Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/323830343a326364633a3a2f33322d3332203d3e20323633303639.roa
File:                     323830343a326364633a3a2f33322d3332203d3e20323633303639.roa (raw, json)
Hash identifier:          tYcEi1giP5A1hngmwr9SG2vK6e0SoMyBtL6s5CfWY9s=
Subject key identifier:   E1:05:B6:D9:0E:5C:B5:BA:3A:81:ED:2E:2F:87:66:12:28:9D:5C:FF
Certificate issuer:       /CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
Certificate serial:       57D893BAC02FF4BAE485F1D5FD0496D8995CEFA8
Authority key identifier: 4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/323830343a326364633a3a2f33322d3332203d3e20323633303639.roa
Signing time:             Mon 13 Mar 2023 18:51:49 +0000
ROA not before:           Mon 13 Mar 2023 18:46:49 +0000
ROA not after:            Mon 11 Mar 2024 18:51:49 +0000
asID:                     263069
IP address blocks:        2804:2cdc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d8:93:ba:c0:2f:f4:ba:e4:85:f1:d5:fd:04:96:d8:99:5c:ef:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
        Validity
            Not Before: Mar 13 18:46:49 2023 GMT
            Not After : Mar 11 18:51:49 2024 GMT
        Subject: CN=E105B6D90E5CB5BA3A81ED2E2F876612289D5CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:63:23:09:16:5c:46:3e:bc:ca:5c:61:57:
                    3e:6f:eb:44:f0:c4:95:48:09:fd:03:a2:6c:07:ba:
                    45:b7:25:03:93:95:df:05:2a:e2:96:ff:b8:f6:6e:
                    95:7c:1b:d8:37:63:03:ac:2c:c1:aa:b9:cb:b7:89:
                    1d:39:fa:00:f6:58:54:de:59:ac:83:93:99:e2:11:
                    d3:6b:21:d9:51:ef:91:36:08:e1:2c:53:ba:82:87:
                    ea:3c:d5:6c:ba:1d:a2:00:19:99:2f:6b:b1:6e:5d:
                    b9:45:f7:af:f4:56:fd:d5:89:41:c4:f9:c9:b3:4c:
                    fa:7e:6e:ef:99:74:29:a4:54:b3:60:f1:3c:3d:dc:
                    c5:08:8d:e6:86:f1:59:0b:a4:a0:1f:9b:e8:a7:86:
                    84:2a:59:a0:f9:50:34:11:75:0a:f7:0a:57:a2:15:
                    c6:d9:e1:97:3d:48:56:99:74:1f:ba:17:55:9e:0a:
                    41:fa:4b:d9:e2:bc:f1:ae:a7:3e:fd:1a:51:61:cd:
                    4b:31:01:c2:35:c5:ff:85:de:11:b1:e6:4e:53:b4:
                    dc:64:59:a2:f1:2b:ce:d9:ba:05:53:6c:50:3d:92:
                    3f:e3:a1:05:8d:bb:80:d9:0a:f5:4a:0a:c8:61:66:
                    8f:df:ab:e2:bb:41:51:65:73:9e:70:51:ba:a5:52:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:05:B6:D9:0E:5C:B5:BA:3A:81:ED:2E:2F:87:66:12:28:9D:5C:FF
            X509v3 Authority Key Identifier:
                keyid:4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/323830343a326364633a3a2f33322d3332203d3e20323633303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:55:fa:d8:8b:ad:1b:65:d9:79:02:13:2d:8e:1f:49:a1:79:
         38:25:7a:b2:b9:a5:ab:0c:96:4a:3d:3a:0d:8c:5a:c5:6c:f2:
         db:f7:5c:8a:ed:81:4f:f6:f6:e8:09:99:85:59:2c:38:aa:8f:
         e8:cc:8b:40:9d:f0:16:41:dc:3c:13:d9:38:e8:88:de:4d:6a:
         5f:bf:65:fe:5d:a3:46:b3:a1:ac:e4:3e:72:68:28:00:72:25:
         e7:c2:06:1e:65:a8:a9:58:1a:f6:5f:f6:fe:40:18:79:16:53:
         1f:9b:4d:8b:f6:8c:64:a7:66:b1:d5:28:56:9a:ed:c4:4e:f7:
         f1:af:3f:cf:ca:b5:36:bc:e9:9b:fd:57:f7:1c:7f:41:a1:9d:
         83:0d:d9:f1:b9:37:fb:2e:e3:cf:95:d8:42:7d:16:77:19:9c:
         7e:d4:0e:de:75:2c:0e:69:02:c3:29:90:91:e2:0c:79:98:55:
         2e:3c:63:c2:94:e5:f4:2f:27:da:e3:57:32:99:7e:17:57:8d:
         ae:bf:b5:a3:09:e4:25:79:71:4d:55:3e:a6:b0:cb:94:b5:c1:
         ac:b2:49:83:3b:c2:f1:db:d7:9c:70:cc:ab:36:21:85:e3:0a:
         b5:b4:7c:d2:de:01:46:19:b6:b7:6d:e2:17:29:3a:8f:e6:1f:
         2f:57:33:2a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUV9iTusAv9LrkhfHV/QSW2Jlc76gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFBRTE5MUY5RDJERTY4RTE4M0U4RDg1MUM0QzQ3NzQy
QTc1RDQ3OTAeFw0yMzAzMTMxODQ2NDlaFw0yNDAzMTExODUxNDlaMDMxMTAvBgNV
BAMTKEUxMDVCNkQ5MEU1Q0I1QkEzQTgxRUQyRTJGODc2NjEyMjg5RDVDRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI7GMjCRZcRj68ylxhVz5v60Tw
xJVICf0DomwHukW3JQOTld8FKuKW/7j2bpV8G9g3YwOsLMGqucu3iR05+gD2WFTe
WayDk5niEdNrIdlR75E2COEsU7qCh+o81Wy6HaIAGZkva7FuXblF96/0Vv3ViUHE
+cmzTPp+bu+ZdCmkVLNg8Tw93MUIjeaG8VkLpKAfm+inhoQqWaD5UDQRdQr3Clei
FcbZ4Zc9SFaZdB+6F1WeCkH6S9nivPGupz79GlFhzUsxAcI1xf+F3hGx5k5TtNxk
WaLxK87ZugVTbFA9kj/joQWNu4DZCvVKCshhZo/fq+K7QVFlc55wUbqlUgC1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU4QW22Q5ctbo6ge0uL4dmEiidXP8wHwYDVR0j
BBgwFoAUSq4ZH50t5o4YPo2FHExHdCp11HkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRldBWWpXMVVNellDNFRwanpONnRXdlMzN0gyYmlwS2Z3VTdLREIzR2da
WDEvMC80QUFFMTkxRjlEMkRFNjhFMTgzRThEODUxQzRDNDc3NDJBNzVENDc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRBQUUxOTFGOUQyREU2OEUx
ODNFOEQ4NTFDNEM0Nzc0MkE3NUQ0NzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZXQVlqVzFVTXpZQzRUcGp6TjZ0V3ZTMzdIMmJpcEtmd1U3S0RCM0dnWlgxLzAv
MzIzODMwMzQzYTMyNjM2NDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzAzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQs3DANBgkqhkiG9w0BAQsFAAOCAQEAp1X62Iut
G2XZeQITLY4fSaF5OCV6srmlqwyWSj06DYxaxWzy2/dciu2BT/b26AmZhVksOKqP
6MyLQJ3wFkHcPBPZOOiI3k1qX79l/l2jRrOhrOQ+cmgoAHIl58IGHmWoqVga9l/2
/kAYeRZTH5tNi/aMZKdmsdUoVprtxE738a8/z8q1Nrzpm/1X9xx/QaGdgw3Z8bk3
+y7jz5XYQn0WdxmcftQO3nUsDmkCwymQkeIMeZhVLjxjwpTl9C8n2uNXMpl+F1eN
rr+1ownkJXlxTVU+prDLlLXBrLJJgzvC8dvXnHDMqzYhheMKtbR80t4BRhm2t23i
Fyk6j+YfL1czKg==
-----END CERTIFICATE-----