Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/323830343a313566633a3a2f33322d3332203d3e203238333539.roa
File:                     323830343a313566633a3a2f33322d3332203d3e203238333539.roa (raw, json)
Hash identifier:          3F/CLZ1pxTj3s2I6zi0kWYbVrI6BQcpDpe8F0RXg/wA=
Subject key identifier:   73:D0:2A:D4:B8:D5:7B:B5:13:67:30:9A:96:0E:7C:41:2D:33:0D:2F
Certificate issuer:       /CN=698EF7DEA063C9305D5A1B8E455F8E094896B04D
Certificate serial:       6362B1B7CEE2096A447E2FFFE40E896C360FF6B2
Authority key identifier: 69:8E:F7:DE:A0:63:C9:30:5D:5A:1B:8E:45:5F:8E:09:48:96:B0:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/698EF7DEA063C9305D5A1B8E455F8E094896B04D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/323830343a313566633a3a2f33322d3332203d3e203238333539.roa
Signing time:             Sun 22 May 2022 12:08:38 +0000
ROA not before:           Sun 22 May 2022 12:03:38 +0000
ROA not after:            Sun 21 May 2023 12:08:38 +0000
asID:                     28359
IP address blocks:        2804:15fc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:62:b1:b7:ce:e2:09:6a:44:7e:2f:ff:e4:0e:89:6c:36:0f:f6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698EF7DEA063C9305D5A1B8E455F8E094896B04D
        Validity
            Not Before: May 22 12:03:38 2022 GMT
            Not After : May 21 12:08:38 2023 GMT
        Subject: CN=73D02AD4B8D57BB51367309A960E7C412D330D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:97:4b:44:7c:0a:42:12:48:76:ac:4c:fc:
                    8d:1d:e9:c5:ca:7c:57:58:7c:9b:2d:8d:91:25:d4:
                    4d:28:7b:af:74:d6:14:a3:8c:9f:82:c9:94:f2:42:
                    e3:d0:b3:ac:6e:47:23:5f:c9:ce:ea:00:86:69:c0:
                    e8:b2:69:ab:e0:43:b6:28:e3:b7:76:86:30:37:7c:
                    9b:b2:81:97:49:0a:0e:84:ee:ce:b1:87:58:16:93:
                    fb:ed:c5:85:d0:b2:ba:ce:e2:1f:1a:2a:80:df:ff:
                    dc:4f:6c:72:6a:29:39:b7:1c:6a:1d:c8:7e:6d:2a:
                    65:5a:67:f5:ba:23:db:c1:cb:d6:d4:65:b8:65:83:
                    a8:47:d4:38:26:c9:69:94:74:62:f7:4b:f2:15:93:
                    94:3a:bd:86:68:c5:af:bd:f2:4f:97:4e:11:2f:09:
                    49:e9:ec:4f:90:e9:6a:cf:fa:8b:11:fd:5a:1e:84:
                    f5:15:c5:ac:69:f7:90:82:11:67:b4:78:4f:8f:ce:
                    c2:7a:c2:3f:26:76:ec:55:12:d1:56:27:ff:9b:5d:
                    36:b0:2b:68:83:cb:75:46:86:a6:66:c5:9f:97:1e:
                    a4:a4:8c:6b:8f:e0:7d:b7:7c:9e:c7:de:8d:4c:83:
                    04:b0:e1:ac:01:25:ae:66:fd:50:d0:52:b6:20:c5:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D0:2A:D4:B8:D5:7B:B5:13:67:30:9A:96:0E:7C:41:2D:33:0D:2F
            X509v3 Authority Key Identifier:
                keyid:69:8E:F7:DE:A0:63:C9:30:5D:5A:1B:8E:45:5F:8E:09:48:96:B0:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/698EF7DEA063C9305D5A1B8E455F8E094896B04D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/698EF7DEA063C9305D5A1B8E455F8E094896B04D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/323830343a313566633a3a2f33322d3332203d3e203238333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:ea:87:4f:58:07:92:96:98:92:3d:be:d1:6b:5d:d6:e6:cd:
         8f:32:00:54:c1:e6:55:82:35:6f:1c:24:ca:3e:73:aa:ec:89:
         09:f5:5b:d7:87:01:10:c4:ed:62:55:b4:8d:c3:58:35:eb:2d:
         76:73:da:85:93:f6:72:5e:7a:2e:50:f7:37:35:8f:a2:c6:46:
         6c:33:31:9c:fd:33:04:70:06:88:97:21:86:bf:73:c0:3c:19:
         65:12:6e:33:58:d4:12:71:e4:ef:30:7e:fb:10:43:d6:90:5e:
         05:18:16:f1:76:0a:52:92:ec:69:4a:97:c1:94:6e:86:2c:40:
         33:f7:db:38:ee:22:e0:bc:50:6d:fc:3b:a1:ab:bf:01:fd:06:
         c2:00:65:d5:3d:03:ad:50:56:21:bf:88:32:51:6b:f0:a0:54:
         26:01:f9:05:8e:96:76:e3:30:c6:7b:02:68:83:1b:26:26:3c:
         09:ae:7a:56:6e:3b:3e:20:f6:11:67:9e:9d:29:11:1f:e8:df:
         da:05:3a:18:76:da:9d:a8:43:7d:ee:27:ae:2e:bb:5a:ab:52:
         40:84:bd:66:7c:f4:1b:0b:a1:8a:4c:e1:06:e2:9c:c7:5b:31:
         aa:22:c9:63:ab:2c:6f:b0:00:cd:bb:63:51:0c:88:86:bc:d7:
         03:af:61:b5
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUY2Kxt87iCWpEfi//5A6JbDYP9rIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk4RUY3REVBMDYzQzkzMDVENUExQjhFNDU1RjhFMDk0
ODk2QjA0RDAeFw0yMjA1MjIxMjAzMzhaFw0yMzA1MjExMjA4MzhaMDMxMTAvBgNV
BAMTKDczRDAyQUQ0QjhENTdCQjUxMzY3MzA5QTk2MEU3QzQxMkQzMzBEMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudJdLRHwKQhJIdqxM/I0d6cXK
fFdYfJstjZEl1E0oe6901hSjjJ+CyZTyQuPQs6xuRyNfyc7qAIZpwOiyaavgQ7Yo
47d2hjA3fJuygZdJCg6E7s6xh1gWk/vtxYXQsrrO4h8aKoDf/9xPbHJqKTm3HGod
yH5tKmVaZ/W6I9vBy9bUZbhlg6hH1DgmyWmUdGL3S/IVk5Q6vYZoxa+98k+XThEv
CUnp7E+Q6WrP+osR/VoehPUVxaxp95CCEWe0eE+PzsJ6wj8mduxVEtFWJ/+bXTaw
K2iDy3VGhqZmxZ+XHqSkjGuP4H23fJ7H3o1MgwSw4awBJa5m/VDQUrYgxd0FAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUc9Aq1LjVe7UTZzCalg58QS0zDS8wHwYDVR0j
BBgwFoAUaY733qBjyTBdWhuORV+OCUiWsE0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3ZNdmVKYWNqNmczbUhrb0pjallNUWJhTEVhRmpockJRd29rZUx3c2hR
ajEvMC82OThFRjdERUEwNjNDOTMwNUQ1QTFCOEU0NTVGOEUwOTQ4OTZCMDRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY5OEVGN0RFQTA2M0M5MzA1
RDVBMUI4RTQ1NUY4RTA5NDg5NkIwNEQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd2TXZlSmFjajZnM21Ia29KY2pZTVFiYUxFYUZqaHJCUXdva2VMd3NoUWoxLzAv
MzIzODMwMzQzYTMxMzU2NjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzODMz
MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEFfwwDQYJKoZIhvcNAQELBQADggEBAFXqh09YB5KW
mJI9vtFrXdbmzY8yAFTB5lWCNW8cJMo+c6rsiQn1W9eHARDE7WJVtI3DWDXrLXZz
2oWT9nJeei5Q9zc1j6LGRmwzMZz9MwRwBoiXIYa/c8A8GWUSbjNY1BJx5O8wfvsQ
Q9aQXgUYFvF2ClKS7GlKl8GUboYsQDP32zjuIuC8UG38O6GrvwH9BsIAZdU9A61Q
ViG/iDJRa/CgVCYB+QWOlnbjMMZ7AmiDGyYmPAmuelZuOz4g9hFnnp0pER/o39oF
Ohh22p2oQ33uJ64uu1qrUkCEvWZ89BsLoYpM4QbinMdbMaoiyWOrLG+wAM27Y1EM
iIa81wOvYbU=
-----END CERTIFICATE-----