d:fc:ef:73:b1:2d:
                    1e:db:1f:d1:30:13:d1:ff:f1:df:33:f1:87:64:59:
                    7b:f9:1d:f5:9b:8b:c7:f5:86:d9:c1:da:ac:35:9d:
                    57:27:69:7a:a8:2b:7d:f4:22:e3:83:c2:0e:f5:90:
                    93:69:79:d7:90:dc:8e:cb:4b:59:f4:52:38:2e:df:
                    cd:b1:9e:c2:b2:d9:73:a9:89:a5:6b:61:e9:2e:71:
                    1d:fb:de:ec:e0:06:c3:93:0d:de:46:77:ef:1c:4a:
                    2a:3e:14:b7:ff:a3:a6:d1:dc:1e:e0:d5:f1:31:69:
                    df:1e:66:3a:bf:9a:6b:8f:1a:31:7b:cf:f8:13:e7:
                    5f:20:9a:2f:e6:fb:aa:bd:96:3b:dd:07:46:38:29:
                    06:9b:bf:fe:76:5c:39:e7:af:8b:19:57:fc:e1:db:
                    5c:1c:6d:b8:05:3d:6e:8b:1e:8a:f2:62:22:6b:5c:
                    7a:5d:be:69:f1:5f:43:ac:40:e6:28:ac:14:24:a9:
                    d9:0b:ae:03:e3:a5:6e:a1:73:71:93:cb:e6:0e:db:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:70:0E:E0:50:EE:4B:2B:BB:54:1A:ED:D4:51:E1:D8:48:6D:5C:67
            X509v3 Authority Key Identifier:
                keyid:44:81:A2:7D:53:C1:72:F7:D6:C4:61:44:93:89:2E:99:19:00:94:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/4481A27D53C172F7D6C4614493892E9919009470.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4481A27D53C172F7D6C4614493892E9919009470.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/323830343a326532633a3a2f33322d3438203d3e20323635333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:29:bb:05:de:69:bd:71:d7:1e:4e:20:c8:da:61:b1:4f:1f:
         2d:66:74:1b:fd:3b:a5:87:d5:0f:e2:1e:8c:9d:f7:11:d9:1a:
         be:d4:a1:8f:dd:ef:5e:70:9c:04:e4:82:e2:9c:dc:49:a9:ed:
         2b:ff:86:de:55:f2:93:70:e7:48:33:09:9e:35:61:0f:13:18:
         18:58:a9:85:60:a8:a3:f4:90:9a:5f:e9:c9:07:18:72:18:13:
         06:92:4d:ea:3e:d5:2a:3d:ab:b1:53:b4:6c:7d:58:64:1d:9c:
         cb:13:01:ec:3b:9a:c9:34:4c:d1:74:3c:68:04:44:24:8c:3b:
         45:35:d0:52:65:93:5c:d4:6b:d5:01:53:2f:b3:3e:7f:fc:80:
         70:86:fb:cd:6b:3e:b2:6d:2a:9a:39:08:c5:23:a2:14:03:0b:
         f5:ed:06:73:7a:b4:71:01:7d:15:92:1c:58:83:33:df:0f:04:
         8a:d6:2d:1a:2b:e4:9f:5e:8d:9c:30:13:4e:77:31:6c:45:58:
         46:21:17:56:f5:00:9c:2f:51:bc:04:83:3d:ea:50:4b:3d:14:
         bc:6f:b0:cc:6c:dd:2c:ab:b5:98:c1:14:ac:6b:b8:6f:73:0c:
         b1:e9:20:1a:f3:2e:2a:7f:b4:da:4b:de:f1:1f:42:36:a9:d2:
         ec:4e:68:d8
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUOPOvIZA4R7T6Cf0wPF0MbPL3PoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ4MUEyN0Q1M0MxNzJGN0Q2QzQ2MTQ0OTM4OTJFOTkx
OTAwOTQ3MDAeFw0yMjAzMzAxNzQwNDNaFw0yMzAzMjkxNzQ1NDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTM4QUFFRkEzMzczRjQxNTJG
OTc3MUEyM0Q2MzcyRTgxMjY4NjNDNTlDRjNBMzBBMUQ5OUU2Rjk4MTlCNjI0MTgx
NDNGN0JBRkZGODQ1MjU3RUYyNTRBMTYzMTc5NjRFREMwREMyRUY3RjRERkNFRjcz
QjEyRDFFREIxRkQxMzAxM0QxRkZGMURGMzNGMTg3NjQ1OTdCRjkxREY1OUI4QkM3
RjU4NkQ5QzFEQUFDMzU5RDU3Mjc2OTdBQTgyQjdERjQyMkUzODNDMjBFRjU5MDkz
Njk3OUQ3OTBEQzhFQ0I0QjU5RjQ1MjM4MkVERkNEQjE5RUMyQjJEOTczQTk4OUE1
NkI2MUU5MkU3MTFERkJERUVDRTAwNkMzOTMwRERFNDY3N0VGMUM0QTJBM0UxNEI3
RkZBM0E2RDFEQzFFRTBENUYxMzE2OURGMUU2NjNBQkY5QTZCOEYxQTMxN0JDRkY4
MTNFNzVGMjA5QTJGRTZGQkFBQkQ5NjNCREQwNzQ2MzgyOTA2OUJCRkZFNzY1QzM5
RTdBRjhCMTk1N0ZDRTFEQjVDMUM2REI4MDUzRDZFOEIxRThBRjI2MjIyNkI1QzdB
NURCRTY5RjE1RjQzQUM0MEU2MjhBQzE0MjRBOUQ5MEJBRTAzRTNBNTZFQTE3Mzcx
OTNDQkU2MEVEQjIwQjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAo4qu+jNz9BUvl3GiPWNy6BJoY8Wc86MKHZnm+YGbYkGBQ/e6//hF
JX7yVKFjF5ZO3A3C739N/O9zsS0e2x/RMBPR//HfM/GHZFl7+R31m4vH9YbZwdqs
NZ1XJ2l6qCt99CLjg8IO9ZCTaXnXkNyOy0tZ9FI4Lt/NsZ7CstlzqYmla2HpLnEd
+97s4AbDkw3eRnfvHEoqPhS3/6Om0dwe4NXxMWnfHmY6v5prjxoxe8/4E+dfIJov
5vuqvZY73QdGOCkGm7/+dlw556+LGVf84dtcHG24BT1uix6K8mIia1x6Xb5p8V9D
rEDmKKwUJKnZC64D46VuoXNxk8vmDtsgswIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FP9wDuBQ7ksru1Qa7dRR4dhIbVxnMB8GA1UdIwQYMBaAFESBon1TwXL31sRhRJOJ
LpkZAJRwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhtTjVFNEdRUXRYUHpu
OEpKOG9OU1k1bzNka1EyUGJFbkVzVnl1WGpzQ0JRLzAvNDQ4MUEyN0Q1M0MxNzJG
N0Q2QzQ2MTQ0OTM4OTJFOTkxOTAwOTQ3MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80NDgxQTI3RDUzQzE3MkY3RDZDNDYxNDQ5Mzg5MkU5OTE5MDA5
NDcwLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84bU41RTRHUVF0WFB6bjhKSjhv
TlNZNW8zZGtRMlBiRW5Fc1Z5dVhqc0NCUS8wLzMyMzgzMDM0M2EzMjY1MzI2MzNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNTMzMzIzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
LiwwDQYJKoZIhvcNAQELBQADggEBAH4puwXeab1x1x5OIMjaYbFPHy1mdBv9O6WH
1Q/iHoyd9xHZGr7UoY/d715wnATkguKc3Emp7Sv/ht5V8pNw50gzCZ41YQ8TGBhY
qYVgqKP0kJpf6ckHGHIYEwaSTeo+1So9q7FTtGx9WGQdnMsTAew7msk0TNF0PGgE
RCSMO0U10FJlk1zUa9UBUy+zPn/8gHCG+81rPrJtKpo5CMUjohQDC/XtBnN6tHEB
fRWSHFiDM98PBIrWLRor5J9ejZwwE053MWxFWEYhF1b1AJwvUbwEgz3qUEs9FLxv
sMxs3SyrtZjBFKxruG9zDLHpIBrzLip/tNpL3vEfQjap0uxOaNg=
-----END CERTIFICATE-----