Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/323830343a353634383a3a2f33322d3332203d3e20323637393838.roa
File:                     323830343a353634383a3a2f33322d3332203d3e20323637393838.roa (raw, json)
Hash identifier:          FXruSr08GQi0/bCy3KUUEH5fMiw4Hmo3r6mt2Txgpmk=
Subject key identifier:   0C:F9:4A:7F:43:8E:B7:69:30:D3:2E:12:D7:87:4C:53:F9:91:3A:BF
Certificate issuer:       /CN=016CB67AEBF4799CDE3C034CBA37B0751824EEF1
Certificate serial:       6ED5AB5E2F433C550E47BABEEA1D3B0F464A3B24
Authority key identifier: 01:6C:B6:7A:EB:F4:79:9C:DE:3C:03:4C:BA:37:B0:75:18:24:EE:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/016CB67AEBF4799CDE3C034CBA37B0751824EEF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/323830343a353634383a3a2f33322d3332203d3e20323637393838.roa
Signing time:             Wed 11 Oct 2023 15:07:16 +0000
ROA not before:           Wed 11 Oct 2023 15:02:16 +0000
ROA not after:            Wed 09 Oct 2024 15:07:16 +0000
asID:                     267988
IP address blocks:        2804:5648::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d5:ab:5e:2f:43:3c:55:0e:47:ba:be:ea:1d:3b:0f:46:4a:3b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016CB67AEBF4799CDE3C034CBA37B0751824EEF1
        Validity
            Not Before: Oct 11 15:02:16 2023 GMT
            Not After : Oct  9 15:07:16 2024 GMT
        Subject: CN=0CF94A7F438EB76930D32E12D7874C53F9913ABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:47:cb:d2:f0:72:6b:cb:e4:b6:6f:e9:42:
                    14:6d:37:2f:c6:8a:b9:f0:8f:a9:cf:c3:43:f1:75:
                    f9:6f:48:07:6b:78:62:d2:73:4e:ca:bc:f3:69:b2:
                    84:06:f3:88:a7:0f:f5:dc:23:d7:2e:cf:fc:fd:35:
                    b8:33:70:03:86:14:44:3c:c7:a5:dd:e3:67:21:2e:
                    33:28:d3:da:2a:7c:2a:d1:2a:54:8d:02:cc:3c:8d:
                    7b:7f:2a:0d:9f:89:7a:a5:f1:e3:42:40:e8:4d:d3:
                    ff:14:43:15:53:e4:44:af:6e:d5:c4:6a:a5:0b:29:
                    48:90:2c:56:ba:f0:71:36:b1:b8:c6:0d:07:c5:31:
                    97:db:22:d4:2d:db:6f:b0:37:5b:e9:3d:d7:4e:fe:
                    fe:44:1b:d6:d3:ea:07:3e:3d:69:73:33:27:1c:d6:
                    09:a2:48:2a:54:0c:cd:9a:39:f2:16:15:dd:ff:2d:
                    d0:41:cd:f6:81:db:c9:e4:11:d8:31:0d:63:8d:9d:
                    a9:15:01:e3:c4:8a:48:3e:bf:cd:30:02:cf:ff:b5:
                    f5:de:5f:a8:7c:72:fb:6f:5d:92:86:48:66:c6:3a:
                    b6:8d:f0:8b:b2:62:86:52:91:60:8c:7f:c1:f1:2f:
                    b9:3c:ba:0d:48:31:b2:85:cf:cb:f0:9d:52:92:1b:
                    82:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F9:4A:7F:43:8E:B7:69:30:D3:2E:12:D7:87:4C:53:F9:91:3A:BF
            X509v3 Authority Key Identifier:
                keyid:01:6C:B6:7A:EB:F4:79:9C:DE:3C:03:4C:BA:37:B0:75:18:24:EE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/016CB67AEBF4799CDE3C034CBA37B0751824EEF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/016CB67AEBF4799CDE3C034CBA37B0751824EEF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/323830343a353634383a3a2f33322d3332203d3e20323637393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5648::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:28:f9:49:2e:06:40:bf:56:9f:0f:0d:71:83:d9:14:2b:41:
         99:4e:b9:f8:44:28:58:86:8a:b8:61:da:a3:df:37:16:76:10:
         01:7a:25:cd:c7:6d:a9:f9:5e:7c:96:98:ac:e1:0a:c8:2a:c4:
         97:e9:b6:12:36:8a:80:9e:b4:d8:de:ce:c7:07:0d:d3:c9:03:
         e0:88:cd:42:bd:ad:56:30:87:74:8a:ff:df:95:2e:b2:29:f2:
         0a:a8:bc:c5:c3:0f:ad:c9:c8:fb:bf:ed:90:f6:c4:b7:12:02:
         bd:0e:cf:67:c0:2c:b0:22:d3:0c:12:5e:f0:ff:b0:56:99:21:
         22:28:63:63:6c:32:1d:fa:04:fd:1b:8d:09:20:2f:5c:22:5e:
         c6:94:f3:34:fa:e7:a6:79:74:fb:d2:89:b2:d2:4a:c8:06:e7:
         07:f8:87:1a:cf:71:52:03:1d:e6:53:40:84:30:9e:6f:aa:8a:
         e2:70:2f:86:dc:e0:06:ef:92:34:41:1c:cb:1c:26:dd:f7:82:
         46:fd:1b:30:bb:c8:e7:2d:9e:9c:43:75:e1:6f:0e:dc:98:05:
         9d:fe:ce:a6:b5:02:c1:e9:c8:df:f4:de:0e:a9:f4:2f:ee:87:
         41:ea:e9:ac:f5:3c:a2:4f:5b:f6:19:6d:91:f6:1e:17:32:cd:
         fd:89:79:c5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbtWrXi9DPFUOR7q+6h07D0ZKOyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE2Q0I2N0FFQkY0Nzk5Q0RFM0MwMzRDQkEzN0IwNzUx
ODI0RUVGMTAeFw0yMzEwMTExNTAyMTZaFw0yNDEwMDkxNTA3MTZaMDMxMTAvBgNV
BAMTKDBDRjk0QTdGNDM4RUI3NjkzMEQzMkUxMkQ3ODc0QzUzRjk5MTNBQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4NUfL0vBya8vktm/pQhRtNy/G
irnwj6nPw0PxdflvSAdreGLSc07KvPNpsoQG84inD/XcI9cuz/z9NbgzcAOGFEQ8
x6Xd42chLjMo09oqfCrRKlSNAsw8jXt/Kg2fiXql8eNCQOhN0/8UQxVT5ESvbtXE
aqULKUiQLFa68HE2sbjGDQfFMZfbItQt22+wN1vpPddO/v5EG9bT6gc+PWlzMycc
1gmiSCpUDM2aOfIWFd3/LdBBzfaB28nkEdgxDWONnakVAePEikg+v80wAs//tfXe
X6h8cvtvXZKGSGbGOraN8IuyYoZSkWCMf8HxL7k8ug1IMbKFz8vwnVKSG4LbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUDPlKf0OOt2kw0y4S14dMU/mROr8wHwYDVR0j
BBgwFoAUAWy2euv0eZzePANMujewdRgk7vEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUoxUjcxV1ZEMXdoZ0RoV3F6TUxtSllvd2VaV2pyU0wzOUx1WXY4Nktk
Q1AvMC8wMTZDQjY3QUVCRjQ3OTlDREUzQzAzNENCQTM3QjA3NTE4MjRFRUYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAxNkNCNjdBRUJGNDc5OUNE
RTNDMDM0Q0JBMzdCMDc1MTgyNEVFRjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlKMVI3MVdWRDF3aGdEaFdxek1MbUpZb3dlWldqclNMMzlMdVl2ODZLZENQLzAv
MzIzODMwMzQzYTM1MzYzNDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzkzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARWSDANBgkqhkiG9w0BAQsFAAOCAQEABij5SS4G
QL9Wnw8NcYPZFCtBmU65+EQoWIaKuGHao983FnYQAXolzcdtqflefJaYrOEKyCrE
l+m2EjaKgJ602N7OxwcN08kD4IjNQr2tVjCHdIr/35UusinyCqi8xcMPrcnI+7/t
kPbEtxICvQ7PZ8AssCLTDBJe8P+wVpkhIihjY2wyHfoE/RuNCSAvXCJexpTzNPrn
pnl0+9KJstJKyAbnB/iHGs9xUgMd5lNAhDCeb6qK4nAvhtzgBu+SNEEcyxwm3feC
Rv0bMLvI5y2enEN14W8O3JgFnf7OprUCwenI3/TeDqn0L+6HQerprPU8ok9b9hlt
kfYeFzLN/Yl5xQ==
-----END CERTIFICATE-----