Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/323830343a363231633a3a2f33322d3332203d3e20323639323736.roa
File:                     323830343a363231633a3a2f33322d3332203d3e20323639323736.roa (raw, json)
Hash identifier:          bD/Y4BqVlL3TtuWniylN7KdlCEkAVMi1Fnac5gBIJY8=
Subject key identifier:   94:03:01:E2:0C:D6:8A:86:4D:1C:E0:6D:72:94:8A:3C:44:20:8A:B0
Certificate issuer:       /CN=B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA
Certificate serial:       75DCFE0B71439CE23B2991FC83AA16F537F6E6AD
Authority key identifier: B7:FA:4D:E3:78:CD:54:DE:57:9C:94:C2:05:9C:B4:52:1F:0B:A6:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/323830343a363231633a3a2f33322d3332203d3e20323639323736.roa
Signing time:             Mon 18 Dec 2023 18:53:07 +0000
ROA not before:           Mon 18 Dec 2023 18:48:07 +0000
ROA not after:            Mon 16 Dec 2024 18:53:07 +0000
asID:                     269276
IP address blocks:        2804:621c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:dc:fe:0b:71:43:9c:e2:3b:29:91:fc:83:aa:16:f5:37:f6:e6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA
        Validity
            Not Before: Dec 18 18:48:07 2023 GMT
            Not After : Dec 16 18:53:07 2024 GMT
        Subject: CN=940301E20CD68A864D1CE06D72948A3C44208AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:93:47:fc:e1:55:eb:2b:25:34:1f:b4:c9:
                    fc:ea:53:08:75:c2:c9:4d:9b:77:3e:5c:18:9d:00:
                    e8:df:f2:34:26:44:6f:d0:6a:e8:ab:8d:95:9d:db:
                    cf:09:3a:c8:b2:94:48:55:d8:e1:ab:88:dc:4c:cf:
                    91:8a:14:20:e9:50:15:03:37:13:8d:50:c5:92:d9:
                    5b:e9:8a:75:d2:0f:27:79:e2:7e:8b:07:84:7c:8b:
                    2c:da:9a:31:26:1f:a5:80:18:2e:63:36:0d:89:87:
                    42:0d:b3:fb:1f:a3:2f:8f:c2:9c:2a:91:59:d2:78:
                    69:1c:2a:82:f6:7e:83:92:9b:73:bd:bc:1c:80:39:
                    0d:8a:dc:5e:b0:02:21:38:98:6e:aa:2d:43:f0:ec:
                    03:e1:a6:74:45:f8:14:85:f8:a8:16:69:c3:22:fa:
                    9a:ed:83:fd:dc:99:de:67:dd:0f:86:44:30:5f:eb:
                    2e:5d:e3:36:47:97:9f:8d:36:49:a1:9a:19:64:94:
                    ab:44:c2:87:11:78:c8:b2:5e:5c:71:6e:12:b0:9f:
                    af:3b:db:bd:ad:e1:9f:4a:09:07:81:12:1b:fd:b2:
                    ff:fa:d7:f1:87:48:ef:6d:f7:a4:73:ed:30:a8:36:
                    d4:3d:62:58:8b:cf:64:02:fc:96:6a:9f:9a:3c:85:
                    33:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:03:01:E2:0C:D6:8A:86:4D:1C:E0:6D:72:94:8A:3C:44:20:8A:B0
            X509v3 Authority Key Identifier:
                keyid:B7:FA:4D:E3:78:CD:54:DE:57:9C:94:C2:05:9C:B4:52:1F:0B:A6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/323830343a363231633a3a2f33322d3332203d3e20323639323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:621c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:71:f7:bb:00:d0:f0:02:c1:1f:87:39:6e:2e:24:80:e2:1f:
         7a:06:ed:9b:44:46:70:b2:d0:ef:9f:e1:0c:08:43:47:43:c5:
         1e:dd:b2:1c:30:dd:f1:86:11:9f:3f:d3:f0:09:5c:be:50:ff:
         38:22:08:b0:27:07:52:64:f2:73:92:21:e1:4d:a8:d8:1a:22:
         16:37:7d:ec:3c:69:37:22:a4:29:8b:78:d1:11:8e:a8:b6:94:
         1b:36:b6:3f:e6:55:c1:30:01:5a:7b:f7:a6:54:ef:bd:90:fd:
         dc:65:26:c3:35:2b:28:e1:ce:42:fd:a0:59:30:08:78:28:e3:
         3e:ac:1f:0e:aa:3e:16:cc:46:7d:1b:2a:d6:f9:2e:ca:c6:86:
         6b:b3:0f:05:3d:83:75:8b:00:9f:8a:a1:ff:2e:20:f3:84:f2:
         09:87:3e:99:12:85:96:41:3c:6b:59:b1:b3:93:64:42:7e:ea:
         f0:92:ed:3c:d0:c6:77:71:53:34:70:bb:d2:db:ef:23:27:e7:
         48:ef:40:90:ef:f7:b7:67:1b:f2:46:4c:47:7a:4a:f1:a4:42:
         ef:aa:19:45:4b:d1:29:e3:8e:55:46:19:76:69:6f:8c:8b:10:
         f3:e7:f3:06:22:8e:fc:25:74:37:5a:6c:74:67:22:7e:10:98:
         52:45:69:fd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUddz+C3FDnOI7KZH8g6oW9Tf25q0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGQTRERTM3OENENTRERTU3OUM5NEMyMDU5Q0I0NTIx
RjBCQTZCQTAeFw0yMzEyMTgxODQ4MDdaFw0yNDEyMTYxODUzMDdaMDMxMTAvBgNV
BAMTKDk0MDMwMUUyMENENjhBODY0RDFDRTA2RDcyOTQ4QTNDNDQyMDhBQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Z5NH/OFV6yslNB+0yfzqUwh1
wslNm3c+XBidAOjf8jQmRG/QauirjZWd288JOsiylEhV2OGriNxMz5GKFCDpUBUD
NxONUMWS2VvpinXSDyd54n6LB4R8iyzamjEmH6WAGC5jNg2Jh0INs/sfoy+Pwpwq
kVnSeGkcKoL2foOSm3O9vByAOQ2K3F6wAiE4mG6qLUPw7APhpnRF+BSF+KgWacMi
+prtg/3cmd5n3Q+GRDBf6y5d4zZHl5+NNkmhmhlklKtEwocReMiyXlxxbhKwn687
272t4Z9KCQeBEhv9sv/61/GHSO9t96Rz7TCoNtQ9YliLz2QC/JZqn5o8hTNDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUlAMB4gzWioZNHOBtcpSKPEQgirAwHwYDVR0j
BBgwFoAUt/pN43jNVN5XnJTCBZy0Uh8LprowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNng2R3dTSFdVS1FyOUg5c3VLcjY3QVVmcENycHF4V0tkUXpmZ21VWlFq
alcvMC9CN0ZBNERFMzc4Q0Q1NERFNTc5Qzk0QzIwNTlDQjQ1MjFGMEJBNkJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3RkE0REUzNzhDRDU0REU1
NzlDOTRDMjA1OUNCNDUyMUYwQkE2QkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4Nkd3U0hXVUtRcjlIOXN1S3I2N0FVZnBDcnBxeFdLZFF6ZmdtVVpRampXLzAv
MzIzODMwMzQzYTM2MzIzMTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzIzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARiHDANBgkqhkiG9w0BAQsFAAOCAQEAO3H3uwDQ
8ALBH4c5bi4kgOIfegbtm0RGcLLQ75/hDAhDR0PFHt2yHDDd8YYRnz/T8AlcvlD/
OCIIsCcHUmTyc5Ih4U2o2BoiFjd97DxpNyKkKYt40RGOqLaUGza2P+ZVwTABWnv3
plTvvZD93GUmwzUrKOHOQv2gWTAIeCjjPqwfDqo+FsxGfRsq1vkuysaGa7MPBT2D
dYsAn4qh/y4g84TyCYc+mRKFlkE8a1mxs5NkQn7q8JLtPNDGd3FTNHC70tvvIyfn
SO9AkO/3t2cb8kZMR3pK8aRC76oZRUvRKeOOVUYZdmlvjIsQ8+fzBiKO/CV0N1ps
dGcifhCYUkVp/Q==
-----END CERTIFICATE-----