Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJ19P7X5tZefMHmVkUQc7EpgtjqaBVL8uMkqV6ZeSjZU/0/323830343a383364633a3a2f33322d313238203d3e20323732323235.roa
File:                     323830343a383364633a3a2f33322d313238203d3e20323732323235.roa (raw, json)
Hash identifier:          r1lI+Nxx835P5XOSTvR5gjpfgIojwm3NmkWuy+m5QJQ=
Subject key identifier:   C0:21:F6:C8:03:2A:4C:F1:9D:8A:BE:4E:93:E9:91:DB:FB:04:26:2A
Certificate issuer:       /CN=3EA80488C41EF08465D3E95FE2F8E110A0BA5B48
Certificate serial:       26FFC29867DB38F67E4F12B38B211AF981B6A587
Authority key identifier: 3E:A8:04:88:C4:1E:F0:84:65:D3:E9:5F:E2:F8:E1:10:A0:BA:5B:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EA80488C41EF08465D3E95FE2F8E110A0BA5B48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJ19P7X5tZefMHmVkUQc7EpgtjqaBVL8uMkqV6ZeSjZU/0/323830343a383364633a3a2f33322d313238203d3e20323732323235.roa
Signing time:             Sun 04 Jun 2023 19:41:26 +0000
ROA not before:           Sun 04 Jun 2023 19:36:26 +0000
ROA not after:            Sun 02 Jun 2024 19:41:26 +0000
asID:                     272225
IP address blocks:        2804:83dc::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ff:c2:98:67:db:38:f6:7e:4f:12:b3:8b:21:1a:f9:81:b6:a5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EA80488C41EF08465D3E95FE2F8E110A0BA5B48
        Validity
            Not Before: Jun  4 19:36:26 2023 GMT
            Not After : Jun  2 19:41:26 2024 GMT
        Subject: CN=C021F6C8032A4CF19D8ABE4E93E991DBFB04262A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:e9:87:64:05:76:fb:11:bb:e0:93:fb:8e:
                    0c:1f:50:86:75:32:20:0a:45:44:29:08:04:10:35:
                    a7:9c:5b:d5:04:02:ec:10:54:44:c1:d6:09:d3:6f:
                    90:d3:07:81:16:de:c9:28:ea:e2:c2:9e:2d:4d:f9:
                    ba:94:8f:c3:5a:5f:e0:98:18:a6:8a:10:9b:f0:97:
                    4a:78:98:4c:f5:dc:2f:6f:9d:ff:60:10:2b:d1:d5:
                    b5:1c:eb:90:63:56:7b:7c:65:8b:85:00:54:52:4e:
                    cf:a9:dc:33:b8:42:ef:e2:98:84:23:d8:23:87:f3:
                    73:f6:4b:1d:77:69:be:39:44:0a:f6:9d:a2:5d:c5:
                    1a:8c:1c:c4:8c:7c:9c:06:f9:ed:e2:4b:39:d6:cb:
                    be:fd:b4:8c:c1:cb:7b:22:5a:e4:f2:ec:6b:2e:3c:
                    d8:3b:cc:56:f3:de:e9:c1:de:01:6d:39:f8:c2:7d:
                    66:9d:b7:51:47:b5:d5:bb:7f:bb:d5:3f:e8:c9:b8:
                    49:0a:53:18:7e:a1:4d:d3:6d:13:9e:37:48:cb:f9:
                    17:94:8f:ab:44:ff:00:f5:11:00:a3:97:28:1e:fd:
                    1f:48:e4:9e:96:d9:96:f8:58:bf:e9:45:06:c4:f8:
                    04:68:a0:02:cd:b3:ba:c8:f1:fc:2c:b6:08:ca:24:
                    5b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:21:F6:C8:03:2A:4C:F1:9D:8A:BE:4E:93:E9:91:DB:FB:04:26:2A
            X509v3 Authority Key Identifier:
                keyid:3E:A8:04:88:C4:1E:F0:84:65:D3:E9:5F:E2:F8:E1:10:A0:BA:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJ19P7X5tZefMHmVkUQc7EpgtjqaBVL8uMkqV6ZeSjZU/0/3EA80488C41EF08465D3E95FE2F8E110A0BA5B48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EA80488C41EF08465D3E95FE2F8E110A0BA5B48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJ19P7X5tZefMHmVkUQc7EpgtjqaBVL8uMkqV6ZeSjZU/0/323830343a383364633a3a2f33322d313238203d3e20323732323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:50:53:69:eb:40:f9:11:fc:61:de:45:7d:a0:45:a5:a2:99:
         74:b4:82:e2:18:1e:92:fe:11:4b:d3:b6:14:60:40:38:9d:88:
         78:f2:61:47:b9:11:a6:02:c3:51:de:88:39:a7:5c:e6:72:b8:
         c7:72:fd:01:fa:42:b3:9a:08:34:87:6f:40:db:7b:8b:81:a2:
         4b:d4:c0:2f:bd:6d:9d:5f:65:e9:ea:eb:b0:52:5c:7f:97:ea:
         88:9c:4f:1d:d7:e6:bd:17:42:28:bc:06:9b:e5:b8:86:50:d0:
         47:83:b3:0a:0a:c6:7a:99:14:31:9f:b5:8a:fd:ae:6c:86:50:
         a3:36:71:9b:71:82:57:2f:91:1f:7e:28:d6:3d:d5:4e:fc:01:
         09:79:df:ae:40:92:be:1f:db:f3:5d:44:68:a3:1e:0f:99:30:
         78:a2:87:8a:5a:17:dd:f5:45:95:25:ee:a6:6c:37:0d:9f:38:
         ff:39:b4:2e:ce:0e:44:12:67:af:bc:02:c6:b0:d4:8a:1c:1a:
         b2:d4:f5:81:f7:24:2a:15:28:64:ee:bd:0b:cc:8b:f4:b4:c3:
         6b:c1:b6:f2:57:b9:c3:ee:cb:0f:43:16:25:40:a6:66:45:0c:
         b8:4a:dd:df:d4:89:af:5a:1e:19:55:0f:cf:ad:17:ff:56:10:
         42:9c:09:e1
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUJv/CmGfbOPZ+TxKziyEa+YG2pYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VBODA0ODhDNDFFRjA4NDY1RDNFOTVGRTJGOEUxMTBB
MEJBNUI0ODAeFw0yMzA2MDQxOTM2MjZaFw0yNDA2MDIxOTQxMjZaMDMxMTAvBgNV
BAMTKEMwMjFGNkM4MDMyQTRDRjE5RDhBQkU0RTkzRTk5MURCRkIwNDI2MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvC+mHZAV2+xG74JP7jgwfUIZ1
MiAKRUQpCAQQNaecW9UEAuwQVETB1gnTb5DTB4EW3sko6uLCni1N+bqUj8NaX+CY
GKaKEJvwl0p4mEz13C9vnf9gECvR1bUc65BjVnt8ZYuFAFRSTs+p3DO4Qu/imIQj
2COH83P2Sx13ab45RAr2naJdxRqMHMSMfJwG+e3iSznWy779tIzBy3siWuTy7Gsu
PNg7zFbz3unB3gFtOfjCfWadt1FHtdW7f7vVP+jJuEkKUxh+oU3TbROeN0jL+ReU
j6tE/wD1EQCjlyge/R9I5J6W2Zb4WL/pRQbE+ARooALNs7rI8fwstgjKJFtLAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUwCH2yAMqTPGdir5Ok+mR2/sEJiowHwYDVR0j
BBgwFoAUPqgEiMQe8IRl0+lf4vjhEKC6W0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUoxOVA3WDV0WmVmTUhtVmtVUWM3RXBndGpxYUJWTDh1TWtxVjZaZVNq
WlUvMC8zRUE4MDQ4OEM0MUVGMDg0NjVEM0U5NUZFMkY4RTExMEEwQkE1QjQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNFQTgwNDg4QzQxRUYwODQ2
NUQzRTk1RkUyRjhFMTEwQTBCQTVCNDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VKMTlQN1g1dFplZk1IbVZrVVFjN0VwZ3RqcWFCVkw4dU1rcVY2WmVTalpVLzAv
MzIzODMwMzQzYTM4MzM2NDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzIzMjMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBIPcMA0GCSqGSIb3DQEBCwUAA4IBAQDZUFNp
60D5Efxh3kV9oEWlopl0tILiGB6S/hFL07YUYEA4nYh48mFHuRGmAsNR3og5p1zm
crjHcv0B+kKzmgg0h29A23uLgaJL1MAvvW2dX2Xp6uuwUlx/l+qInE8d1+a9F0Io
vAab5biGUNBHg7MKCsZ6mRQxn7WK/a5shlCjNnGbcYJXL5EffijWPdVO/AEJed+u
QJK+H9vzXURoox4PmTB4ooeKWhfd9UWVJe6mbDcNnzj/ObQuzg5EEmevvALGsNSK
HBqy1PWB9yQqFShk7r0LzIv0tMNrwbbyV7nD7ssPQxYlQKZmRQy4St3f1ImvWh4Z
VQ/PrRf/VhBCnAnh
-----END CERTIFICATE-----