Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/323830343a323233383a3a2f33322d3438203d3e20323634353938.roa
File:                     323830343a323233383a3a2f33322d3438203d3e20323634353938.roa (raw, json)
Hash identifier:          JmehvRRnjYSjr3hawEFbEHIXpDfPcxnikCv5QyZn3t8=
Subject key identifier:   C4:3F:D1:D3:F3:49:A8:C7:23:DB:0B:F2:9E:63:F6:61:6F:47:1A:88
Certificate issuer:       /CN=108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7
Certificate serial:       12608F2339BE4948E506EF37BDE1F4F6C805D1F8
Authority key identifier: 10:87:69:B7:BB:8A:B7:22:D7:BB:B5:F2:4D:0A:1E:36:4C:1D:7E:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/323830343a323233383a3a2f33322d3438203d3e20323634353938.roa
Signing time:             Fri 22 Sep 2023 17:48:48 +0000
ROA not before:           Fri 22 Sep 2023 17:43:48 +0000
ROA not after:            Fri 20 Sep 2024 17:48:48 +0000
asID:                     264598
IP address blocks:        2804:2238::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:60:8f:23:39:be:49:48:e5:06:ef:37:bd:e1:f4:f6:c8:05:d1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7
        Validity
            Not Before: Sep 22 17:43:48 2023 GMT
            Not After : Sep 20 17:48:48 2024 GMT
        Subject: CN=C43FD1D3F349A8C723DB0BF29E63F6616F471A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:52:8b:32:a7:f3:27:f2:d5:e0:2e:0e:88:
                    3e:f9:1e:f3:76:f4:7a:8e:45:c3:4e:ad:64:c8:6b:
                    6c:72:c2:0a:e6:a3:81:31:c7:6f:ea:3c:cd:cc:da:
                    ae:a2:82:23:bf:4a:4c:d4:b3:48:98:de:5a:10:18:
                    2f:14:68:fa:74:b6:8f:2c:cf:ad:82:da:92:af:d9:
                    48:e3:f9:13:86:a9:04:e1:d7:9f:1b:5e:4f:82:12:
                    da:0a:fc:7d:bc:57:34:10:07:a8:1d:90:a9:90:a3:
                    69:e3:6a:ab:1e:cd:56:38:e8:40:bd:5f:f2:77:a7:
                    8f:f5:6f:87:32:40:92:a1:95:16:0a:50:fe:04:2c:
                    94:25:cc:4b:92:04:f4:ea:f3:74:e8:a9:61:ee:b5:
                    8a:38:8b:45:69:e0:00:37:ea:eb:a9:fc:98:2b:19:
                    79:cb:0e:6b:df:65:9e:d1:77:19:2d:36:7f:4c:d6:
                    7c:92:ab:49:f4:d6:39:1b:f2:da:78:d3:8c:3f:fc:
                    d0:03:83:6b:22:9d:2c:b2:cb:60:5a:ac:1f:56:1b:
                    88:25:a3:74:4d:2b:62:1b:10:91:a1:54:64:fe:aa:
                    db:52:4c:60:a4:15:a1:83:fb:c0:6b:f5:8c:27:c3:
                    e3:36:cc:2c:c6:09:b1:86:32:6a:73:b4:28:72:5d:
                    2f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3F:D1:D3:F3:49:A8:C7:23:DB:0B:F2:9E:63:F6:61:6F:47:1A:88
            X509v3 Authority Key Identifier:
                keyid:10:87:69:B7:BB:8A:B7:22:D7:BB:B5:F2:4D:0A:1E:36:4C:1D:7E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/323830343a323233383a3a2f33322d3438203d3e20323634353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2238::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:c2:e3:90:40:f7:8d:12:f3:dc:32:aa:17:44:1d:43:92:3a:
         80:42:36:4e:35:b9:16:84:29:48:cf:3a:46:8b:1b:f6:37:c7:
         20:da:13:cc:d7:92:43:9b:ed:f5:d4:c3:ac:ff:e7:80:47:e5:
         1d:5d:35:c9:19:e9:f1:28:87:ba:93:06:88:f8:04:e2:58:62:
         05:7c:b7:83:3c:4b:57:cb:2f:93:f4:fb:a3:6a:b5:a6:df:26:
         3b:d0:ba:c9:51:18:72:61:60:0e:14:6e:cb:f4:f7:e9:66:a0:
         ea:c2:d9:a7:b4:f4:a0:c4:d6:3f:96:83:93:16:cd:2b:0f:31:
         d3:ca:0a:9a:35:36:fe:04:21:da:79:d2:73:e3:06:e7:c2:36:
         d9:48:dc:be:9b:ad:b1:67:28:d0:d6:7f:d4:ee:c5:29:d7:3b:
         9b:31:06:40:7f:f0:15:4e:9c:6f:1c:8c:d2:4b:e3:23:16:11:
         a8:e8:4c:8d:f0:33:9b:83:3d:00:64:70:a0:e8:4d:f9:d8:85:
         e0:68:41:64:a7:0d:26:08:39:0d:70:28:9f:f2:8a:39:73:04:
         89:0f:7d:c2:a1:e8:69:0e:74:e9:0b:83:41:93:a7:45:9e:c0:
         65:31:19:06:bb:f7:9d:b7:2e:f8:37:06:72:24:07:5d:70:54:
         da:d2:38:08
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEmCPIzm+SUjlBu83veH09sgF0fgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA4NzY5QjdCQjhBQjcyMkQ3QkJCNUYyNEQwQTFFMzY0
QzFEN0VBNzAeFw0yMzA5MjIxNzQzNDhaFw0yNDA5MjAxNzQ4NDhaMDMxMTAvBgNV
BAMTKEM0M0ZEMUQzRjM0OUE4QzcyM0RCMEJGMjlFNjNGNjYxNkY0NzFBODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UlKLMqfzJ/LV4C4OiD75HvN2
9HqORcNOrWTIa2xywgrmo4Exx2/qPM3M2q6igiO/SkzUs0iY3loQGC8UaPp0to8s
z62C2pKv2Ujj+ROGqQTh158bXk+CEtoK/H28VzQQB6gdkKmQo2njaqsezVY46EC9
X/J3p4/1b4cyQJKhlRYKUP4ELJQlzEuSBPTq83ToqWHutYo4i0Vp4AA36uup/Jgr
GXnLDmvfZZ7RdxktNn9M1nySq0n01jkb8tp404w//NADg2sinSyyy2BarB9WG4gl
o3RNK2IbEJGhVGT+qttSTGCkFaGD+8Br9Ywnw+M2zCzGCbGGMmpztChyXS+hAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUxD/R0/NJqMcj2wvynmP2YW9HGogwHwYDVR0j
BBgwFoAUEIdpt7uKtyLXu7XyTQoeNkwdfqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGgzMzRabTJCQ1Q1TnJkTVdzdTR1RFhDRXJBZE1aNm9Xa2hoaUNFOUFu
ZnovMC8xMDg3NjlCN0JCOEFCNzIyRDdCQkI1RjI0RDBBMUUzNjRDMUQ3RUE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwODc2OUI3QkI4QUI3MjJE
N0JCQjVGMjREMEExRTM2NEMxRDdFQTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhoMzM0Wm0yQkNUNU5yZE1Xc3U0dURYQ0VyQWRNWjZvV2toaGlDRTlBbmZ6LzAv
MzIzODMwMzQzYTMyMzIzMzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzUzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQiODANBgkqhkiG9w0BAQsFAAOCAQEAqMLjkED3
jRLz3DKqF0QdQ5I6gEI2TjW5FoQpSM86Rosb9jfHINoTzNeSQ5vt9dTDrP/ngEfl
HV01yRnp8SiHupMGiPgE4lhiBXy3gzxLV8svk/T7o2q1pt8mO9C6yVEYcmFgDhRu
y/T36Wag6sLZp7T0oMTWP5aDkxbNKw8x08oKmjU2/gQh2nnSc+MG58I22Ujcvput
sWco0NZ/1O7FKdc7mzEGQH/wFU6cbxyM0kvjIxYRqOhMjfAzm4M9AGRwoOhN+diF
4GhBZKcNJgg5DXAon/KKOXMEiQ99wqHoaQ506QuDQZOnRZ7AZTEZBrv3nbcu+DcG
ciQHXXBU2tI4CA==
-----END CERTIFICATE-----