Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/323830343a6464303a3130303a3a2f34382d3438203d3e203238363339.roa
File:                     323830343a6464303a3130303a3a2f34382d3438203d3e203238363339.roa (raw, json)
Hash identifier:          Os4bBXawUsbSgKg7zVaDu2n35UFX4CILQjawOzijrgc=
Subject key identifier:   23:49:EC:19:9F:0F:61:71:99:E7:D6:E3:2D:00:02:E2:BF:2C:08:59
Certificate issuer:       /CN=3EBC3FE2232091904C043FBCE9FE1663C1E92CBB
Certificate serial:       5110B9A5D4ED8AA7E5F41AFFCC52A76C1624DB02
Authority key identifier: 3E:BC:3F:E2:23:20:91:90:4C:04:3F:BC:E9:FE:16:63:C1:E9:2C:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/323830343a6464303a3130303a3a2f34382d3438203d3e203238363339.roa
Signing time:             Fri 02 Sep 2022 18:55:27 +0000
ROA not before:           Fri 02 Sep 2022 18:50:27 +0000
ROA not after:            Fri 01 Sep 2023 18:55:27 +0000
asID:                     28639
IP address blocks:        2804:dd0:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:10:b9:a5:d4:ed:8a:a7:e5:f4:1a:ff:cc:52:a7:6c:16:24:db:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EBC3FE2232091904C043FBCE9FE1663C1E92CBB
        Validity
            Not Before: Sep  2 18:50:27 2022 GMT
            Not After : Sep  1 18:55:27 2023 GMT
        Subject: CN=2349EC199F0F617199E7D6E32D0002E2BF2C0859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a4:74:47:54:de:b0:aa:77:d2:06:f6:6d:32:
                    97:8c:51:e6:f4:ec:0e:6e:29:37:ef:12:2b:02:24:
                    e2:99:d9:27:e9:5e:99:f3:bb:a0:a8:57:86:7b:81:
                    37:d8:c5:09:3a:d4:36:d3:3f:18:1f:b2:16:b6:9e:
                    3a:ca:30:f8:04:36:9b:f9:34:c1:c7:a8:ff:ad:23:
                    f0:f7:2f:33:98:13:c9:35:44:2a:3e:f0:4a:c1:f5:
                    f6:1c:4a:b6:3c:1f:9e:b0:56:de:35:df:f3:a3:2d:
                    b8:8d:99:6b:c2:7c:fa:bc:a8:8f:4d:51:35:b0:f3:
                    3c:5f:59:b9:be:c3:cd:f5:25:41:fb:5f:ed:0b:24:
                    a2:f1:0f:63:f9:2c:e1:bc:21:d3:72:15:92:8a:47:
                    1f:31:1b:d3:3d:97:e9:76:35:67:20:59:f9:82:5f:
                    5a:62:08:d3:40:1b:2a:f6:54:53:c2:1b:3f:34:56:
                    bf:01:95:8f:00:73:5e:ba:c5:d7:10:a5:c1:b3:a9:
                    fa:6a:1a:17:7d:80:d7:c1:b2:4f:52:94:4d:c9:ad:
                    fb:b4:d0:1c:2c:7c:9e:3f:29:84:95:98:17:8b:c4:
                    b6:f6:95:37:c2:45:9f:14:9b:2d:c3:01:e1:97:6f:
                    de:f6:ad:3b:e2:61:c2:88:cc:cf:5c:96:90:1a:9c:
                    ec:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:49:EC:19:9F:0F:61:71:99:E7:D6:E3:2D:00:02:E2:BF:2C:08:59
            X509v3 Authority Key Identifier:
                keyid:3E:BC:3F:E2:23:20:91:90:4C:04:3F:BC:E9:FE:16:63:C1:E9:2C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/323830343a6464303a3130303a3a2f34382d3438203d3e203238363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dd0:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:9c:97:01:b1:8d:52:d4:c6:af:43:21:b1:0e:b6:59:ce:35:
         db:54:b8:b5:8f:3a:90:1f:0c:93:2b:7f:79:ff:cb:03:5f:7f:
         57:44:89:c4:ef:50:81:89:68:13:80:f3:2c:f7:cd:79:3f:5b:
         ac:f5:14:c1:0f:79:9e:82:6e:05:71:62:02:23:d2:67:10:72:
         48:3e:da:95:48:f4:c5:75:ac:92:c6:dd:c7:05:b2:0f:f3:f3:
         68:24:78:e7:5a:49:26:af:71:84:67:74:c0:d1:93:89:f3:84:
         f4:4e:f1:f8:68:2e:0a:0d:46:b5:da:13:bd:c4:79:d1:91:46:
         a9:5d:e6:e6:59:bf:f2:eb:d4:9e:97:c8:86:99:c7:ac:c3:5d:
         39:4c:9f:57:6a:67:26:69:d5:5a:90:e9:d2:b3:f8:53:d5:8a:
         b8:27:28:1a:bc:44:5c:56:2e:0c:1e:da:bb:d8:0f:e7:50:0d:
         13:2e:50:a0:75:ba:ce:e3:65:30:06:d5:4d:8e:37:aa:af:6c:
         96:14:cc:0d:fc:dc:46:2f:73:53:f0:65:86:ac:d7:cf:de:ef:
         20:28:f4:86:54:67:b9:a3:4f:1b:bd:d1:f9:d9:f3:6c:ea:eb:
         a9:72:e8:a8:3e:e0:b0:60:ed:b6:de:1b:17:c6:1e:ce:1f:d5:
         89:f6:9f:ff
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUURC5pdTtiqfl9Br/zFKnbBYk2wIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VCQzNGRTIyMzIwOTE5MDRDMDQzRkJDRTlGRTE2NjND
MUU5MkNCQjAeFw0yMjA5MDIxODUwMjdaFw0yMzA5MDExODU1MjdaMDMxMTAvBgNV
BAMTKDIzNDlFQzE5OUYwRjYxNzE5OUU3RDZFMzJEMDAwMkUyQkYyQzA4NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopHRHVN6wqnfSBvZtMpeMUeb0
7A5uKTfvEisCJOKZ2SfpXpnzu6CoV4Z7gTfYxQk61DbTPxgfsha2njrKMPgENpv5
NMHHqP+tI/D3LzOYE8k1RCo+8ErB9fYcSrY8H56wVt413/OjLbiNmWvCfPq8qI9N
UTWw8zxfWbm+w831JUH7X+0LJKLxD2P5LOG8IdNyFZKKRx8xG9M9l+l2NWcgWfmC
X1piCNNAGyr2VFPCGz80Vr8BlY8Ac166xdcQpcGzqfpqGhd9gNfBsk9SlE3Jrfu0
0BwsfJ4/KYSVmBeLxLb2lTfCRZ8Umy3DAeGXb972rTviYcKIzM9clpAanOxXAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUI0nsGZ8PYXGZ59bjLQAC4r8sCFkwHwYDVR0j
BBgwFoAUPrw/4iMgkZBMBD+86f4WY8HpLLswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXlEMWVEeDZxS3hFY1VqOHJ1YThRTUs4QmZ2dkFqU25zV1JRcDN1clBO
WGovMC8zRUJDM0ZFMjIzMjA5MTkwNEMwNDNGQkNFOUZFMTY2M0MxRTkyQ0JCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNFQkMzRkUyMjMyMDkxOTA0
QzA0M0ZCQ0U5RkUxNjYzQzFFOTJDQkIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV5RDFlRHg2cUt4RWNVajhydWE4UU1LOEJmdnZBalNuc1dSUXAzdXJQTlhqLzAv
MzIzODMwMzQzYTY0NjQzMDNhMzEzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzODM2MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEDdABADANBgkqhkiG9w0BAQsFAAOCAQEA
FJyXAbGNUtTGr0MhsQ62Wc4121S4tY86kB8Mkyt/ef/LA19/V0SJxO9QgYloE4Dz
LPfNeT9brPUUwQ95noJuBXFiAiPSZxBySD7alUj0xXWsksbdxwWyD/PzaCR451pJ
Jq9xhGd0wNGTifOE9E7x+GguCg1GtdoTvcR50ZFGqV3m5lm/8uvUnpfIhpnHrMNd
OUyfV2pnJmnVWpDp0rP4U9WKuCcoGrxEXFYuDB7au9gP51ANEy5QoHW6zuNlMAbV
TY43qq9slhTMDfzcRi9zU/BlhqzXz97vICj0hlRnuaNPG73R+dnzbOrrqXLoqD7g
sGDttt4bF8Yezh/Vifaf/w==
-----END CERTIFICATE-----