Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33322d3438203d3e20323731333837.roa
File:                     323830343a376162343a3a2f33322d3438203d3e20323731333837.roa (raw, json)
Hash identifier:          IqewFggMHJX5rCmCjN1lSTskZVgFZZUJRw6Jf6fqHYg=
Subject key identifier:   9E:29:B4:E4:65:61:74:BD:AC:F9:D8:26:E0:5F:3A:46:DB:87:67:43
Certificate issuer:       /CN=3218957EF5CDDA54349E136D89ECB6CF4EF36116
Certificate serial:       0EFBB3783858B1A1E7EF8C31EC3A72ECFDFD541B
Authority key identifier: 32:18:95:7E:F5:CD:DA:54:34:9E:13:6D:89:EC:B6:CF:4E:F3:61:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3218957EF5CDDA54349E136D89ECB6CF4EF36116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33322d3438203d3e20323731333837.roa
Signing time:             Thu 11 Aug 2022 19:10:57 +0000
ROA not before:           Thu 11 Aug 2022 19:05:57 +0000
ROA not after:            Thu 10 Aug 2023 19:10:57 +0000
asID:                     271387
IP address blocks:        2804:7ab4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fb:b3:78:38:58:b1:a1:e7:ef:8c:31:ec:3a:72:ec:fd:fd:54:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3218957EF5CDDA54349E136D89ECB6CF4EF36116
        Validity
            Not Before: Aug 11 19:05:57 2022 GMT
            Not After : Aug 10 19:10:57 2023 GMT
        Subject: CN=9E29B4E4656174BDACF9D826E05F3A46DB876743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:fc:71:0a:ce:41:6b:ec:94:25:eb:98:f5:
                    3f:a3:ea:99:78:62:c3:34:2f:91:04:5e:1b:a4:72:
                    66:cc:e6:89:3b:5e:4b:4c:91:7c:5e:aa:cc:91:96:
                    c5:dc:a9:37:f0:95:44:c2:ea:c5:81:c0:41:64:bf:
                    66:48:e1:bd:78:91:5b:67:2a:3a:73:25:c7:6d:4c:
                    5c:bb:45:3f:45:4a:69:46:c5:17:df:12:6b:8e:7d:
                    1f:f2:1e:60:cf:ec:cd:34:34:6c:f9:d1:b8:de:e3:
                    73:4f:26:89:aa:24:80:5c:c6:b8:9e:05:7b:58:b1:
                    b5:fd:3a:84:da:f9:57:67:31:31:76:26:55:23:c6:
                    a0:38:55:4d:56:16:0e:8f:74:10:ed:10:d0:da:d9:
                    5b:4e:ce:dd:6d:8c:88:0d:31:f8:6c:79:86:74:56:
                    4d:de:d8:83:bb:e1:9f:df:60:89:12:10:4a:8d:3c:
                    4a:9e:7b:0a:c4:43:d7:75:57:cd:0a:f6:fc:33:a8:
                    c8:5f:a0:d6:29:78:d0:9a:73:4b:40:6e:8e:0f:c0:
                    f1:2d:b8:78:df:2e:f6:9e:4e:8e:40:88:01:fb:be:
                    cb:ce:d0:6a:44:1b:75:06:dd:33:e8:f6:f7:59:96:
                    ea:11:fb:78:b3:45:4b:c5:49:19:ef:bf:72:9c:16:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:29:B4:E4:65:61:74:BD:AC:F9:D8:26:E0:5F:3A:46:DB:87:67:43
            X509v3 Authority Key Identifier:
                keyid:32:18:95:7E:F5:CD:DA:54:34:9E:13:6D:89:EC:B6:CF:4E:F3:61:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3218957EF5CDDA54349E136D89ECB6CF4EF36116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3218957EF5CDDA54349E136D89ECB6CF4EF36116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33322d3438203d3e20323731333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ab4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:7d:67:a4:4a:bd:f8:f5:4f:70:3f:f7:23:c2:b7:66:48:6d:
         98:56:fb:30:32:0c:75:bd:06:8a:d3:30:57:93:63:9a:e9:a8:
         88:86:8f:71:f4:35:3d:85:30:c5:53:c6:a3:2d:dd:7a:6b:23:
         1c:af:5f:aa:fd:fd:45:dc:cb:1c:18:25:2b:c8:81:78:0c:e5:
         ba:3c:ea:6d:58:f7:4e:24:d7:a8:60:15:de:62:b1:47:a5:54:
         27:cc:9a:df:5f:69:22:90:64:b1:a8:bb:d9:70:49:75:c8:93:
         6f:a6:6c:4e:92:9b:37:a1:c0:14:a9:b9:95:98:d1:57:25:db:
         3c:3e:26:eb:87:56:d6:d5:a4:d5:f5:bb:84:40:ee:69:8c:a6:
         a8:71:8f:e0:41:6a:8f:69:15:6a:f0:e9:fb:68:b9:88:12:be:
         bc:9d:47:af:0d:c7:e7:7b:23:2c:ea:cf:b1:05:16:71:10:4c:
         51:68:ae:82:a0:86:35:00:2a:09:6f:64:95:e1:e6:1c:ae:10:
         44:5f:19:59:ed:4f:2d:9e:40:70:1e:75:8f:07:70:9c:8d:d3:
         97:0f:79:53:74:6d:18:28:d1:df:95:43:21:27:29:81:96:2f:
         06:73:05:fa:70:db:73:8d:c8:98:a3:8c:37:10:bb:e0:46:e5:
         84:50:49:36
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDvuzeDhYsaHn74wx7Dpy7P39VBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIxODk1N0VGNUNEREE1NDM0OUUxMzZEODlFQ0I2Q0Y0
RUYzNjExNjAeFw0yMjA4MTExOTA1NTdaFw0yMzA4MTAxOTEwNTdaMDMxMTAvBgNV
BAMTKDlFMjlCNEU0NjU2MTc0QkRBQ0Y5RDgyNkUwNUYzQTQ2REI4NzY3NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLvxxCs5Ba+yUJeuY9T+j6pl4
YsM0L5EEXhukcmbM5ok7XktMkXxeqsyRlsXcqTfwlUTC6sWBwEFkv2ZI4b14kVtn
KjpzJcdtTFy7RT9FSmlGxRffEmuOfR/yHmDP7M00NGz50bje43NPJomqJIBcxrie
BXtYsbX9OoTa+VdnMTF2JlUjxqA4VU1WFg6PdBDtENDa2VtOzt1tjIgNMfhseYZ0
Vk3e2IO74Z/fYIkSEEqNPEqeewrEQ9d1V80K9vwzqMhfoNYpeNCac0tAbo4PwPEt
uHjfLvaeTo5AiAH7vsvO0GpEG3UG3TPo9vdZluoR+3izRUvFSRnvv3KcFjRHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUnim05GVhdL2s+dgm4F86RtuHZ0MwHwYDVR0j
BBgwFoAUMhiVfvXN2lQ0nhNtiey2z07zYRYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1prV01CcW9zbVpid1FRck1SSDduc1k4SDdUaDNDWkJyanQ3NHJIYkhv
dEovMC8zMjE4OTU3RUY1Q0REQTU0MzQ5RTEzNkQ4OUVDQjZDRjRFRjM2MTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyMTg5NTdFRjVDRERBNTQz
NDlFMTM2RDg5RUNCNkNGNEVGMzYxMTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaa1dNQnFvc21aYndRUXJNUkg3bnNZOEg3VGgzQ1pCcmp0NzRySGJIb3RKLzAv
MzIzODMwMzQzYTM3NjE2MjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzMzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR6tDANBgkqhkiG9w0BAQsFAAOCAQEATH1npEq9
+PVPcD/3I8K3ZkhtmFb7MDIMdb0GitMwV5NjmumoiIaPcfQ1PYUwxVPGoy3demsj
HK9fqv39RdzLHBglK8iBeAzlujzqbVj3TiTXqGAV3mKxR6VUJ8ya319pIpBksai7
2XBJdciTb6ZsTpKbN6HAFKm5lZjRVyXbPD4m64dW1tWk1fW7hEDuaYymqHGP4EFq
j2kVavDp+2i5iBK+vJ1Hrw3H53sjLOrPsQUWcRBMUWiugqCGNQAqCW9kleHmHK4Q
RF8ZWe1PLZ5AcB51jwdwnI3Tlw95U3RtGCjR35VDIScpgZYvBnMF+nDbc43ImKOM
NxC74EblhFBJNg==
-----END CERTIFICATE-----