Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/0/323830343a383433633a3a2f33322d3334203d3e20323732323438.roa
File:                     323830343a383433633a3a2f33322d3334203d3e20323732323438.roa (raw, json)
Hash identifier:          U11AEC8RUrXeXkh90O5+fPY0h8ZyXdi6rmpEvwTVqwQ=
Subject key identifier:   25:C3:FB:8B:9D:3A:66:E8:67:09:ED:05:74:7D:D1:8F:77:07:4D:C5
Certificate issuer:       /CN=9EBA1BA9267695A75FD5015C54F64CF52473073D
Certificate serial:       5BD4EF3053B439F154C5899817BBE74A4FE2E9EC
Authority key identifier: 9E:BA:1B:A9:26:76:95:A7:5F:D5:01:5C:54:F6:4C:F5:24:73:07:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EBA1BA9267695A75FD5015C54F64CF52473073D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/0/323830343a383433633a3a2f33322d3334203d3e20323732323438.roa
Signing time:             Tue 30 May 2023 19:08:48 +0000
ROA not before:           Tue 30 May 2023 19:03:48 +0000
ROA not after:            Tue 28 May 2024 19:08:48 +0000
asID:                     272248
IP address blocks:        2804:843c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d4:ef:30:53:b4:39:f1:54:c5:89:98:17:bb:e7:4a:4f:e2:e9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EBA1BA9267695A75FD5015C54F64CF52473073D
        Validity
            Not Before: May 30 19:03:48 2023 GMT
            Not After : May 28 19:08:48 2024 GMT
        Subject: CN=25C3FB8B9D3A66E86709ED05747DD18F77074DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:22:f3:c9:12:c7:21:3c:34:38:25:09:a9:
                    fd:01:ab:98:ae:f9:96:b6:4a:54:4b:4a:14:15:d3:
                    63:99:d7:3d:05:74:48:36:85:bc:5f:97:15:a3:c4:
                    3c:d3:06:6f:dc:15:a9:af:9d:8f:1a:16:7a:b9:53:
                    2f:10:cc:a3:21:9a:ed:fa:01:cc:01:b0:07:45:3b:
                    83:2d:9e:14:06:1f:2c:de:84:59:55:9a:a7:0e:6b:
                    cc:f9:8a:30:71:f5:75:88:b4:5c:c7:33:00:69:6b:
                    6a:ee:c2:3c:4d:03:02:7a:b9:43:b7:fb:c2:4b:eb:
                    95:bd:fe:cf:81:79:0b:8c:83:ee:00:80:c2:c5:aa:
                    c1:f1:0a:d4:16:d9:a7:9f:98:64:e1:52:07:44:aa:
                    d8:af:68:3e:73:39:2e:69:f8:77:d2:4b:83:e3:42:
                    cd:1a:53:98:3b:69:bd:e3:c2:bb:00:3f:09:34:eb:
                    33:ef:fd:cf:43:48:de:31:db:ad:76:e4:78:ac:dc:
                    20:51:db:42:a5:3a:95:ef:06:c0:60:ab:9f:bd:af:
                    9e:28:a5:8b:ca:8a:bb:8c:3f:e5:e6:72:00:20:d3:
                    ae:f4:93:ff:9a:0d:66:80:7b:99:52:12:36:8c:0c:
                    d1:f1:a7:dc:a9:37:db:8d:27:0a:0c:1d:0e:dd:c9:
                    5f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C3:FB:8B:9D:3A:66:E8:67:09:ED:05:74:7D:D1:8F:77:07:4D:C5
            X509v3 Authority Key Identifier:
                keyid:9E:BA:1B:A9:26:76:95:A7:5F:D5:01:5C:54:F6:4C:F5:24:73:07:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/0/9EBA1BA9267695A75FD5015C54F64CF52473073D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EBA1BA9267695A75FD5015C54F64CF52473073D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/0/323830343a383433633a3a2f33322d3334203d3e20323732323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:843c::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:76:15:af:5e:36:7b:93:49:0e:fd:a3:eb:9a:60:af:08:ff:
         d5:23:8c:7c:a7:18:36:ee:c6:58:c9:7e:5a:26:01:6e:f4:5d:
         ef:c4:3a:f0:a1:77:c0:85:e4:2a:81:c6:8d:f0:fb:e7:90:d0:
         6d:fe:d1:e8:ee:68:6f:1f:30:41:43:40:f3:dd:3b:3f:b2:b9:
         c0:cb:26:b5:9a:c0:e0:c4:74:4f:16:0a:34:b5:e0:92:dd:ea:
         e4:0f:81:43:66:c8:f9:af:21:d3:67:ee:c8:ca:37:04:85:5b:
         86:68:47:d1:33:93:a1:ec:15:0b:f1:49:1b:b1:74:71:6f:70:
         55:a1:46:5b:14:d0:bc:f4:ec:de:3c:0b:63:ec:ec:6b:30:fd:
         76:ff:54:aa:9b:17:f7:d2:a6:22:b5:f6:34:7c:5a:1e:bf:06:
         f4:5e:bf:86:f6:80:48:9b:10:e6:ee:e7:d2:54:c5:ae:28:65:
         bb:e9:8a:40:50:10:c8:08:8f:f4:f1:e7:fe:10:8a:cf:1b:46:
         76:0e:1f:41:47:84:53:d1:f6:ee:1a:3e:77:eb:fc:1c:cd:d1:
         ee:90:90:d0:bb:b8:5e:ca:d1:7a:10:89:41:b8:bf:cd:36:2a:
         f6:45:62:10:d6:ed:7e:2c:6d:8b:13:30:e9:2a:45:be:27:af:
         c4:cd:e2:08
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUW9TvMFO0OfFUxYmYF7vnSk/i6ewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVCQTFCQTkyNjc2OTVBNzVGRDUwMTVDNTRGNjRDRjUy
NDczMDczRDAeFw0yMzA1MzAxOTAzNDhaFw0yNDA1MjgxOTA4NDhaMDMxMTAvBgNV
BAMTKDI1QzNGQjhCOUQzQTY2RTg2NzA5RUQwNTc0N0REMThGNzcwNzREQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5oCLzyRLHITw0OCUJqf0Bq5iu
+Za2SlRLShQV02OZ1z0FdEg2hbxflxWjxDzTBm/cFamvnY8aFnq5Uy8QzKMhmu36
AcwBsAdFO4MtnhQGHyzehFlVmqcOa8z5ijBx9XWItFzHMwBpa2ruwjxNAwJ6uUO3
+8JL65W9/s+BeQuMg+4AgMLFqsHxCtQW2aefmGThUgdEqtivaD5zOS5p+HfSS4Pj
Qs0aU5g7ab3jwrsAPwk06zPv/c9DSN4x26125His3CBR20KlOpXvBsBgq5+9r54o
pYvKiruMP+XmcgAg0670k/+aDWaAe5lSEjaMDNHxp9ypN9uNJwoMHQ7dyV9zAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJcP7i506ZuhnCe0FdH3Rj3cHTcUwHwYDVR0j
BBgwFoAUnrobqSZ2ladf1QFcVPZM9SRzBz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1lBTGpXcVVwWENkVkQzQzhvU2ZOdzhvaUFrWHNrSHRqNzlBZnJQdzlj
S3gvMC85RUJBMUJBOTI2NzY5NUE3NUZENTAxNUM1NEY2NENGNTI0NzMwNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlFQkExQkE5MjY3Njk1QTc1
RkQ1MDE1QzU0RjY0Q0Y1MjQ3MzA3M0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdZQUxqV3FVcFhDZFZEM0M4b1NmTnc4b2lBa1hza0h0ajc5QWZyUHc5Y0t4LzAv
MzIzODMwMzQzYTM4MzQzMzYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMy
MzIzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASEPDANBgkqhkiG9w0BAQsFAAOCAQEAQ3YVr142
e5NJDv2j65pgrwj/1SOMfKcYNu7GWMl+WiYBbvRd78Q68KF3wIXkKoHGjfD755DQ
bf7R6O5obx8wQUNA8907P7K5wMsmtZrA4MR0TxYKNLXgkt3q5A+BQ2bI+a8h02fu
yMo3BIVbhmhH0TOToewVC/FJG7F0cW9wVaFGWxTQvPTs3jwLY+zsazD9dv9UqpsX
99KmIrX2NHxaHr8G9F6/hvaASJsQ5u7n0lTFrihlu+mKQFAQyAiP9PHn/hCKzxtG
dg4fQUeEU9H27ho+d+v8HM3R7pCQ0Lu4XsrRehCJQbi/zTYq9kViENbtfixtixMw
6SpFvievxM3iCA==
-----END CERTIFICATE-----