Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3263382f3132362d313236203d3e203532393635.roa
File:                     323830343a3362383a343a31363a3a3263382f3132362d313236203d3e203532393635.roa (raw, json)
Hash identifier:          IJbioTIUT6BltrlerLpE150gDebIEFaTvwRVK64A01I=
Subject key identifier:   D0:86:9C:10:F3:22:FF:DE:59:C6:BD:D0:22:C2:73:8A:1E:B9:85:89
Certificate issuer:       /CN=143582F75704EEF8880AF5E444EE85042913D47D
Certificate serial:       1548CFCA3AA9FEEC9A98EC240B9B74CCCF0271AD
Authority key identifier: 14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/143582F75704EEF8880AF5E444EE85042913D47D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3263382f3132362d313236203d3e203532393635.roa
Signing time:             Mon 16 Oct 2023 16:42:31 +0000
ROA not before:           Mon 16 Oct 2023 16:37:31 +0000
ROA not after:            Mon 14 Oct 2024 16:42:31 +0000
asID:                     52965
IP address blocks:        2804:3b8:4:16::2c8/126 maxlen: 126

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:48:cf:ca:3a:a9:fe:ec:9a:98:ec:24:0b:9b:74:cc:cf:02:71:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143582F75704EEF8880AF5E444EE85042913D47D
        Validity
            Not Before: Oct 16 16:37:31 2023 GMT
            Not After : Oct 14 16:42:31 2024 GMT
        Subject: CN=D0869C10F322FFDE59C6BDD022C2738A1EB98589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:b9:30:28:ed:2a:e3:33:48:15:72:31:34:
                    05:65:2a:b6:73:8f:ff:44:94:05:4a:bf:e0:0d:90:
                    09:83:40:5c:61:09:41:69:7f:93:38:e9:1b:af:c9:
                    35:d7:82:ed:14:a7:d3:9f:00:f1:f8:a1:ea:f7:72:
                    20:9d:8d:bd:1f:3b:42:bb:58:d7:79:9b:e9:ca:f6:
                    2d:4f:de:0a:e3:2d:c7:d6:f4:d3:de:d3:ac:08:49:
                    dd:67:c3:10:82:d8:e8:82:25:5b:0b:8d:2a:ab:f4:
                    4c:0b:33:f9:0c:23:66:b2:31:00:b0:11:41:11:6d:
                    00:0b:d6:0f:4e:00:9a:aa:35:c8:e0:1e:e7:03:9e:
                    ce:de:e6:53:31:d0:ca:4e:92:ee:67:e6:3a:13:8e:
                    1e:3c:5e:85:f6:94:b2:7b:7d:7d:5c:bc:dd:e7:f4:
                    f3:51:07:ef:cb:53:59:ea:e6:8d:ba:89:ba:d0:6e:
                    36:a5:de:c7:5e:16:66:cc:d8:8d:ec:a6:0c:e7:7c:
                    f0:37:5d:7c:61:34:c9:f3:58:69:45:d2:21:6c:e8:
                    e1:41:b0:21:68:d6:25:e7:ad:0a:83:ea:cc:c2:50:
                    a2:d6:67:fd:e6:4e:f8:14:e3:a5:9d:3b:a1:5d:3c:
                    21:1b:8e:9d:e1:44:0e:52:a4:fd:0d:b9:d4:13:75:
                    9a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:86:9C:10:F3:22:FF:DE:59:C6:BD:D0:22:C2:73:8A:1E:B9:85:89
            X509v3 Authority Key Identifier:
                keyid:14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/143582F75704EEF8880AF5E444EE85042913D47D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/143582F75704EEF8880AF5E444EE85042913D47D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3263382f3132362d313236203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b8:4:16:0:0:0:2c8/126

    Signature Algorithm: sha256WithRSAEncryption
         5b:b3:53:bc:97:9e:ef:fb:ae:b8:f2:de:d0:0a:c2:a2:02:f4:
         a4:4e:16:3f:57:88:4c:34:3b:bc:f1:2f:f9:f6:b0:a6:42:ae:
         e9:4a:87:fe:92:05:69:cc:cc:2d:80:c8:ab:6f:25:8c:a7:73:
         23:66:79:92:cf:5c:5e:16:b6:4b:1c:85:d4:71:c3:b4:53:bc:
         d3:7f:fd:44:d2:d0:f5:d3:47:80:03:66:9e:46:39:30:5f:55:
         ce:f6:ad:01:da:d7:89:98:d6:d6:52:71:2b:02:f1:7e:c2:5f:
         fe:e9:1c:aa:24:96:0e:2a:1b:3a:51:54:10:51:f1:57:7b:6d:
         1d:39:01:1a:96:b1:57:bb:2a:87:47:5e:0f:01:d4:ff:a0:55:
         23:f8:2f:11:ed:e7:17:06:11:30:8c:cc:5b:81:51:d3:62:f9:
         7d:af:25:6b:25:4c:9b:67:44:23:5a:4f:9a:aa:b3:15:5e:4c:
         65:d0:14:d7:7d:a3:ce:9d:4a:43:f5:72:2e:a4:1e:b6:94:03:
         0c:e9:8f:5b:e6:13:4b:54:c6:ef:f8:e9:f6:28:3f:c7:57:c8:
         91:ee:5d:4c:d5:f8:fd:91:35:69:98:d7:51:2a:91:6e:94:b5:
         97:f7:d2:f3:29:d8:26:58:ff:32:69:54:cc:ab:92:52:80:0b:
         d3:38:c8:ac
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgIUFUjPyjqp/uyamOwkC5t0zM8Cca0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQzNTgyRjc1NzA0RUVGODg4MEFGNUU0NDRFRTg1MDQy
OTEzRDQ3RDAeFw0yMzEwMTYxNjM3MzFaFw0yNDEwMTQxNjQyMzFaMDMxMTAvBgNV
BAMTKEQwODY5QzEwRjMyMkZGREU1OUM2QkREMDIyQzI3MzhBMUVCOTg1ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+LkwKO0q4zNIFXIxNAVlKrZz
j/9ElAVKv+ANkAmDQFxhCUFpf5M46RuvyTXXgu0Up9OfAPH4oer3ciCdjb0fO0K7
WNd5m+nK9i1P3grjLcfW9NPe06wISd1nwxCC2OiCJVsLjSqr9EwLM/kMI2ayMQCw
EUERbQAL1g9OAJqqNcjgHucDns7e5lMx0MpOku5n5joTjh48XoX2lLJ7fX1cvN3n
9PNRB+/LU1nq5o26ibrQbjal3sdeFmbM2I3spgznfPA3XXxhNMnzWGlF0iFs6OFB
sCFo1iXnrQqD6szCUKLWZ/3mTvgU46WdO6FdPCEbjp3hRA5SpP0NudQTdZp3AgMB
AAGjggJsMIICaDAdBgNVHQ4EFgQU0IacEPMi/95Zxr3QIsJzih65hYkwHwYDVR0j
BBgwFoAUFDWC91cE7viICvXkRO6FBCkT1H0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR24yOHN4bVB0Z0VmcXBhSjZFdHdENHE0S3dZTWRXaDQxemIxdVpFOWFC
Q1gvMC8xNDM1ODJGNzU3MDRFRUY4ODgwQUY1RTQ0NEVFODUwNDI5MTNENDdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0MzU4MkY3NTcwNEVFRjg4
ODBBRjVFNDQ0RUU4NTA0MjkxM0Q0N0QuY2VyMIG8BggrBgEFBQcBCwSBrzCBrDCB
qQYIKwYBBQUHMAuGgZxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duMjhzeG1QdGdFZnFwYUo2RXR3RDRxNEt3WU1kV2g0MXpiMXVaRTlhQkNYLzAv
MzIzODMwMzQzYTMzNjIzODNhMzQzYTMxMzYzYTNhMzI2MzM4MmYzMTMyMzYyZDMx
MzIzNjIwM2QzZTIwMzUzMjM5MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAsBggrBgEFBQcBBwEB/wQdMBswGQQCAAIwEwMRAigEA7gABAAWAAAAAAAA
AsgwDQYJKoZIhvcNAQELBQADggEBAFuzU7yXnu/7rrjy3tAKwqIC9KROFj9XiEw0
O7zxL/n2sKZCrulKh/6SBWnMzC2AyKtvJYyncyNmeZLPXF4WtkschdRxw7RTvNN/
/UTS0PXTR4ADZp5GOTBfVc72rQHa14mY1tZScSsC8X7CX/7pHKoklg4qGzpRVBBR
8Vd7bR05ARqWsVe7KodHXg8B1P+gVSP4LxHt5xcGETCMzFuBUdNi+X2vJWslTJtn
RCNaT5qqsxVeTGXQFNd9o86dSkP1ci6kHraUAwzpj1vmE0tUxu/46fYoP8dXyJHu
XUzV+P2RNWmY11EqkW6UtZf30vMp2CZY/zJpVMyrklKAC9M4yKw=
-----END CERTIFICATE-----