Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/323830343a6464303a3a2f33322d3333203d3e203238363339.roa
File:                     323830343a6464303a3a2f33322d3333203d3e203238363339.roa (raw, json)
Hash identifier:          1yRvMQuMoxtUpBihJ2dU49scSvNrEbOLvoiy3ptYtxE=
Subject key identifier:   77:9F:DA:46:86:8A:0D:33:A7:6A:BD:23:1E:0A:C1:06:63:10:DA:EA
Certificate issuer:       /CN=3EBC3FE2232091904C043FBCE9FE1663C1E92CBB
Certificate serial:       138A121DBE7144AD9CED2605D292251CF9281387
Authority key identifier: 3E:BC:3F:E2:23:20:91:90:4C:04:3F:BC:E9:FE:16:63:C1:E9:2C:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/323830343a6464303a3a2f33322d3333203d3e203238363339.roa
Signing time:             Fri 02 Sep 2022 18:55:26 +0000
ROA not before:           Fri 02 Sep 2022 18:50:26 +0000
ROA not after:            Fri 01 Sep 2023 18:55:26 +0000
asID:                     28639
IP address blocks:        2804:dd0::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8a:12:1d:be:71:44:ad:9c:ed:26:05:d2:92:25:1c:f9:28:13:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EBC3FE2232091904C043FBCE9FE1663C1E92CBB
        Validity
            Not Before: Sep  2 18:50:26 2022 GMT
            Not After : Sep  1 18:55:26 2023 GMT
        Subject: CN=779FDA46868A0D33A76ABD231E0AC1066310DAEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:98:c9:10:4e:52:19:12:4c:8f:f5:15:31:
                    35:cf:9e:2e:5d:b7:3f:4d:83:ba:4c:d9:01:ab:ee:
                    a4:73:ce:fc:27:c6:fc:bf:91:75:99:8f:96:8f:1f:
                    38:47:64:b2:5f:f7:e2:c3:96:28:a5:e4:7a:af:ae:
                    59:d6:85:2a:82:be:87:65:12:f8:aa:d1:d6:a8:26:
                    ec:4d:74:05:25:53:14:0f:f6:f9:d6:9c:f4:00:bf:
                    2a:86:d1:a4:22:85:28:93:56:21:a2:ff:68:aa:54:
                    22:24:e1:7b:87:96:cb:e8:ce:a0:09:ae:cf:84:0a:
                    e5:80:b1:62:23:cf:9d:08:49:74:f9:17:57:4f:eb:
                    c2:52:95:7c:33:fe:7a:35:e2:dd:91:52:72:c3:fe:
                    14:f1:14:c4:67:be:f8:33:8a:6b:b9:17:b8:55:1e:
                    95:1d:5f:0f:cc:28:b3:1b:09:39:cf:c4:af:a2:7d:
                    f6:06:94:c2:fd:2c:84:ce:34:76:1e:09:8f:de:f2:
                    90:9d:14:b6:06:bd:46:20:c6:68:7c:f0:22:05:30:
                    be:ea:f7:9a:a5:32:a9:4c:5c:22:95:67:f4:fd:fc:
                    82:b5:3a:9e:9a:3f:7b:c6:1d:41:83:ff:30:bd:55:
                    8b:31:d1:39:68:fe:7c:d2:de:b9:d8:ab:4c:14:d3:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9F:DA:46:86:8A:0D:33:A7:6A:BD:23:1E:0A:C1:06:63:10:DA:EA
            X509v3 Authority Key Identifier:
                keyid:3E:BC:3F:E2:23:20:91:90:4C:04:3F:BC:E9:FE:16:63:C1:E9:2C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/323830343a6464303a3a2f33322d3333203d3e203238363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:48:bc:44:ee:43:ad:69:8c:e3:1e:2a:16:ec:27:79:9d:cb:
         3d:03:85:64:3d:3f:52:76:46:13:c8:bb:43:25:82:e9:7b:ac:
         e1:1a:4e:0d:52:48:05:7e:61:09:2a:fb:a1:fa:5e:2f:15:24:
         74:1e:ee:97:aa:e4:e8:7b:6d:c4:c6:0d:1b:1c:d9:72:65:3e:
         dd:d1:22:65:f6:74:10:9c:2b:9a:33:ff:0e:cf:c7:27:c4:88:
         b1:67:35:9b:24:e7:82:59:ad:cf:c3:0d:1d:99:04:b9:c4:de:
         7e:85:63:c7:2d:40:3a:04:bd:f3:4a:b6:6f:3c:17:08:b3:a7:
         c1:f8:b7:11:2c:86:8c:5b:ed:f0:5e:cd:08:c5:ee:25:82:43:
         88:b7:f9:0a:9d:45:88:5d:b6:03:ab:7a:a8:98:c7:7d:79:61:
         58:32:e6:fc:9a:57:65:b8:32:a3:68:b4:a0:71:f6:7e:d5:74:
         df:f1:73:73:ad:46:ee:e3:f2:bd:ae:0b:82:41:54:88:6c:14:
         b4:42:f0:87:7b:6e:6c:03:b9:e1:f3:0c:8e:12:dd:d7:1a:90:
         25:34:be:1b:3f:a3:7f:8b:d4:59:50:f3:a0:09:ba:07:6e:07:
         9d:3f:2d:09:fb:ae:a3:fe:73:8f:c6:42:12:92:1f:80:b3:ca:
         02:3a:ff:8f
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUE4oSHb5xRK2c7SYF0pIlHPkoE4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VCQzNGRTIyMzIwOTE5MDRDMDQzRkJDRTlGRTE2NjND
MUU5MkNCQjAeFw0yMjA5MDIxODUwMjZaFw0yMzA5MDExODU1MjZaMDMxMTAvBgNV
BAMTKDc3OUZEQTQ2ODY4QTBEMzNBNzZBQkQyMzFFMEFDMTA2NjMxMERBRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1JjJEE5SGRJMj/UVMTXPni5d
tz9Ng7pM2QGr7qRzzvwnxvy/kXWZj5aPHzhHZLJf9+LDliil5HqvrlnWhSqCvodl
Eviq0daoJuxNdAUlUxQP9vnWnPQAvyqG0aQihSiTViGi/2iqVCIk4XuHlsvozqAJ
rs+ECuWAsWIjz50ISXT5F1dP68JSlXwz/no14t2RUnLD/hTxFMRnvvgzimu5F7hV
HpUdXw/MKLMbCTnPxK+iffYGlML9LITONHYeCY/e8pCdFLYGvUYgxmh88CIFML7q
95qlMqlMXCKVZ/T9/IK1Op6aP3vGHUGD/zC9VYsx0Tlo/nzS3rnYq0wU05u7AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUd5/aRoaKDTOnar0jHgrBBmMQ2uowHwYDVR0j
BBgwFoAUPrw/4iMgkZBMBD+86f4WY8HpLLswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXlEMWVEeDZxS3hFY1VqOHJ1YThRTUs4QmZ2dkFqU25zV1JRcDN1clBO
WGovMC8zRUJDM0ZFMjIzMjA5MTkwNEMwNDNGQkNFOUZFMTY2M0MxRTkyQ0JCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNFQkMzRkUyMjMyMDkxOTA0
QzA0M0ZCQ0U5RkUxNjYzQzFFOTJDQkIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV5RDFlRHg2cUt4RWNVajhydWE4UU1LOEJmdnZBalNuc1dSUXAzdXJQTlhqLzAv
MzIzODMwMzQzYTY0NjQzMDNhM2EyZjMzMzIyZDMzMzMyMDNkM2UyMDMyMzgzNjMz
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA3QMA0GCSqGSIb3DQEBCwUAA4IBAQBYSLxE7kOtaYzj
HioW7Cd5ncs9A4VkPT9SdkYTyLtDJYLpe6zhGk4NUkgFfmEJKvuh+l4vFSR0Hu6X
quToe23Exg0bHNlyZT7d0SJl9nQQnCuaM/8Oz8cnxIixZzWbJOeCWa3Pww0dmQS5
xN5+hWPHLUA6BL3zSrZvPBcIs6fB+LcRLIaMW+3wXs0Ixe4lgkOIt/kKnUWIXbYD
q3qomMd9eWFYMub8mldluDKjaLSgcfZ+1XTf8XNzrUbu4/K9rguCQVSIbBS0QvCH
e25sA7nh8wyOEt3XGpAlNL4bP6N/i9RZUPOgCboHbgedPy0J+66j/nOPxkISkh+A
s8oCOv+P
-----END CERTIFICATE-----