Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/323830343a336464303a3a2f33322d3332203d3e20323636353535.roa
File:                     323830343a336464303a3a2f33322d3332203d3e20323636353535.roa (raw, json)
Hash identifier:          Opv1x4eKfNCyf4Pb9LPQvHztMkNsF5z0U8N4f8PX/hM=
Subject key identifier:   25:87:0F:8E:A7:85:0A:9E:D6:4E:1D:71:28:88:6D:67:74:87:62:59
Certificate issuer:       /CN=D7F9A5F1DEF91840838A45D3C3174E077F15F3DA
Certificate serial:       1F6668606D91D774E02CE5847CE0C87B17C13C44
Authority key identifier: D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/323830343a336464303a3a2f33322d3332203d3e20323636353535.roa
Signing time:             Thu 06 Oct 2022 17:40:04 +0000
ROA not before:           Thu 06 Oct 2022 17:35:04 +0000
ROA not after:            Thu 05 Oct 2023 17:40:04 +0000
asID:                     266555
IP address blocks:        2804:3dd0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:66:68:60:6d:91:d7:74:e0:2c:e5:84:7c:e0:c8:7b:17:c1:3c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F9A5F1DEF91840838A45D3C3174E077F15F3DA
        Validity
            Not Before: Oct  6 17:35:04 2022 GMT
            Not After : Oct  5 17:40:04 2023 GMT
        Subject: CN=25870F8EA7850A9ED64E1D7128886D6774876259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:a9:a1:bd:66:41:40:fb:46:55:c5:da:af:
                    8e:bf:7e:b6:dc:33:a2:e6:58:f9:d6:53:1f:cf:67:
                    99:aa:19:6e:31:c5:58:10:b5:ec:25:3a:29:49:ab:
                    0d:61:43:d8:f4:65:52:71:c7:41:6b:42:87:36:e7:
                    98:49:9a:56:e2:d6:ab:8a:9a:4c:38:15:54:24:7e:
                    e5:19:e7:da:25:2b:8f:d4:dd:a9:8d:dd:cb:b9:50:
                    b0:ca:c3:1f:be:3d:ff:9b:e5:d1:54:6d:79:ce:bc:
                    8c:91:0c:9c:cd:20:a5:6d:c7:d7:cd:be:47:ba:cb:
                    6f:3b:cd:fe:e8:9c:fc:a7:8a:f6:a6:9a:8d:f6:52:
                    09:49:b0:fc:d7:77:55:86:3c:54:27:c4:cd:36:34:
                    ae:e1:f3:cd:ac:9b:c6:22:42:4d:69:a7:f4:4d:6d:
                    a8:4d:c0:69:b6:18:52:02:8a:0f:e5:54:5c:a1:63:
                    23:fd:38:e3:6f:a9:e1:33:5a:1c:7f:98:7b:21:7a:
                    b5:a0:f9:a0:23:42:15:4d:a7:bf:d2:9d:27:d8:7c:
                    06:00:40:0b:3a:e8:b7:5f:3f:e1:ef:52:e5:18:d9:
                    1f:8a:88:e1:76:20:ef:74:0f:50:49:03:e5:3a:ac:
                    00:52:28:2c:e0:d3:f3:d8:07:a1:80:fe:da:50:22:
                    da:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:87:0F:8E:A7:85:0A:9E:D6:4E:1D:71:28:88:6D:67:74:87:62:59
            X509v3 Authority Key Identifier:
                keyid:D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/323830343a336464303a3a2f33322d3332203d3e20323636353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:e4:35:a2:3b:e2:fa:7b:a1:89:a3:8f:c3:ee:f3:d5:5c:b7:
         fb:48:f7:17:94:6e:7f:da:3d:cf:d5:a6:5e:30:28:c0:a5:39:
         45:4d:c3:04:c7:6f:26:98:a3:2a:68:29:af:98:59:e6:dd:34:
         a1:a3:80:f6:ce:3b:63:a1:51:ca:7f:fd:4d:b0:11:7a:6e:f5:
         ec:6f:33:cc:00:d1:8d:f3:0d:5f:83:b8:57:3f:12:f8:4c:03:
         13:00:00:a2:c2:27:8d:e4:45:0c:bc:0f:60:29:54:ea:c6:a6:
         a1:e0:19:a3:4a:d7:ed:f9:ce:e4:8b:1d:03:8c:11:9d:6e:80:
         2d:84:84:6a:75:c4:dd:17:c5:cc:b3:59:a7:ad:88:8a:d0:b8:
         f3:a2:8e:e6:dc:b3:86:84:62:f2:2f:02:ae:64:ea:f5:51:1d:
         48:bb:1e:16:19:66:21:e1:b3:2c:37:79:60:9a:5f:07:96:17:
         24:46:34:0c:1e:1f:93:75:0d:fc:10:81:92:2e:53:44:01:d5:
         a9:0c:84:b4:f0:af:84:5d:3e:f2:26:1f:9b:ae:7d:86:dd:2e:
         49:6d:1b:91:90:b9:79:9a:8f:92:6c:95:ce:bc:91:04:7a:5f:
         5a:c4:f4:db:e6:15:f9:cc:e7:83:d1:07:78:91:8b:74:dd:17:
         6c:52:63:5c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUH2ZoYG2R13TgLOWEfODIexfBPEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdGOUE1RjFERUY5MTg0MDgzOEE0NUQzQzMxNzRFMDc3
RjE1RjNEQTAeFw0yMjEwMDYxNzM1MDRaFw0yMzEwMDUxNzQwMDRaMDMxMTAvBgNV
BAMTKDI1ODcwRjhFQTc4NTBBOUVENjRFMUQ3MTI4ODg2RDY3NzQ4NzYyNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9PKmhvWZBQPtGVcXar46/frbc
M6LmWPnWUx/PZ5mqGW4xxVgQtewlOilJqw1hQ9j0ZVJxx0FrQoc255hJmlbi1quK
mkw4FVQkfuUZ59olK4/U3amN3cu5ULDKwx++Pf+b5dFUbXnOvIyRDJzNIKVtx9fN
vke6y287zf7onPynivammo32UglJsPzXd1WGPFQnxM02NK7h882sm8YiQk1pp/RN
bahNwGm2GFICig/lVFyhYyP9OONvqeEzWhx/mHsherWg+aAjQhVNp7/SnSfYfAYA
QAs66LdfP+HvUuUY2R+KiOF2IO90D1BJA+U6rABSKCzg0/PYB6GA/tpQItpxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJYcPjqeFCp7WTh1xKIhtZ3SHYlkwHwYDVR0j
BBgwFoAU1/ml8d75GECDikXTwxdOB38V89owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVWOWlnTm45YjFVZUZacHJuWWJQanlOaTdXWVp1Wkp4NXB4WHpaVloz
U2UvMC9EN0Y5QTVGMURFRjkxODQwODM4QTQ1RDNDMzE3NEUwNzdGMTVGM0RBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q3RjlBNUYxREVGOTE4NDA4
MzhBNDVEM0MzMTc0RTA3N0YxNUYzREEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRFVjlpZ05uOWIxVWVGWnByblliUGp5Tmk3V1ladVpKeDVweFh6WlZaM1NlLzAv
MzIzODMwMzQzYTMzNjQ2NDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzUzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ90DANBgkqhkiG9w0BAQsFAAOCAQEAS+Q1ojvi
+nuhiaOPw+7z1Vy3+0j3F5Ruf9o9z9WmXjAowKU5RU3DBMdvJpijKmgpr5hZ5t00
oaOA9s47Y6FRyn/9TbARem717G8zzADRjfMNX4O4Vz8S+EwDEwAAosInjeRFDLwP
YClU6samoeAZo0rX7fnO5IsdA4wRnW6ALYSEanXE3RfFzLNZp62IitC486KO5tyz
hoRi8i8CrmTq9VEdSLseFhlmIeGzLDd5YJpfB5YXJEY0DB4fk3UN/BCBki5TRAHV
qQyEtPCvhF0+8iYfm659ht0uSW0bkZC5eZqPkmyVzryRBHpfWsT02+YV+czng9EH
eJGLdN0XbFJjXA==
-----END CERTIFICATE-----