Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiAbg2SBTKsqSw9qoCgPCaF9yvKfAMahxNNvVh55hNAh/0/323830343a383634343a3a2f33322d3434203d3e20323732363332.roa
File:                     323830343a383634343a3a2f33322d3434203d3e20323732363332.roa (raw, json)
Hash identifier:          aGkjpyjmPZWxz1RNtITxeUgKLHRhqksWOWhPHTQU9+Q=
Subject key identifier:   55:48:FD:C9:F1:56:81:99:56:FE:37:F2:7A:30:37:94:FE:7B:25:0F
Certificate issuer:       /CN=676A2472630463B52BB1B06F915D789F01A6577E
Certificate serial:       15FB89721124A54C8BF2B615A6E448BF508CADC6
Authority key identifier: 67:6A:24:72:63:04:63:B5:2B:B1:B0:6F:91:5D:78:9F:01:A6:57:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/676A2472630463B52BB1B06F915D789F01A6577E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiAbg2SBTKsqSw9qoCgPCaF9yvKfAMahxNNvVh55hNAh/0/323830343a383634343a3a2f33322d3434203d3e20323732363332.roa
Signing time:             Fri 17 Jun 2022 17:52:38 +0000
ROA not before:           Fri 17 Jun 2022 17:47:38 +0000
ROA not after:            Fri 16 Jun 2023 17:52:38 +0000
asID:                     272632
IP address blocks:        2804:8644::/32 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:fb:89:72:11:24:a5:4c:8b:f2:b6:15:a6:e4:48:bf:50:8c:ad:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=676A2472630463B52BB1B06F915D789F01A6577E
        Validity
            Not Before: Jun 17 17:47:38 2022 GMT
            Not After : Jun 16 17:52:38 2023 GMT
        Subject: CN=5548FDC9F156819956FE37F27A303794FE7B250F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:85:b4:c4:61:83:38:5e:fd:a8:54:ab:1b:
                    98:3d:72:87:27:ce:87:92:ac:96:8a:57:85:ae:64:
                    fe:91:0c:60:e7:42:3e:e9:ff:1a:8b:78:26:3c:ff:
                    f7:dd:fa:d3:d6:20:5c:a8:ec:26:73:25:2a:67:12:
                    75:b3:40:ed:b8:94:d8:38:bc:9f:4b:27:8a:2c:2b:
                    2f:7b:9f:a6:50:97:9c:20:7b:58:e8:b4:2f:78:61:
                    8d:8d:be:9d:1c:84:a1:74:42:83:c7:34:c4:61:57:
                    1d:8b:b9:28:34:99:32:e8:8a:06:c8:25:80:73:07:
                    9d:4a:8e:de:f4:99:bf:4d:c9:df:57:0c:c1:58:04:
                    3a:7d:70:28:52:31:bd:24:15:b4:a5:7a:25:57:39:
                    19:02:ba:74:fa:d1:e9:98:fe:1c:c0:5b:43:db:b5:
                    e0:84:7a:49:83:39:5a:89:ea:a3:c6:f4:e6:c6:d6:
                    4d:59:c0:8d:9f:99:65:70:0d:b2:54:b0:c8:a5:6e:
                    d3:1b:1f:f8:fb:50:45:79:38:4f:66:de:a1:1c:f5:
                    8e:b4:d4:0b:c5:77:ed:72:20:f1:35:dc:8f:d1:3a:
                    1b:9d:d5:37:49:55:73:b6:32:c9:3a:ef:e6:69:af:
                    17:8f:73:c4:93:ee:4d:37:dc:a7:d3:17:cb:a4:b9:
                    c1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:48:FD:C9:F1:56:81:99:56:FE:37:F2:7A:30:37:94:FE:7B:25:0F
            X509v3 Authority Key Identifier:
                keyid:67:6A:24:72:63:04:63:B5:2B:B1:B0:6F:91:5D:78:9F:01:A6:57:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiAbg2SBTKsqSw9qoCgPCaF9yvKfAMahxNNvVh55hNAh/0/676A2472630463B52BB1B06F915D789F01A6577E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/676A2472630463B52BB1B06F915D789F01A6577E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiAbg2SBTKsqSw9qoCgPCaF9yvKfAMahxNNvVh55hNAh/0/323830343a383634343a3a2f33322d3434203d3e20323732363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8644::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:30:62:76:74:9a:b0:a9:ca:a3:f0:1d:71:a4:f3:74:5f:16:
         78:44:c4:5d:4c:99:1f:61:a5:82:f1:cb:30:81:e5:37:95:60:
         ca:e1:ab:f9:97:ed:1c:5f:b7:b8:5d:b9:ec:72:ef:81:4b:5f:
         39:ad:6f:2b:76:44:0f:34:36:af:4a:31:12:0b:d4:c7:0c:29:
         0d:3b:d3:5a:c1:59:4f:1d:80:ab:66:09:bd:c1:7f:22:0d:52:
         b6:c9:52:b5:ca:75:89:19:6d:54:de:17:ae:b2:9f:4e:3d:3b:
         ef:0b:6e:7a:6d:51:f3:49:a0:5d:6d:e3:b1:86:de:79:68:79:
         fa:c3:f6:1b:bf:d7:fe:f0:12:de:e3:e3:2f:66:8d:69:68:9e:
         0a:03:09:18:95:85:fa:28:6e:62:76:a2:1a:50:3e:77:58:f0:
         c2:f8:ea:dc:73:29:0e:c3:7c:a0:59:82:2c:1f:81:03:dd:14:
         e5:f3:a4:d0:5d:17:a7:c3:c8:76:7f:01:70:d1:98:93:15:d8:
         b6:12:8d:43:51:3d:a6:df:76:c4:e4:18:f8:97:46:d2:d6:85:
         0b:66:40:4b:e2:13:6b:2d:91:7a:9b:9e:e0:57:ae:0d:7b:bc:
         e8:37:ab:16:68:02:0a:cb:27:10:7b:0f:b5:7d:d9:46:5f:43:
         32:4b:38:43
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFfuJchEkpUyL8rYVpuRIv1CMrcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc2QTI0NzI2MzA0NjNCNTJCQjFCMDZGOTE1RDc4OUYw
MUE2NTc3RTAeFw0yMjA2MTcxNzQ3MzhaFw0yMzA2MTYxNzUyMzhaMDMxMTAvBgNV
BAMTKDU1NDhGREM5RjE1NjgxOTk1NkZFMzdGMjdBMzAzNzk0RkU3QjI1MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqoW0xGGDOF79qFSrG5g9cocn
zoeSrJaKV4WuZP6RDGDnQj7p/xqLeCY8//fd+tPWIFyo7CZzJSpnEnWzQO24lNg4
vJ9LJ4osKy97n6ZQl5wge1jotC94YY2Nvp0chKF0QoPHNMRhVx2LuSg0mTLoigbI
JYBzB51Kjt70mb9Nyd9XDMFYBDp9cChSMb0kFbSleiVXORkCunT60emY/hzAW0Pb
teCEekmDOVqJ6qPG9ObG1k1ZwI2fmWVwDbJUsMilbtMbH/j7UEV5OE9m3qEc9Y60
1AvFd+1yIPE13I/ROhud1TdJVXO2Msk67+ZprxePc8ST7k033KfTF8ukucHTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUVUj9yfFWgZlW/jfyejA3lP57JQ8wHwYDVR0j
BBgwFoAUZ2okcmMEY7UrsbBvkV14nwGmV34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lBYmcyU0JUS3NxU3c5cW9DZ1BDYUY5eXZLZkFNYWh4Tk52Vmg1NWhO
QWgvMC82NzZBMjQ3MjYzMDQ2M0I1MkJCMUIwNkY5MTVENzg5RjAxQTY1NzdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3NkEyNDcyNjMwNDYzQjUy
QkIxQjA2RjkxNUQ3ODlGMDFBNjU3N0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpQWJnMlNCVEtzcVN3OXFvQ2dQQ2FGOXl2S2ZBTWFoeE5OdlZoNTVoTkFoLzAv
MzIzODMwMzQzYTM4MzYzNDM0M2EzYTJmMzMzMjJkMzQzNDIwM2QzZTIwMzIzNzMy
MzYzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASGRDANBgkqhkiG9w0BAQsFAAOCAQEAFDBidnSa
sKnKo/AdcaTzdF8WeETEXUyZH2GlgvHLMIHlN5VgyuGr+ZftHF+3uF257HLvgUtf
Oa1vK3ZEDzQ2r0oxEgvUxwwpDTvTWsFZTx2Aq2YJvcF/Ig1StslStcp1iRltVN4X
rrKfTj077wtuem1R80mgXW3jsYbeeWh5+sP2G7/X/vAS3uPjL2aNaWieCgMJGJWF
+ihuYnaiGlA+d1jwwvjq3HMpDsN8oFmCLB+BA90U5fOk0F0Xp8PIdn8BcNGYkxXY
thKNQ1E9pt92xOQY+JdG0taFC2ZAS+ITay2Repue4FeuDXu86DerFmgCCssnEHsP
tX3ZRl9DMks4Qw==
-----END CERTIFICATE-----