Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/323830343a366236383a3a2f33322d3334203d3e20323730333938.roa
File:                     323830343a366236383a3a2f33322d3334203d3e20323730333938.roa (raw, json)
Hash identifier:          1anP7BoblkkO4ELpq8Z2IKNjym5olKngUgiFTUs1buA=
Subject key identifier:   06:83:2B:FC:8C:67:0B:4F:CA:03:4A:3F:21:04:6F:21:1B:C4:48:60
Certificate issuer:       /CN=EED1D4B0B930C7014490544265A580B936E7CF36
Certificate serial:       782C2C0C910B60EA2162C17577C9D40279DAD4D3
Authority key identifier: EE:D1:D4:B0:B9:30:C7:01:44:90:54:42:65:A5:80:B9:36:E7:CF:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EED1D4B0B930C7014490544265A580B936E7CF36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/323830343a366236383a3a2f33322d3334203d3e20323730333938.roa
Signing time:             Sat 09 Apr 2022 18:01:03 +0000
ROA not before:           Sat 09 Apr 2022 17:56:03 +0000
ROA not after:            Sat 08 Apr 2023 18:01:03 +0000
asID:                     270398
IP address blocks:        2804:6b68::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2c:2c:0c:91:0b:60:ea:21:62:c1:75:77:c9:d4:02:79:da:d4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EED1D4B0B930C7014490544265A580B936E7CF36
        Validity
            Not Before: Apr  9 17:56:03 2022 GMT
            Not After : Apr  8 18:01:03 2023 GMT
        Subject: CN=06832BFC8C670B4FCA034A3F21046F211BC44860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8a:06:9f:7c:26:7b:de:9c:15:7f:66:d0:82:
                    ba:50:78:02:dd:67:5a:35:fb:ca:9c:21:ec:82:5a:
                    34:7c:33:48:9b:b3:21:06:92:4e:07:a2:7d:e9:99:
                    6d:dc:de:59:0c:80:f8:04:69:a2:c6:4e:4d:84:47:
                    cc:2c:1e:12:03:13:f5:38:6f:23:30:7a:49:5e:87:
                    3a:6d:3b:c2:ed:d9:00:04:06:b0:ec:f0:8c:ae:81:
                    54:d5:3d:76:86:c5:1e:5a:0c:35:e0:6c:dc:f0:81:
                    aa:17:56:b4:bf:88:f1:b3:44:1b:dd:b6:b0:bd:a6:
                    49:6f:3d:c2:bf:b4:e1:84:ea:58:ac:5f:9d:57:eb:
                    4d:f8:81:8c:97:60:ec:d4:bf:15:48:a0:4f:19:a4:
                    a8:83:bc:e3:c5:03:8e:53:11:6d:60:94:6e:70:f0:
                    fc:51:16:73:58:6c:d0:d8:a1:13:bf:9f:4b:15:a7:
                    3f:b9:a2:84:e4:1c:09:25:ec:2e:2e:c1:e1:55:42:
                    e6:de:af:c9:5d:4a:d8:88:bc:75:bd:36:5e:26:7e:
                    3e:7e:17:91:76:33:cd:96:fd:0f:c1:ab:f9:23:67:
                    4c:ec:df:9e:30:db:34:c8:c3:28:4f:d2:4f:1b:c5:
                    3d:a4:8a:a7:3f:b1:2b:7f:93:a9:fc:e7:9e:9d:a9:
                    c5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:83:2B:FC:8C:67:0B:4F:CA:03:4A:3F:21:04:6F:21:1B:C4:48:60
            X509v3 Authority Key Identifier:
                keyid:EE:D1:D4:B0:B9:30:C7:01:44:90:54:42:65:A5:80:B9:36:E7:CF:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/EED1D4B0B930C7014490544265A580B936E7CF36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EED1D4B0B930C7014490544265A580B936E7CF36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/323830343a366236383a3a2f33322d3334203d3e20323730333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b68::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:2e:87:81:f7:1c:c3:e8:2a:a4:9a:9a:8c:1c:72:14:a7:87:
         fb:41:1b:3c:97:50:52:f1:d5:1e:f7:c5:74:ec:07:e0:7d:52:
         ee:f6:13:10:6d:ce:8f:5a:18:d1:2e:7d:27:6e:1a:d5:70:2e:
         2e:0f:9a:dd:90:69:6d:c0:af:14:a7:d6:2c:b8:bb:c8:e6:38:
         88:1b:a2:2d:81:d9:c5:ab:0d:f1:91:5f:bd:e0:45:ca:9a:30:
         9a:a8:9f:ed:c6:81:8a:25:06:ec:dc:ec:59:30:29:e7:05:c2:
         12:84:e0:98:0c:cd:3d:79:ea:72:7d:bd:c0:33:fb:7e:33:7e:
         23:90:85:db:bd:2c:88:cd:22:0e:9e:7c:c7:a9:92:a9:36:c5:
         08:7f:b3:cd:47:29:88:53:4b:30:97:94:fe:30:d6:7d:c4:4f:
         4c:ba:9a:87:51:9a:7c:50:5b:d5:46:3c:a3:b9:b0:f2:c1:7f:
         57:13:da:80:b9:30:51:9f:04:23:1e:a8:31:24:62:d6:3d:50:
         4b:10:b8:d9:1b:f9:4f:ec:88:4d:ee:43:3f:d2:d4:79:8a:f9:
         7f:ce:6c:c8:99:98:9b:f5:92:be:a8:c7:ea:e9:24:47:c1:3b:
         54:4f:4a:65:f0:69:93:a3:08:13:f0:3b:a1:18:78:4f:92:30:
         5b:3b:d7:27
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUeCwsDJELYOohYsF1d8nUAnna1NMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVEMUQ0QjBCOTMwQzcwMTQ0OTA1NDQyNjVBNTgwQjkz
NkU3Q0YzNjAeFw0yMjA0MDkxNzU2MDNaFw0yMzA0MDgxODAxMDNaMDMxMTAvBgNV
BAMTKDA2ODMyQkZDOEM2NzBCNEZDQTAzNEEzRjIxMDQ2RjIxMUJDNDQ4NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrigaffCZ73pwVf2bQgrpQeALd
Z1o1+8qcIeyCWjR8M0ibsyEGkk4Hon3pmW3c3lkMgPgEaaLGTk2ER8wsHhIDE/U4
byMweklehzptO8Lt2QAEBrDs8IyugVTVPXaGxR5aDDXgbNzwgaoXVrS/iPGzRBvd
trC9pklvPcK/tOGE6lisX51X6034gYyXYOzUvxVIoE8ZpKiDvOPFA45TEW1glG5w
8PxRFnNYbNDYoRO/n0sVpz+5ooTkHAkl7C4uweFVQuber8ldStiIvHW9Nl4mfj5+
F5F2M82W/Q/Bq/kjZ0zs354w2zTIwyhP0k8bxT2kiqc/sSt/k6n8556dqcVFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUBoMr/IxnC0/KA0o/IQRvIRvESGAwHwYDVR0j
BBgwFoAU7tHUsLkwxwFEkFRCZaWAuTbnzzYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTg3dHE0cXQ1djdtSmJyRW5jN0s4dlpvQkVuUTliamtEQmh0emZOcU1l
c3MvMC9FRUQxRDRCMEI5MzBDNzAxNDQ5MDU0NDI2NUE1ODBCOTM2RTdDRjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VFRDFENEIwQjkzMEM3MDE0
NDkwNTQ0MjY1QTU4MEI5MzZFN0NGMzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU4N3RxNHF0NXY3bUpickVuYzdLOHZab0JFblE5YmprREJodHpmTnFNZXNzLzAv
MzIzODMwMzQzYTM2NjIzNjM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMw
MzMzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARraDANBgkqhkiG9w0BAQsFAAOCAQEAQi6Hgfcc
w+gqpJqajBxyFKeH+0EbPJdQUvHVHvfFdOwH4H1S7vYTEG3Oj1oY0S59J24a1XAu
Lg+a3ZBpbcCvFKfWLLi7yOY4iBuiLYHZxasN8ZFfveBFypowmqif7caBiiUG7Nzs
WTAp5wXCEoTgmAzNPXnqcn29wDP7fjN+I5CF270siM0iDp58x6mSqTbFCH+zzUcp
iFNLMJeU/jDWfcRPTLqah1GafFBb1UY8o7mw8sF/VxPagLkwUZ8EIx6oMSRi1j1Q
SxC42Rv5T+yITe5DP9LUeYr5f85syJmYm/WSvqjH6ukkR8E7VE9KZfBpk6MIE/A7
oRh4T5IwWzvXJw==
-----END CERTIFICATE-----