Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/323830343a343561383a3230303a3a2f34302d3430203d3e20323636393431.roa
File:                     323830343a343561383a3230303a3a2f34302d3430203d3e20323636393431.roa (raw, json)
Hash identifier:          ORmQgoKzc7xbrcBH9r7Daks9tGylIzsz5su+uEjOC8U=
Subject key identifier:   C5:62:AD:BB:35:47:2C:B2:00:F4:77:CC:08:6A:0F:54:59:0D:78:9A
Certificate issuer:       /CN=9F16E4ECCDA4B94CA493845289B3DA50832A911E
Certificate serial:       65127F3BFE6336C0515F313399D3BB84782C522A
Authority key identifier: 9F:16:E4:EC:CD:A4:B9:4C:A4:93:84:52:89:B3:DA:50:83:2A:91:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F16E4ECCDA4B94CA493845289B3DA50832A911E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/323830343a343561383a3230303a3a2f34302d3430203d3e20323636393431.roa
Signing time:             Tue 25 Jan 2022 18:53:14 +0000
ROA not before:           Tue 25 Jan 2022 18:48:14 +0000
ROA not after:            Tue 24 Jan 2023 18:53:14 +0000
asID:                     266941
IP address blocks:        2804:45a8:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:12:7f:3b:fe:63:36:c0:51:5f:31:33:99:d3:bb:84:78:2c:52:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F16E4ECCDA4B94CA493845289B3DA50832A911E
        Validity
            Not Before: Jan 25 18:48:14 2022 GMT
            Not After : Jan 24 18:53:14 2023 GMT
        Subject: CN=C562ADBB35472CB200F477CC086A0F54590D789A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:5d:bf:16:c8:84:de:73:fd:fd:ea:ce:b7:
                    96:05:cb:6c:33:bc:6d:94:4e:45:7d:ef:55:90:aa:
                    94:97:31:1f:11:87:f9:95:b6:77:51:7f:7f:7c:9f:
                    37:8a:25:15:7c:f0:5a:69:3b:c7:b6:91:34:7a:82:
                    86:62:3e:58:4a:b1:01:04:28:c7:0b:63:2e:bd:53:
                    f5:88:91:21:12:a7:b0:35:97:66:4f:36:3b:40:9c:
                    23:d0:89:35:5e:fb:df:7f:22:ec:44:ff:35:5b:90:
                    ac:89:dd:bb:ca:95:a7:03:04:9b:a3:e7:87:17:8f:
                    25:77:95:b0:b6:1c:8d:a7:61:c1:55:f7:67:e5:a5:
                    30:8c:bf:7e:31:5f:43:26:64:27:8d:bb:23:ce:5e:
                    f9:51:94:68:70:b8:87:96:6d:b6:e4:08:1e:18:8e:
                    d4:6e:06:3e:88:33:69:73:71:c7:e8:f5:45:6f:9a:
                    f4:70:5b:41:13:4f:d9:c5:4e:39:c8:c1:25:b7:48:
                    24:6f:19:5c:a7:22:73:3a:89:16:b1:f9:d2:b1:37:
                    b5:b3:84:53:2b:fd:3b:a0:7a:c4:94:be:45:69:8c:
                    7d:0d:71:88:16:01:e1:33:c6:27:9e:53:e7:e3:4e:
                    0e:ee:4c:7e:17:d7:bd:28:dc:f3:c2:4a:dd:fb:db:
                    1e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:62:AD:BB:35:47:2C:B2:00:F4:77:CC:08:6A:0F:54:59:0D:78:9A
            X509v3 Authority Key Identifier:
                keyid:9F:16:E4:EC:CD:A4:B9:4C:A4:93:84:52:89:B3:DA:50:83:2A:91:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/9F16E4ECCDA4B94CA493845289B3DA50832A911E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F16E4ECCDA4B94CA493845289B3DA50832A911E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/323830343a343561383a3230303a3a2f34302d3430203d3e20323636393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45a8:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:3c:1f:47:49:f4:94:0c:cb:8f:aa:77:d2:62:ce:7a:99:34:
         4e:5f:12:80:63:94:94:e2:15:0f:b0:93:42:e0:83:fb:b4:d7:
         4c:a3:0a:75:44:08:14:c4:e9:e3:cf:08:78:49:70:03:86:8a:
         60:74:0d:52:f5:8a:83:a1:c7:25:8d:8a:f5:e8:27:f0:51:b1:
         3c:fd:85:e6:0c:ff:8e:fb:16:88:d0:b1:7f:37:f1:3a:ed:ad:
         28:0f:4d:34:c2:a6:20:da:18:5e:c5:b8:d3:70:91:cd:6e:04:
         9f:f3:ca:85:e6:04:c1:ad:32:94:85:bf:d5:6e:8e:7b:99:58:
         d3:59:ba:dc:87:09:5a:7f:c5:d3:b1:9d:ba:6a:0a:5e:c2:f2:
         e4:ef:6a:2d:6c:7e:03:3c:0a:72:6c:d6:fc:fb:fa:88:d0:bc:
         26:df:f9:e1:6d:05:b6:06:eb:9a:f2:04:3d:e0:2e:ff:8b:9d:
         ce:6d:08:35:ca:22:08:03:84:fa:ae:eb:89:d6:b4:d9:cf:a5:
         92:b5:31:b4:68:e6:c3:1d:70:4c:c3:94:71:99:33:b1:df:28:
         32:7f:ba:16:5a:5e:c2:08:2b:ed:a7:d7:42:00:83:bc:5d:30:
         b8:a8:6c:93:41:75:37:17:fb:af:fb:3a:15:e4:82:03:fa:be:
         a0:b6:d7:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZRJ/O/5jNsBRXzEzmdO7hHgsUiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYxNkU0RUNDREE0Qjk0Q0E0OTM4NDUyODlCM0RBNTA4
MzJBOTExRTAeFw0yMjAxMjUxODQ4MTRaFw0yMzAxMjQxODUzMTRaMDMxMTAvBgNV
BAMTKEM1NjJBREJCMzU0NzJDQjIwMEY0NzdDQzA4NkEwRjU0NTkwRDc4OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC8F2/FsiE3nP9/erOt5YFy2wz
vG2UTkV971WQqpSXMR8Rh/mVtndRf398nzeKJRV88FppO8e2kTR6goZiPlhKsQEE
KMcLYy69U/WIkSESp7A1l2ZPNjtAnCPQiTVe+99/IuxE/zVbkKyJ3bvKlacDBJuj
54cXjyV3lbC2HI2nYcFV92flpTCMv34xX0MmZCeNuyPOXvlRlGhwuIeWbbbkCB4Y
jtRuBj6IM2lzccfo9UVvmvRwW0ETT9nFTjnIwSW3SCRvGVynInM6iRax+dKxN7Wz
hFMr/TugesSUvkVpjH0NcYgWAeEzxieeU+fjTg7uTH4X170o3PPCSt372x5lAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxWKtuzVHLLIA9HfMCGoPVFkNeJowHwYDVR0j
BBgwFoAUnxbk7M2kuUykk4RSibPaUIMqkR4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1lVemNzcUhqRlV4a3NreGh0SEp3NE0zWmVQdmE0Tm5rVVQ1eFRDRnlZ
UG4vMC85RjE2RTRFQ0NEQTRCOTRDQTQ5Mzg0NTI4OUIzREE1MDgzMkE5MTFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlGMTZFNEVDQ0RBNEI5NENB
NDkzODQ1Mjg5QjNEQTUwODMyQTkxMUUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdZVXpjc3FIakZVeGtza3hodEhKdzRNM1plUHZhNE5ua1VUNXhUQ0Z5WVBuLzAv
MzIzODMwMzQzYTM0MzU2MTM4M2EzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzYzOTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBEWoAjANBgkqhkiG9w0BAQsFAAOC
AQEAfTwfR0n0lAzLj6p30mLOepk0Tl8SgGOUlOIVD7CTQuCD+7TXTKMKdUQIFMTp
488IeElwA4aKYHQNUvWKg6HHJY2K9egn8FGxPP2F5gz/jvsWiNCxfzfxOu2tKA9N
NMKmINoYXsW403CRzW4En/PKheYEwa0ylIW/1W6Oe5lY01m63IcJWn/F07GdumoK
XsLy5O9qLWx+AzwKcmzW/Pv6iNC8Jt/54W0FtgbrmvIEPeAu/4udzm0INcoiCAOE
+q7rida02c+lkrUxtGjmwx1wTMOUcZkzsd8oMn+6Flpewggr7afXQgCDvF0wuKhs
k0F1Nxf7r/s6FeSCA/q+oLbXmg==
-----END CERTIFICATE-----