Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/323830343a343466383a3a2f33322d3332203d3e20323637363634.roa
File:                     323830343a343466383a3a2f33322d3332203d3e20323637363634.roa (raw, json)
Hash identifier:          88GDSEd0yrd5hue8dgVCpTqYGznp9qWmX1/HHh0jIzE=
Subject key identifier:   85:32:AA:F4:28:63:C7:48:69:02:DB:06:E1:E7:56:56:83:CB:10:E4
Certificate issuer:       /CN=B3EE96877918306C911001389F0A3D28BB6AC25C
Certificate serial:       32BE6C7DA107ABE1896CEE337CE43A8FEBC4E5A5
Authority key identifier: B3:EE:96:87:79:18:30:6C:91:10:01:38:9F:0A:3D:28:BB:6A:C2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3EE96877918306C911001389F0A3D28BB6AC25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/323830343a343466383a3a2f33322d3332203d3e20323637363634.roa
Signing time:             Thu 31 Mar 2022 16:48:14 +0000
ROA not before:           Thu 31 Mar 2022 16:43:14 +0000
ROA not after:            Thu 30 Mar 2023 16:48:14 +0000
asID:                     267664
IP address blocks:        2804:44f8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:be:6c:7d:a1:07:ab:e1:89:6c:ee:33:7c:e4:3a:8f:eb:c4:e5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3EE96877918306C911001389F0A3D28BB6AC25C
        Validity
            Not Before: Mar 31 16:43:14 2022 GMT
            Not After : Mar 30 16:48:14 2023 GMT
        Subject: CN=8532AAF42863C7486902DB06E1E7565683CB10E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d4:c7:f9:02:1e:13:d4:f7:0a:0d:b4:27:7c:
                    c8:f2:a1:e3:a3:6a:8e:d0:d6:8f:8c:d3:06:2b:75:
                    c3:94:83:2a:3b:1c:69:0e:31:9d:fa:3f:c2:0e:f5:
                    ad:b7:fd:33:5e:e4:ee:f8:70:3d:e1:8b:aa:70:71:
                    e4:3b:aa:53:da:ae:f7:e8:f5:6c:6f:6c:26:1b:23:
                    6b:e9:1e:8b:c8:1d:c3:d6:1e:a1:a6:f6:bf:e1:00:
                    6f:cb:ae:9b:d8:cd:44:e6:86:ed:3a:44:19:62:95:
                    45:04:df:a8:ff:ed:7c:53:56:f8:ae:2f:29:37:bb:
                    71:af:fd:13:17:aa:74:3c:06:1e:69:17:11:19:32:
                    58:11:e3:e6:ef:e1:54:9a:55:8a:c4:30:c1:30:3b:
                    5d:63:5c:07:63:68:62:3c:ac:0c:5a:a5:95:58:fb:
                    87:5f:82:49:3f:bd:13:80:4e:4a:08:d3:27:e9:c9:
                    35:38:d6:90:5a:0c:7a:be:85:56:4b:a3:9a:cc:02:
                    31:1d:46:e5:dc:48:38:e8:fb:42:52:e4:fb:fb:e3:
                    f7:a5:f0:38:3e:18:00:6b:f5:f4:ee:81:ac:87:8b:
                    7b:f3:a2:5d:26:1c:31:d9:4e:18:56:0e:20:42:e8:
                    3d:d7:d2:3b:ab:2a:e6:4c:49:46:df:09:1f:6c:a4:
                    46:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:32:AA:F4:28:63:C7:48:69:02:DB:06:E1:E7:56:56:83:CB:10:E4
            X509v3 Authority Key Identifier:
                keyid:B3:EE:96:87:79:18:30:6C:91:10:01:38:9F:0A:3D:28:BB:6A:C2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/B3EE96877918306C911001389F0A3D28BB6AC25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3EE96877918306C911001389F0A3D28BB6AC25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/323830343a343466383a3a2f33322d3332203d3e20323637363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:1c:c8:67:92:8f:d6:ed:6a:cb:f0:76:d5:ef:e6:cc:b7:d5:
         f1:2b:26:87:a3:d2:f7:25:fa:b9:37:63:c3:d7:d4:dd:ad:50:
         6a:df:a7:6e:67:43:9a:4c:db:52:de:70:a2:a7:fa:aa:67:b7:
         68:00:cd:93:1b:7a:73:42:48:7c:44:ca:47:07:dc:6b:57:97:
         7b:99:66:be:18:ad:51:74:da:d1:d4:e9:08:de:73:f1:1d:0d:
         2b:ca:c3:c2:73:86:4b:60:56:f2:aa:af:16:89:64:39:19:ae:
         06:f9:81:e6:b7:fe:4d:1c:a0:e7:b3:5e:b6:e1:1e:dd:dc:d1:
         59:e2:a1:49:a2:d3:df:81:c8:af:f5:1e:fe:10:89:06:98:a3:
         10:0e:f7:0d:b1:ad:81:12:46:82:3b:b7:18:16:ae:38:fb:1a:
         70:5e:34:99:4f:c3:b4:43:b5:19:b7:d8:7d:dd:3e:ca:4c:09:
         9d:55:7f:00:b4:68:8b:6c:6d:a8:f8:e1:05:e2:97:17:97:d6:
         c4:e4:7a:b0:1b:66:7b:ef:0c:0e:f3:8f:11:4a:64:b9:25:70:
         e6:d7:c6:b0:57:36:a9:dd:0a:7b:2e:75:bc:c7:be:c9:68:0b:
         76:eb:65:31:5a:70:c4:71:f6:e1:48:44:52:16:98:44:c7:8a:
         1e:9b:ec:3c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMr5sfaEHq+GJbO4zfOQ6j+vE5aUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNFRTk2ODc3OTE4MzA2QzkxMTAwMTM4OUYwQTNEMjhC
QjZBQzI1QzAeFw0yMjAzMzExNjQzMTRaFw0yMzAzMzAxNjQ4MTRaMDMxMTAvBgNV
BAMTKDg1MzJBQUY0Mjg2M0M3NDg2OTAyREIwNkUxRTc1NjU2ODNDQjEwRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa1Mf5Ah4T1PcKDbQnfMjyoeOj
ao7Q1o+M0wYrdcOUgyo7HGkOMZ36P8IO9a23/TNe5O74cD3hi6pwceQ7qlParvfo
9WxvbCYbI2vpHovIHcPWHqGm9r/hAG/LrpvYzUTmhu06RBlilUUE36j/7XxTVviu
Lyk3u3Gv/RMXqnQ8Bh5pFxEZMlgR4+bv4VSaVYrEMMEwO11jXAdjaGI8rAxapZVY
+4dfgkk/vROATkoI0yfpyTU41pBaDHq+hVZLo5rMAjEdRuXcSDjo+0JS5Pv74/el
8Dg+GABr9fTugayHi3vzol0mHDHZThhWDiBC6D3X0jurKuZMSUbfCR9spEb5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUhTKq9Chjx0hpAtsG4edWVoPLEOQwHwYDVR0j
BBgwFoAUs+6Wh3kYMGyREAE4nwo9KLtqwlwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlEyQmZqejg4UDlXalp3Ukt4QnoxaHlqWnNRMXdpcUxNaTFBYVNzQUQy
akgvMC9CM0VFOTY4Nzc5MTgzMDZDOTExMDAxMzg5RjBBM0QyOEJCNkFDMjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IzRUU5Njg3NzkxODMwNkM5
MTEwMDEzODlGMEEzRDI4QkI2QUMyNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZRMkJmano4OFA5V2pad1JLeEJ6MWh5alpzUTF3aXFMTWkxQWFTc0FEMmpILzAv
MzIzODMwMzQzYTM0MzQ2NjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARE+DANBgkqhkiG9w0BAQsFAAOCAQEAfBzIZ5KP
1u1qy/B21e/mzLfV8Ssmh6PS9yX6uTdjw9fU3a1Qat+nbmdDmkzbUt5woqf6qme3
aADNkxt6c0JIfETKRwfca1eXe5lmvhitUXTa0dTpCN5z8R0NK8rDwnOGS2BW8qqv
FolkORmuBvmB5rf+TRyg57NetuEe3dzRWeKhSaLT34HIr/Ue/hCJBpijEA73DbGt
gRJGgju3GBauOPsacF40mU/DtEO1GbfYfd0+ykwJnVV/ALRoi2xtqPjhBeKXF5fW
xOR6sBtme+8MDvOPEUpkuSVw5tfGsFc2qd0Key51vMe+yWgLdutlMVpwxHH24UhE
UhaYRMeKHpvsPA==
-----END CERTIFICATE-----