Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/323830343a323230303a3a2f33322d3332203d3e20323634353835.roa
File:                     323830343a323230303a3a2f33322d3332203d3e20323634353835.roa (raw, json)
Hash identifier:          BBYHZzVJBMEuL+W+JYQJALJFA+PI9PR2Z2O1QGfIg48=
Subject key identifier:   EF:3A:8B:F2:35:41:78:03:FA:E7:FA:F2:1B:8B:F0:43:32:F4:FE:8E
Certificate issuer:       /CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
Certificate serial:       3B39AAD0881CA27BD6C985AF24FB36C9208C43EF
Authority key identifier: BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/323830343a323230303a3a2f33322d3332203d3e20323634353835.roa
Signing time:             Tue 22 Aug 2023 18:22:49 +0000
ROA not before:           Tue 22 Aug 2023 18:17:49 +0000
ROA not after:            Tue 20 Aug 2024 18:22:49 +0000
asID:                     264585
IP address blocks:        2804:2200::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:39:aa:d0:88:1c:a2:7b:d6:c9:85:af:24:fb:36:c9:20:8c:43:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
        Validity
            Not Before: Aug 22 18:17:49 2023 GMT
            Not After : Aug 20 18:22:49 2024 GMT
        Subject: CN=EF3A8BF235417803FAE7FAF21B8BF04332F4FE8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:22:e3:ce:10:96:9b:dd:21:23:d0:59:bd:
                    8a:bb:45:f1:1a:c7:f2:10:bf:6f:8d:d1:bb:57:84:
                    04:10:06:92:29:88:a9:2e:f4:16:3d:e7:7f:77:bf:
                    15:7b:9f:f3:9f:36:0d:98:98:69:59:83:80:24:dd:
                    ff:a0:f9:87:fb:8b:43:a5:42:5a:a7:a9:a2:51:b5:
                    08:55:04:7f:af:3c:0f:36:24:94:92:af:01:30:ea:
                    a5:1e:6d:f1:a4:88:24:e3:5f:e8:d9:f2:22:27:7c:
                    a0:e5:5a:f3:da:bd:65:5f:eb:85:7e:06:c7:49:86:
                    8e:fc:b3:15:6d:61:8f:5f:54:36:ed:50:80:0c:b4:
                    d5:84:8e:14:35:13:52:27:e4:46:60:69:d0:29:58:
                    3d:34:32:59:43:77:b4:95:78:23:cc:de:e7:59:dd:
                    f7:04:09:01:ad:18:1c:2c:3c:7e:7e:ae:5c:97:58:
                    7e:2e:e9:0e:04:d3:0f:53:9b:be:22:a0:d4:d0:5d:
                    06:2c:9e:ee:c3:a9:fb:4d:38:45:15:22:f1:6d:fd:
                    28:93:4d:47:a0:61:ca:99:a5:40:da:7f:6f:f0:cb:
                    f8:f6:83:42:59:06:0d:36:cc:66:ef:2d:0b:29:67:
                    eb:67:cd:1a:c4:f4:ae:b9:53:3e:78:0b:67:c7:ac:
                    ec:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3A:8B:F2:35:41:78:03:FA:E7:FA:F2:1B:8B:F0:43:32:F4:FE:8E
            X509v3 Authority Key Identifier:
                keyid:BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/323830343a323230303a3a2f33322d3332203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2200::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:4a:1f:9b:17:d2:fc:95:cb:9a:e3:dd:da:b3:60:87:11:f0:
         cf:fc:6f:08:e2:1c:ce:44:6b:1f:3a:bd:da:b9:a1:7f:29:e7:
         42:60:af:ec:a4:c6:b7:c7:c7:d3:12:84:de:e3:2f:bd:24:e7:
         62:a5:c6:ec:ae:93:b1:ea:d6:51:18:37:48:75:5d:ae:91:18:
         1c:19:a7:ff:fc:76:15:85:b3:69:8d:87:03:55:d2:19:9a:c4:
         f9:48:db:fd:99:03:0a:b4:c9:e2:8c:31:55:05:a9:bd:c9:68:
         3c:2f:e3:23:ab:0d:81:8c:3b:90:34:31:e2:9e:55:35:8c:f1:
         a9:d5:62:4b:7f:b0:17:8b:3b:55:9e:63:bd:d8:68:d2:74:a6:
         96:45:e4:0c:c2:75:9c:b3:de:f0:ea:2c:43:63:13:a4:6f:b5:
         3f:18:a7:47:b4:fe:9e:bc:3f:10:27:95:b3:b1:93:fc:9d:d2:
         35:5a:72:7c:bd:87:42:d0:de:2d:c2:3c:91:6a:5b:5b:f0:86:
         08:b9:9b:4c:07:92:e0:61:e8:53:be:0d:28:56:47:e0:09:56:
         7d:39:cc:2b:55:4d:a9:05:db:20:18:61:61:b4:e1:a6:fa:9d:
         c3:37:49:46:b2:95:0e:78:6c:c0:03:1d:10:f0:12:5d:2f:8c:
         46:82:cb:c3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOzmq0IgconvWyYWvJPs2ySCMQ+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM2MDFFODhFRkI5MTVFRUZCOTM4RjVFRUUxNkQwOEI4
REVCRkQwMDAeFw0yMzA4MjIxODE3NDlaFw0yNDA4MjAxODIyNDlaMDMxMTAvBgNV
BAMTKEVGM0E4QkYyMzU0MTc4MDNGQUU3RkFGMjFCOEJGMDQzMzJGNEZFOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VCLjzhCWm90hI9BZvYq7RfEa
x/IQv2+N0btXhAQQBpIpiKku9BY95393vxV7n/OfNg2YmGlZg4Ak3f+g+Yf7i0Ol
QlqnqaJRtQhVBH+vPA82JJSSrwEw6qUebfGkiCTjX+jZ8iInfKDlWvPavWVf64V+
BsdJho78sxVtYY9fVDbtUIAMtNWEjhQ1E1In5EZgadApWD00MllDd7SVeCPM3udZ
3fcECQGtGBwsPH5+rlyXWH4u6Q4E0w9Tm74ioNTQXQYsnu7DqftNOEUVIvFt/SiT
TUegYcqZpUDaf2/wy/j2g0JZBg02zGbvLQspZ+tnzRrE9K65Uz54C2fHrOyhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU7zqL8jVBeAP65/ryG4vwQzL0/o4wHwYDVR0j
BBgwFoAUvGAeiO+5Fe77k49e7hbQi43r/QAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUo4eEpkaE5YSFlwWFFuemFod0x6eGdIUlc3N2d5OHgzYXp6eWRRQ2J3
NDMvMC9CQzYwMUU4OEVGQjkxNUVFRkI5MzhGNUVFRTE2RDA4QjhERUJGRDAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JDNjAxRTg4RUZCOTE1RUVG
QjkzOEY1RUVFMTZEMDhCOERFQkZEMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKOHhKZGhOWEhZcFhRbnphaHdMenhnSFJXNzdneTh4M2F6enlkUUNidzQzLzAv
MzIzODMwMzQzYTMyMzIzMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzUzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQiADANBgkqhkiG9w0BAQsFAAOCAQEAgUofmxfS
/JXLmuPd2rNghxHwz/xvCOIczkRrHzq92rmhfynnQmCv7KTGt8fH0xKE3uMvvSTn
YqXG7K6TserWURg3SHVdrpEYHBmn//x2FYWzaY2HA1XSGZrE+Ujb/ZkDCrTJ4owx
VQWpvcloPC/jI6sNgYw7kDQx4p5VNYzxqdViS3+wF4s7VZ5jvdho0nSmlkXkDMJ1
nLPe8OosQ2MTpG+1PxinR7T+nrw/ECeVs7GT/J3SNVpyfL2HQtDeLcI8kWpbW/CG
CLmbTAeS4GHoU74NKFZH4AlWfTnMK1VNqQXbIBhhYbThpvqdwzdJRrKVDnhswAMd
EPASXS+MRoLLww==
-----END CERTIFICATE-----