Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/323830343a3261343a3a2f33322d3332203d3e20323632383238.roa
File:                     323830343a3261343a3a2f33322d3332203d3e20323632383238.roa (raw, json)
Hash identifier:          kfw3+UR3KEkki1oxp8TLYLmF44TPuF8vrddECsfL9ro=
Subject key identifier:   B0:37:3B:0C:3F:26:3D:00:BC:CA:60:BD:40:E2:AE:5E:D3:29:2F:A2
Certificate issuer:       /CN=01DF0AF769A4EA9A0AC3400D592025A2B8132742
Certificate serial:       7009A9098DC5301DB36EF9EB2B66826BBA9F56F6
Authority key identifier: 01:DF:0A:F7:69:A4:EA:9A:0A:C3:40:0D:59:20:25:A2:B8:13:27:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01DF0AF769A4EA9A0AC3400D592025A2B8132742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/323830343a3261343a3a2f33322d3332203d3e20323632383238.roa
Signing time:             Mon 30 Jan 2023 11:35:47 +0000
ROA not before:           Mon 30 Jan 2023 11:30:47 +0000
ROA not after:            Mon 29 Jan 2024 11:35:47 +0000
asID:                     262828
IP address blocks:        2804:2a4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:09:a9:09:8d:c5:30:1d:b3:6e:f9:eb:2b:66:82:6b:ba:9f:56:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DF0AF769A4EA9A0AC3400D592025A2B8132742
        Validity
            Not Before: Jan 30 11:30:47 2023 GMT
            Not After : Jan 29 11:35:47 2024 GMT
        Subject: CN=B0373B0C3F263D00BCCA60BD40E2AE5ED3292FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:f9:30:1f:d2:8b:2b:14:d5:fe:f1:76:9e:
                    58:87:11:de:cb:d6:69:4f:28:31:8a:90:fb:bd:48:
                    50:4f:48:3a:0c:fb:03:7a:b5:cf:c9:48:61:cc:9c:
                    a3:70:68:f4:e4:3c:33:e8:d7:92:67:f4:ea:8e:e0:
                    f5:2e:25:62:a6:92:7d:2e:a5:cd:2d:82:9d:40:1e:
                    4d:45:27:69:f4:ed:a6:9e:e6:53:e3:2a:f9:56:65:
                    7a:26:98:77:da:22:9c:97:5c:2e:fe:96:aa:c0:85:
                    38:a5:81:85:8c:d1:3d:2b:7a:84:56:8d:67:48:86:
                    ed:31:2e:a6:29:f4:52:d5:ef:e4:f1:6b:69:17:f1:
                    de:18:bb:57:44:a9:c1:90:c0:db:92:ba:7e:f1:d3:
                    ce:3f:c3:84:8a:1c:e8:88:9f:41:b0:b7:59:84:71:
                    25:75:9a:05:78:25:d1:36:7d:74:ce:d9:c8:0a:22:
                    a2:a9:8c:0c:d5:dd:f6:8c:3a:70:83:e3:02:4d:0c:
                    97:28:e0:6e:c5:14:07:15:71:7f:9c:ce:86:db:29:
                    04:7d:60:f9:cd:8c:8c:c7:6d:74:ae:82:3e:e5:15:
                    de:65:6c:04:69:8f:41:3f:6a:39:f2:b1:a9:01:6a:
                    98:45:4f:cc:8b:be:cb:09:be:77:53:67:b7:84:e0:
                    1f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:37:3B:0C:3F:26:3D:00:BC:CA:60:BD:40:E2:AE:5E:D3:29:2F:A2
            X509v3 Authority Key Identifier:
                keyid:01:DF:0A:F7:69:A4:EA:9A:0A:C3:40:0D:59:20:25:A2:B8:13:27:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/01DF0AF769A4EA9A0AC3400D592025A2B8132742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01DF0AF769A4EA9A0AC3400D592025A2B8132742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/323830343a3261343a3a2f33322d3332203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:5a:0d:56:1c:b8:cc:46:ae:a0:ab:76:ec:17:d7:3f:61:57:
         70:65:3e:67:98:f3:1a:fc:1d:d3:fb:b6:c5:a3:2b:36:02:de:
         4f:f2:2c:77:f4:f5:dc:75:55:67:d9:b8:29:13:ce:d0:80:3c:
         3b:a1:ac:f0:65:c1:55:04:06:02:7a:08:5d:cb:cb:f0:ce:a2:
         1c:ae:00:e1:2d:f1:5c:0f:cb:f5:3a:bd:e2:7f:20:2f:56:79:
         36:b7:0c:dd:89:8c:c0:e1:b8:dd:ae:27:c8:c0:85:e4:a7:bd:
         1a:f8:a7:6b:e5:38:e5:36:5b:ae:fe:ae:e6:cf:5e:05:46:64:
         4d:43:57:ed:ad:5c:f4:9d:f2:f2:d2:78:d1:cc:e5:b1:49:0a:
         5c:9f:02:bb:43:7f:b0:f6:0d:11:58:8e:c5:eb:14:f6:a1:b3:
         e2:ac:bf:27:ee:c3:29:3b:85:8a:6f:9b:7d:c1:64:98:fb:52:
         0e:11:a0:49:2b:a6:7e:1d:f8:82:b1:c0:f9:c7:64:73:a4:b7:
         6f:e5:56:04:7b:7d:f3:00:96:b5:2d:00:53:d8:9c:b0:97:60:
         3d:a2:bd:a2:c0:7a:91:e6:64:55:12:61:d2:f6:06:bf:be:06:
         3a:15:72:a8:31:bf:ec:10:32:22:89:7f:c9:01:1a:d9:ca:51:
         17:92:d2:a9
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUcAmpCY3FMB2zbvnrK2aCa7qfVvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFERjBBRjc2OUE0RUE5QTBBQzM0MDBENTkyMDI1QTJC
ODEzMjc0MjAeFw0yMzAxMzAxMTMwNDdaFw0yNDAxMjkxMTM1NDdaMDMxMTAvBgNV
BAMTKEIwMzczQjBDM0YyNjNEMDBCQ0NBNjBCRDQwRTJBRTVFRDMyOTJGQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0/kwH9KLKxTV/vF2nliHEd7L
1mlPKDGKkPu9SFBPSDoM+wN6tc/JSGHMnKNwaPTkPDPo15Jn9OqO4PUuJWKmkn0u
pc0tgp1AHk1FJ2n07aae5lPjKvlWZXommHfaIpyXXC7+lqrAhTilgYWM0T0reoRW
jWdIhu0xLqYp9FLV7+Txa2kX8d4Yu1dEqcGQwNuSun7x084/w4SKHOiIn0Gwt1mE
cSV1mgV4JdE2fXTO2cgKIqKpjAzV3faMOnCD4wJNDJco4G7FFAcVcX+czobbKQR9
YPnNjIzHbXSugj7lFd5lbARpj0E/ajnysakBaphFT8yLvssJvndTZ7eE4B9JAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUsDc7DD8mPQC8ymC9QOKuXtMpL6IwHwYDVR0j
BBgwFoAUAd8K92mk6poKw0ANWSAlorgTJ0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZGWDVzRUp5UTdVZU5SeXRwdTdjODFLdDhYZ0RwN1NyTk1tU0xVZlEx
OGYvMC8wMURGMEFGNzY5QTRFQTlBMEFDMzQwMEQ1OTIwMjVBMkI4MTMyNzQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAxREYwQUY3NjlBNEVBOUEw
QUMzNDAwRDU5MjAyNUEyQjgxMzI3NDIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGRlg1c0VKeVE3VWVOUnl0cHU3YzgxS3Q4WGdEcDdTck5NbVNMVWZRMThmLzAv
MzIzODMwMzQzYTMyNjEzNDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM4
MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEAqQwDQYJKoZIhvcNAQELBQADggEBAHNaDVYcuMxG
rqCrduwX1z9hV3BlPmeY8xr8HdP7tsWjKzYC3k/yLHf09dx1VWfZuCkTztCAPDuh
rPBlwVUEBgJ6CF3Ly/DOohyuAOEt8VwPy/U6veJ/IC9WeTa3DN2JjMDhuN2uJ8jA
heSnvRr4p2vlOOU2W67+rubPXgVGZE1DV+2tXPSd8vLSeNHM5bFJClyfArtDf7D2
DRFYjsXrFPahs+Ksvyfuwyk7hYpvm33BZJj7Ug4RoEkrpn4d+IKxwPnHZHOkt2/l
VgR7ffMAlrUtAFPYnLCXYD2ivaLAepHmZFUSYdL2Br++BjoVcqgxv+wQMiKJf8kB
GtnKUReS0qk=
-----END CERTIFICATE-----