Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/323830343a363133303a3a2f33322d3333203d3e20323639323139.roa
File:                     323830343a363133303a3a2f33322d3333203d3e20323639323139.roa (raw, json)
Hash identifier:          DiZUTLfasoCrjGRnvOQ24AjFoD8H/i6hG952xsGNpLo=
Subject key identifier:   C4:F7:57:26:A6:A4:71:C7:9C:2F:9C:97:37:85:F8:C7:9A:B0:29:19
Certificate issuer:       /CN=E7D8FAB52F7674C1DFA353660F987AD06D90CB72
Certificate serial:       6DA788316925CC5927E485B6A8AEFFEF84DFBB26
Authority key identifier: E7:D8:FA:B5:2F:76:74:C1:DF:A3:53:66:0F:98:7A:D0:6D:90:CB:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E7D8FAB52F7674C1DFA353660F987AD06D90CB72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/323830343a363133303a3a2f33322d3333203d3e20323639323139.roa
Signing time:             Tue 18 Jul 2023 12:49:07 +0000
ROA not before:           Tue 18 Jul 2023 12:44:07 +0000
ROA not after:            Tue 16 Jul 2024 12:49:07 +0000
asID:                     269219
IP address blocks:        2804:6130::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a7:88:31:69:25:cc:59:27:e4:85:b6:a8:ae:ff:ef:84:df:bb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D8FAB52F7674C1DFA353660F987AD06D90CB72
        Validity
            Not Before: Jul 18 12:44:07 2023 GMT
            Not After : Jul 16 12:49:07 2024 GMT
        Subject: CN=C4F75726A6A471C79C2F9C973785F8C79AB02919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:4f:ff:ed:54:b8:17:e2:6f:54:4e:5f:e1:
                    e5:74:ec:0f:db:74:9e:94:f5:be:26:49:cb:82:f3:
                    c8:81:cd:a0:56:46:cc:1b:2e:7f:92:06:01:57:6f:
                    36:46:b5:1b:dd:c5:48:19:34:c6:41:71:13:0e:e7:
                    2d:81:cf:66:9a:66:eb:cd:36:6c:44:7f:71:95:4c:
                    da:b0:7f:ce:1f:58:64:51:67:6b:1a:a7:1d:ad:da:
                    9d:84:18:de:41:18:7b:15:cf:84:db:3d:a7:2c:09:
                    7f:13:28:7e:b8:4c:a2:7b:2e:9d:e9:27:f4:b5:76:
                    5b:0e:04:e5:58:22:02:4c:5c:f0:bd:f4:2c:54:ef:
                    42:42:8c:12:a0:ff:94:1f:76:c8:1a:6a:19:67:e0:
                    ac:66:4b:a2:a7:be:76:1b:88:e2:1b:9d:ee:67:aa:
                    37:30:12:e5:9b:0b:c1:6c:15:11:59:b2:48:97:75:
                    e0:fc:d5:9c:ac:ae:28:fd:ae:90:0b:d5:b7:3d:83:
                    a9:4e:b4:8b:54:ed:ac:92:12:c9:03:0f:db:a7:7a:
                    0c:74:a3:ee:77:7d:b9:2e:e6:a7:58:62:02:39:1f:
                    79:d4:e4:8e:db:0b:31:b4:dc:fb:2b:3b:a7:2a:5e:
                    97:2c:bc:60:72:32:6f:ed:06:02:71:70:b8:36:ab:
                    a7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F7:57:26:A6:A4:71:C7:9C:2F:9C:97:37:85:F8:C7:9A:B0:29:19
            X509v3 Authority Key Identifier:
                keyid:E7:D8:FA:B5:2F:76:74:C1:DF:A3:53:66:0F:98:7A:D0:6D:90:CB:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/E7D8FAB52F7674C1DFA353660F987AD06D90CB72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E7D8FAB52F7674C1DFA353660F987AD06D90CB72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/323830343a363133303a3a2f33322d3333203d3e20323639323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6130::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:8c:b0:7c:01:b7:9d:6b:4f:f0:e7:50:0a:3f:0c:e5:bc:87:
         b6:3c:c4:ea:d1:b8:22:dc:63:86:f7:ce:68:9e:a0:6c:36:9b:
         9c:cc:96:7f:15:96:13:93:f1:19:eb:73:bd:66:3b:93:e1:36:
         e8:81:85:a1:36:69:16:d6:7a:34:41:01:49:31:df:1e:04:c3:
         e4:6c:c7:00:3b:f0:44:23:44:c4:38:a3:12:c6:34:b3:16:78:
         92:b5:67:a9:b6:cf:d3:8e:d1:da:34:c2:36:3d:c6:d2:49:a2:
         2a:67:4b:df:e1:30:9c:ba:4c:bf:b6:63:e2:11:36:a6:2e:ef:
         b7:d0:1d:88:d0:ef:19:40:ad:0e:86:f7:5e:58:c0:6d:a7:96:
         65:58:f4:a8:9f:18:33:d9:de:33:e6:12:37:20:10:b0:12:97:
         49:1c:88:ba:71:fa:b8:ba:da:9c:0f:46:4f:4a:a7:ca:b2:01:
         d0:12:56:9a:13:a0:63:11:b4:c4:d3:0e:47:2f:14:ae:6a:0b:
         43:26:da:39:b1:d4:7c:40:6b:6d:0b:de:47:f1:a5:22:65:03:
         e2:e0:4d:60:87:99:ad:50:2a:40:27:78:4a:f5:54:ca:b3:c0:
         39:78:c3:8a:1a:97:e8:71:d0:33:5e:67:52:7f:61:c7:4d:ec:
         09:00:1e:27
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbaeIMWklzFkn5IW2qK7/74TfuyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdEOEZBQjUyRjc2NzRDMURGQTM1MzY2MEY5ODdBRDA2
RDkwQ0I3MjAeFw0yMzA3MTgxMjQ0MDdaFw0yNDA3MTYxMjQ5MDdaMDMxMTAvBgNV
BAMTKEM0Rjc1NzI2QTZBNDcxQzc5QzJGOUM5NzM3ODVGOEM3OUFCMDI5MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0U//7VS4F+JvVE5f4eV07A/b
dJ6U9b4mScuC88iBzaBWRswbLn+SBgFXbzZGtRvdxUgZNMZBcRMO5y2Bz2aaZuvN
NmxEf3GVTNqwf84fWGRRZ2sapx2t2p2EGN5BGHsVz4TbPacsCX8TKH64TKJ7Lp3p
J/S1dlsOBOVYIgJMXPC99CxU70JCjBKg/5Qfdsgaahln4KxmS6KnvnYbiOIbne5n
qjcwEuWbC8FsFRFZskiXdeD81Zysrij9rpAL1bc9g6lOtItU7aySEskDD9unegx0
o+53fbku5qdYYgI5H3nU5I7bCzG03PsrO6cqXpcsvGByMm/tBgJxcLg2q6fjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUxPdXJqakccecL5yXN4X4x5qwKRkwHwYDVR0j
BBgwFoAU59j6tS92dMHfo1NmD5h60G2Qy3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2hXYU5IUTJ2bjg1YzdqTG9EVHZnY01raUN4NWJwdEJKQjJ3YlJIRTZ6
NlovMC9FN0Q4RkFCNTJGNzY3NEMxREZBMzUzNjYwRjk4N0FEMDZEOTBDQjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U3RDhGQUI1MkY3Njc0QzFE
RkEzNTM2NjBGOTg3QUQwNkQ5MENCNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0doV2FOSFEydm44NWM3akxvRFR2Z2NNa2lDeDVicHRCSkIyd2JSSEU2ejZaLzAv
MzIzODMwMzQzYTM2MzEzMzMwM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM5
MzIzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARhMDANBgkqhkiG9w0BAQsFAAOCAQEAkIywfAG3
nWtP8OdQCj8M5byHtjzE6tG4ItxjhvfOaJ6gbDabnMyWfxWWE5PxGetzvWY7k+E2
6IGFoTZpFtZ6NEEBSTHfHgTD5GzHADvwRCNExDijEsY0sxZ4krVnqbbP047R2jTC
Nj3G0kmiKmdL3+EwnLpMv7Zj4hE2pi7vt9AdiNDvGUCtDob3XljAbaeWZVj0qJ8Y
M9neM+YSNyAQsBKXSRyIunH6uLranA9GT0qnyrIB0BJWmhOgYxG0xNMORy8UrmoL
QybaObHUfEBrbQveR/GlImUD4uBNYIeZrVAqQCd4SvVUyrPAOXjDihqX6HHQM15n
Un9hx03sCQAeJw==
-----END CERTIFICATE-----