Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a323a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a323a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          +kHdAzzX9roNZuWPVd6YGmkl8gQRJwdGCzlHqeMPl68=
Subject key identifier:   FA:E6:A9:F2:37:70:28:4B:CB:4D:A6:52:48:B7:6F:DF:67:31:89:E8
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       7D46D1A55372CE49A7D3679F08813F7018F953F6
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a323a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:00 +0000
ROA not before:           Thu 03 Aug 2023 13:04:00 +0000
ROA not after:            Thu 01 Aug 2024 13:09:00 +0000
asID:                     262617
IP address blocks:        2804:90c:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:46:d1:a5:53:72:ce:49:a7:d3:67:9f:08:81:3f:70:18:f9:53:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:00 2023 GMT
            Not After : Aug  1 13:09:00 2024 GMT
        Subject: CN=FAE6A9F23770284BCB4DA65248B76FDF673189E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:d4:63:4f:56:42:74:f7:02:26:e5:14:ad:
                    bf:77:e1:c9:41:6a:eb:0f:8d:61:96:18:a3:a5:23:
                    2f:a5:96:ca:15:38:08:8a:2f:94:94:fa:ab:75:04:
                    56:e4:55:92:a0:6f:7f:73:5d:f5:b5:79:05:87:6e:
                    a6:3e:24:ca:ab:5d:47:4d:3b:97:e5:64:11:52:d5:
                    fd:b8:7a:e4:08:e3:b0:a2:6b:d4:69:b9:2f:2a:9f:
                    0a:6e:58:fe:41:95:36:f1:e0:43:49:d9:05:e7:3a:
                    c3:28:46:3f:67:68:39:72:9b:4d:88:58:be:1d:fc:
                    fb:56:d1:d0:09:85:64:74:0c:e5:a4:e0:c4:c3:80:
                    b7:9b:81:95:ba:39:de:0f:b4:f5:aa:59:23:6c:aa:
                    74:ab:07:93:89:6a:eb:ce:43:7b:2d:24:c7:92:29:
                    6a:16:d4:f4:2b:31:be:15:66:86:e4:a7:ed:4e:80:
                    90:39:91:63:7a:dd:39:6b:5b:15:ad:22:98:94:d1:
                    38:80:3f:03:c8:0a:46:69:38:12:95:9c:e9:f5:b8:
                    2a:9a:b9:35:5d:dd:5c:36:65:ba:a1:54:60:f2:ce:
                    02:e6:0b:82:49:85:9e:7d:29:cd:c7:2e:42:50:b9:
                    0f:a4:52:d3:56:56:26:bd:a3:37:11:53:2d:75:d7:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E6:A9:F2:37:70:28:4B:CB:4D:A6:52:48:B7:6F:DF:67:31:89:E8
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a323a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:af:d1:d9:99:16:2c:6e:69:e5:73:a1:e1:c0:92:30:e4:e5:
         87:f3:d7:e4:0c:0f:d7:3b:b0:a1:0f:83:f1:28:25:39:95:0a:
         b2:ec:58:61:fd:75:1d:81:2d:72:d2:e3:53:7b:11:ac:78:1c:
         a2:63:aa:db:63:20:63:a8:1f:96:a5:5f:e3:21:06:e0:b7:c6:
         e7:23:aa:cc:e2:eb:a4:c0:dc:29:57:2a:ba:a1:91:ce:7c:97:
         1d:16:1b:d6:96:4f:e6:3e:6f:a1:f6:23:d6:90:bc:c3:98:5e:
         5a:56:a8:c8:df:01:15:0e:ce:30:51:05:7b:59:ae:92:5b:83:
         49:68:7f:3b:94:db:2f:06:97:ff:57:a2:6a:f0:a4:1a:23:41:
         46:5a:c4:3a:ba:24:56:10:4a:92:c4:48:bf:1e:49:25:43:9c:
         66:15:07:4c:b5:ed:5c:c4:df:18:fe:67:7d:8d:60:ee:38:74:
         f4:a5:26:eb:84:f7:1e:76:e3:c9:9d:c1:cc:ca:86:51:ca:8d:
         79:ef:b3:04:3b:ce:3b:b7:e3:1b:7d:d2:80:7d:9d:b7:2b:19:
         e2:3a:6e:19:f1:21:f9:9e:07:14:ca:ea:52:37:54:71:d7:27:
         f9:5c:fa:05:2d:a8:d7:9d:98:bd:02:25:27:7f:fb:bd:a7:57:
         31:13:92:8f
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUfUbRpVNyzkmn02efCIE/cBj5U/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlBRjI2N0Y5QjI0N0ZCMENGQjM3RjIzMkI1QkQwODg5
Qjk2QjEwMjAeFw0yMzA4MDMxMzA0MDBaFw0yNDA4MDExMzA5MDBaMDMxMTAvBgNV
BAMTKEZBRTZBOUYyMzc3MDI4NEJDQjREQTY1MjQ4Qjc2RkRGNjczMTg5RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//tRjT1ZCdPcCJuUUrb934clB
ausPjWGWGKOlIy+llsoVOAiKL5SU+qt1BFbkVZKgb39zXfW1eQWHbqY+JMqrXUdN
O5flZBFS1f24euQI47Cia9RpuS8qnwpuWP5BlTbx4ENJ2QXnOsMoRj9naDlym02I
WL4d/PtW0dAJhWR0DOWk4MTDgLebgZW6Od4PtPWqWSNsqnSrB5OJauvOQ3stJMeS
KWoW1PQrMb4VZobkp+1OgJA5kWN63TlrWxWtIpiU0TiAPwPICkZpOBKVnOn1uCqa
uTVd3Vw2ZbqhVGDyzgLmC4JJhZ59Kc3HLkJQuQ+kUtNWVia9ozcRUy1112+xAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQU+uap8jdwKEvLTaZSSLdv32cxiegwHwYDVR0j
BBgwFoAUua8mf5skf7DPs38jK1vQiJuWsQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMC9COUFGMjY3RjlCMjQ3RkIwQ0ZCMzdGMjMyQjVCRDA4ODlCOTZCMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5QUYyNjdGOUIyNDdGQjBD
RkIzN0YyMzJCNUJEMDg4OUI5NkIxMDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzAv
MzIzODMwMzQzYTM5MzA2MzNhMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2
MzIzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBAkMAAIwDQYJKoZIhvcNAQELBQADggEBAEOv
0dmZFixuaeVzoeHAkjDk5Yfz1+QMD9c7sKEPg/EoJTmVCrLsWGH9dR2BLXLS41N7
Eax4HKJjqttjIGOoH5alX+MhBuC3xucjqszi66TA3ClXKrqhkc58lx0WG9aWT+Y+
b6H2I9aQvMOYXlpWqMjfARUOzjBRBXtZrpJbg0lofzuU2y8Gl/9XomrwpBojQUZa
xDq6JFYQSpLESL8eSSVDnGYVB0y17VzE3xj+Z32NYO44dPSlJuuE9x5248mdwczK
hlHKjXnvswQ7zju34xt90oB9nbcrGeI6bhnxIfmeBxTK6lI3VHHXJ/lc+gUtqNed
mL0CJSd/+72nVzETko8=
-----END CERTIFICATE-----