Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/323830343a353737633a3a2f33322d3332203d3e20323638303638.roa
File:                     323830343a353737633a3a2f33322d3332203d3e20323638303638.roa (raw, json)
Hash identifier:          /B3QQcAVei5NQcRdRjhrKsOH8KltWlbky2nOKESDhnA=
Subject key identifier:   88:52:AC:5F:06:9A:14:B4:67:14:36:B5:50:04:DE:E7:1B:AC:DC:27
Certificate issuer:       /CN=BAEE190B65B2228090D515B7CF62B6AEAC2F5270
Certificate serial:       3E792712B099A8CB296C0D80D3CE5A4D8ADB8750
Authority key identifier: BA:EE:19:0B:65:B2:22:80:90:D5:15:B7:CF:62:B6:AE:AC:2F:52:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/323830343a353737633a3a2f33322d3332203d3e20323638303638.roa
Signing time:             Wed 17 May 2023 14:41:55 +0000
ROA not before:           Wed 17 May 2023 14:36:55 +0000
ROA not after:            Wed 15 May 2024 14:41:55 +0000
asID:                     268068
IP address blocks:        2804:577c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:79:27:12:b0:99:a8:cb:29:6c:0d:80:d3:ce:5a:4d:8a:db:87:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAEE190B65B2228090D515B7CF62B6AEAC2F5270
        Validity
            Not Before: May 17 14:36:55 2023 GMT
            Not After : May 15 14:41:55 2024 GMT
        Subject: CN=8852AC5F069A14B4671436B55004DEE71BACDC27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:ed:48:a2:69:51:d6:90:f6:47:de:5e:f5:
                    f2:ef:a5:67:f4:fa:5c:72:1a:87:5b:17:61:92:8c:
                    50:c2:5b:2a:6a:7b:a5:fc:9d:31:30:38:4b:dc:46:
                    0a:f8:5f:82:43:f3:95:35:82:6f:69:9e:e7:3c:77:
                    d4:26:ae:e9:9e:15:81:c3:c0:cb:a9:f2:7d:63:4e:
                    0f:4c:00:09:24:dc:59:e1:17:74:d9:7e:65:fb:ce:
                    93:8b:7f:dd:21:b4:ff:d3:9f:37:63:c4:d8:4f:72:
                    3c:bb:41:c8:5b:fc:ef:6e:11:20:2d:43:32:10:bc:
                    8d:3b:15:ee:fe:a4:c0:11:36:38:cd:92:61:a1:84:
                    44:75:a8:72:54:1b:ec:cb:65:8e:a7:34:6b:1c:3d:
                    0f:cc:13:b9:fb:23:bf:24:79:84:3b:0c:d4:cc:a1:
                    d7:bf:f3:8b:f8:e4:d8:ac:bc:42:bd:f5:e7:fa:1d:
                    99:6d:55:c7:50:73:ca:b0:8a:35:7f:92:c5:a7:96:
                    6f:e3:a4:e0:47:ce:f3:3f:87:91:80:46:88:9d:19:
                    c6:e2:f3:a4:eb:b9:ca:69:92:a9:ec:75:6a:74:94:
                    80:7c:90:05:e0:6e:7a:c0:39:4c:29:50:40:6e:3e:
                    ef:86:b4:bc:3f:e4:f4:92:b7:d3:27:65:be:cb:72:
                    27:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:52:AC:5F:06:9A:14:B4:67:14:36:B5:50:04:DE:E7:1B:AC:DC:27
            X509v3 Authority Key Identifier:
                keyid:BA:EE:19:0B:65:B2:22:80:90:D5:15:B7:CF:62:B6:AE:AC:2F:52:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/323830343a353737633a3a2f33322d3332203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:577c::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:9b:b1:66:aa:8c:e2:78:c9:32:e0:6a:92:00:f3:3c:b7:9f:
         39:5b:4a:ad:8a:06:9c:c1:41:7a:fe:af:b1:50:f5:cb:42:db:
         c0:69:37:d4:05:0f:97:c4:fb:ca:72:55:0e:d2:07:a3:a0:2c:
         64:f3:9a:bc:ae:29:62:c8:4e:c9:f3:f1:ad:2c:12:59:42:90:
         bc:ce:c7:d1:1a:24:04:6f:12:f8:02:41:08:b4:56:d3:83:cb:
         6c:16:e7:d1:66:ab:09:93:4e:05:31:a2:28:e7:7e:fa:8c:f8:
         17:51:5a:40:bc:79:72:02:85:3c:54:0d:34:e8:ec:0f:e6:8e:
         ef:88:d4:92:cb:6a:f2:61:0d:aa:c0:53:8c:79:bd:68:d2:a2:
         78:4d:80:c7:27:58:db:25:fe:69:ef:f8:f1:7c:44:46:2b:c8:
         d6:f8:2b:7c:d1:04:a1:fc:dc:3a:94:c0:d5:6c:65:0e:c8:dc:
         6e:40:7a:60:48:be:91:48:f3:71:e7:81:e3:71:53:3e:fd:8e:
         b6:69:fe:b3:42:68:77:9c:f5:41:55:cb:44:29:5e:55:15:7f:
         66:4f:b1:4f:b7:0e:93:f4:f0:1c:4b:55:4a:78:2b:c7:40:60:
         14:c0:80:f0:ca:fd:be:25:db:b2:0f:56:b6:33:e3:56:63:71:
         3a:44:34:4a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPnknErCZqMspbA2A085aTYrbh1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFRTE5MEI2NUIyMjI4MDkwRDUxNUI3Q0Y2MkI2QUVB
QzJGNTI3MDAeFw0yMzA1MTcxNDM2NTVaFw0yNDA1MTUxNDQxNTVaMDMxMTAvBgNV
BAMTKDg4NTJBQzVGMDY5QTE0QjQ2NzE0MzZCNTUwMDRERUU3MUJBQ0RDMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3yO1IomlR1pD2R95e9fLvpWf0
+lxyGodbF2GSjFDCWypqe6X8nTEwOEvcRgr4X4JD85U1gm9pnuc8d9QmrumeFYHD
wMup8n1jTg9MAAkk3FnhF3TZfmX7zpOLf90htP/TnzdjxNhPcjy7Qchb/O9uESAt
QzIQvI07Fe7+pMARNjjNkmGhhER1qHJUG+zLZY6nNGscPQ/ME7n7I78keYQ7DNTM
ode/84v45NisvEK99ef6HZltVcdQc8qwijV/ksWnlm/jpOBHzvM/h5GARoidGcbi
86TrucppkqnsdWp0lIB8kAXgbnrAOUwpUEBuPu+GtLw/5PSSt9MnZb7Lcic1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUiFKsXwaaFLRnFDa1UATe5xus3CcwHwYDVR0j
BBgwFoAUuu4ZC2WyIoCQ1RW3z2K2rqwvUnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUVRUHJCbUtIVzJGZURHNkFiYlRRN1FYeFB6eXFpZXlrSjhlZXN1ZlZw
MTEvMC9CQUVFMTkwQjY1QjIyMjgwOTBENTE1QjdDRjYyQjZBRUFDMkY1MjcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JBRUUxOTBCNjVCMjIyODA5
MEQ1MTVCN0NGNjJCNkFFQUMyRjUyNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FFUVByQm1LSFcyRmVERzZBYmJUUTdRWHhQenlxaWV5a0o4ZWVzdWZWcDExLzAv
MzIzODMwMzQzYTM1MzczNzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzAzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARXfDANBgkqhkiG9w0BAQsFAAOCAQEAk5uxZqqM
4njJMuBqkgDzPLefOVtKrYoGnMFBev6vsVD1y0LbwGk31AUPl8T7ynJVDtIHo6As
ZPOavK4pYshOyfPxrSwSWUKQvM7H0RokBG8S+AJBCLRW04PLbBbn0WarCZNOBTGi
KOd++oz4F1FaQLx5cgKFPFQNNOjsD+aO74jUkstq8mENqsBTjHm9aNKieE2AxydY
2yX+ae/48XxERivI1vgrfNEEofzcOpTA1WxlDsjcbkB6YEi+kUjzceeB43FTPv2O
tmn+s0Jod5z1QVXLRCleVRV/Zk+xT7cOk/TwHEtVSngrx0BgFMCA8Mr9viXbsg9W
tjPjVmNxOkQ0Sg==
-----END CERTIFICATE-----