Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/1/323830343a356639383a3a2f33332d3333203d3e20323639313131.roa
File:                     323830343a356639383a3a2f33332d3333203d3e20323639313131.roa (raw, json)
Hash identifier:          nOXFoDX4Xyiy/ejFDs4V2xhm/NgQOLH4ef3aCs8XcOk=
Subject key identifier:   88:D3:27:06:BD:F3:A7:1A:9C:0F:1C:11:59:13:8F:0E:9F:BD:1E:0A
Certificate issuer:       /CN=D222F962EA56F1911760688F832B92229BBA6E09
Certificate serial:       592FFD93A84BE0B18F7F4DDE5A82B0838E09AE37
Authority key identifier: D2:22:F9:62:EA:56:F1:91:17:60:68:8F:83:2B:92:22:9B:BA:6E:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D222F962EA56F1911760688F832B92229BBA6E09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/1/323830343a356639383a3a2f33332d3333203d3e20323639313131.roa
Signing time:             Tue 26 Sep 2023 20:26:57 +0000
ROA not before:           Tue 26 Sep 2023 20:21:57 +0000
ROA not after:            Tue 24 Sep 2024 20:26:57 +0000
asID:                     269111
IP address blocks:        2804:5f98::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2f:fd:93:a8:4b:e0:b1:8f:7f:4d:de:5a:82:b0:83:8e:09:ae:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D222F962EA56F1911760688F832B92229BBA6E09
        Validity
            Not Before: Sep 26 20:21:57 2023 GMT
            Not After : Sep 24 20:26:57 2024 GMT
        Subject: CN=88D32706BDF3A71A9C0F1C1159138F0E9FBD1E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:59:85:80:6b:75:50:d3:2c:39:55:36:87:
                    b2:c1:bc:23:d2:97:65:c6:1c:7b:b1:b9:46:ab:66:
                    48:1e:a9:46:94:84:d3:7e:fa:f1:e7:23:0b:21:d2:
                    d1:1d:8b:53:72:fc:9e:d0:f5:14:91:ed:51:59:04:
                    ec:67:53:a0:8e:53:32:3c:b8:44:12:52:c7:2d:f1:
                    48:41:66:b8:80:c7:dd:c3:19:a8:3c:f8:85:3e:db:
                    c9:22:86:07:3f:06:d4:40:1b:ca:17:9b:76:8e:d9:
                    dc:bc:ad:a8:4d:87:ff:c8:df:b4:2a:a0:d2:8f:14:
                    da:5f:25:ee:a7:26:f0:8e:40:6f:a1:57:3c:46:36:
                    cf:63:b9:1b:85:12:e6:95:5a:80:af:6a:46:bc:8e:
                    a5:df:fb:77:e0:31:1a:81:6a:a2:55:0a:eb:4c:13:
                    42:75:f3:f1:ef:e6:5d:7a:03:75:04:0c:21:62:c1:
                    01:ab:c3:a5:ef:15:db:bd:2a:2e:5f:38:d9:04:94:
                    b9:32:0f:64:21:55:d6:bb:1a:e3:f5:fe:ea:e2:4c:
                    ef:de:88:12:06:04:1f:1c:87:00:25:92:c5:f9:f5:
                    ae:0d:44:cc:c9:5b:22:66:2e:cd:4a:e5:96:85:07:
                    5b:36:b9:cd:82:74:e4:33:2b:4d:0d:11:47:95:99:
                    b7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D3:27:06:BD:F3:A7:1A:9C:0F:1C:11:59:13:8F:0E:9F:BD:1E:0A
            X509v3 Authority Key Identifier:
                keyid:D2:22:F9:62:EA:56:F1:91:17:60:68:8F:83:2B:92:22:9B:BA:6E:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/1/D222F962EA56F1911760688F832B92229BBA6E09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D222F962EA56F1911760688F832B92229BBA6E09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/1/323830343a356639383a3a2f33332d3333203d3e20323639313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f98::/33

    Signature Algorithm: sha256WithRSAEncryption
         be:62:b8:92:a3:c5:b4:7d:e4:bc:42:97:3d:67:fd:04:36:53:
         03:52:3f:3c:28:b2:21:e7:ca:5d:7c:33:2a:fe:d8:4a:5d:26:
         63:9e:36:07:2e:31:97:0b:08:82:8e:63:c8:2f:f9:47:35:61:
         60:bf:b8:a5:93:d5:43:b5:19:20:79:a0:58:e2:43:ee:44:94:
         36:ec:1b:26:2b:57:f2:2e:37:0d:92:04:11:f5:08:e1:02:0b:
         68:69:67:a6:75:f9:5d:97:cb:63:fd:37:d2:15:7e:6c:0c:40:
         e3:f8:fd:9a:f5:1a:78:f4:ef:08:10:c5:40:90:bb:22:ba:eb:
         48:ff:b8:ba:85:62:82:6d:07:25:4d:cb:07:f8:ef:71:7a:35:
         c9:25:65:9e:fd:9d:6c:65:64:df:5e:74:c2:de:12:d7:09:18:
         d3:0f:8c:76:e9:a6:65:57:56:59:b4:6e:8b:66:5c:54:d9:e5:
         7a:a4:f1:9d:bf:6b:08:8e:05:a9:88:36:43:6f:a8:21:3a:e8:
         5c:71:21:40:bf:d8:3e:81:46:1e:53:52:03:61:04:14:98:a5:
         84:77:5f:e8:1a:cf:00:e9:65:4c:df:ed:33:08:65:f4:f6:45:
         26:39:8f:b2:c8:c1:b9:11:5c:8b:2b:5f:37:e1:b1:7a:18:c4:
         ed:f3:c9:b4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWS/9k6hL4LGPf03eWoKwg44JrjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDIyMkY5NjJFQTU2RjE5MTE3NjA2ODhGODMyQjkyMjI5
QkJBNkUwOTAeFw0yMzA5MjYyMDIxNTdaFw0yNDA5MjQyMDI2NTdaMDMxMTAvBgNV
BAMTKDg4RDMyNzA2QkRGM0E3MUE5QzBGMUMxMTU5MTM4RjBFOUZCRDFFMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCucFmFgGt1UNMsOVU2h7LBvCPS
l2XGHHuxuUarZkgeqUaUhNN++vHnIwsh0tEdi1Ny/J7Q9RSR7VFZBOxnU6COUzI8
uEQSUsct8UhBZriAx93DGag8+IU+28kihgc/BtRAG8oXm3aO2dy8rahNh//I37Qq
oNKPFNpfJe6nJvCOQG+hVzxGNs9juRuFEuaVWoCvaka8jqXf+3fgMRqBaqJVCutM
E0J18/Hv5l16A3UEDCFiwQGrw6XvFdu9Ki5fONkElLkyD2QhVda7GuP1/uriTO/e
iBIGBB8chwAlksX59a4NRMzJWyJmLs1K5ZaFB1s2uc2CdOQzK00NEUeVmbd/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiNMnBr3zpxqcDxwRWROPDp+9HgowHwYDVR0j
BBgwFoAU0iL5YupW8ZEXYGiPgyuSIpu6bgkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjZLdU43NjhlTTNrb3Q0SndESEFDOUhWNGNhd0hXY1l5bUNmbkp2ZFlX
b3AvMS9EMjIyRjk2MkVBNTZGMTkxMTc2MDY4OEY4MzJCOTIyMjlCQkE2RTA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyMjJGOTYyRUE1NkYxOTEx
NzYwNjg4RjgzMkI5MjIyOUJCQTZFMDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y2S3VONzY4ZU0za290NEp3REhBQzlIVjRjYXdIV2NZeW1DZm5KdmRZV29wLzEv
MzIzODMwMzQzYTM1NjYzOTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5
MzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARfmAAwDQYJKoZIhvcNAQELBQADggEBAL5iuJKj
xbR95LxClz1n/QQ2UwNSPzwosiHnyl18Myr+2EpdJmOeNgcuMZcLCIKOY8gv+Uc1
YWC/uKWT1UO1GSB5oFjiQ+5ElDbsGyYrV/IuNw2SBBH1COECC2hpZ6Z1+V2Xy2P9
N9IVfmwMQOP4/Zr1Gnj07wgQxUCQuyK660j/uLqFYoJtByVNywf473F6NcklZZ79
nWxlZN9edMLeEtcJGNMPjHbppmVXVlm0botmXFTZ5Xqk8Z2/awiOBamINkNvqCE6
6FxxIUC/2D6BRh5TUgNhBBSYpYR3X+gazwDpZUzf7TMIZfT2RSY5j7LIwbkRXIsr
XzfhsXoYxO3zybQ=
-----END CERTIFICATE-----