Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/323830343a376266303a3a2f33322d3332203d3e20323731343634.roa
File:                     323830343a376266303a3a2f33322d3332203d3e20323731343634.roa (raw, json)
Hash identifier:          79ShBKvFyVaxQSTD5e5D7UO1q4Yi5b13tTSYNpTFWNI=
Subject key identifier:   4E:6D:1B:B7:F5:2B:0E:DA:EE:6C:E8:07:42:19:18:44:35:E1:B8:64
Certificate issuer:       /CN=DB7A300CBD2858F3333D17C91EB007FFEAEA49DE
Certificate serial:       0A6B6B8DFE055FA983D7D8865E01B53F5A19C1F3
Authority key identifier: DB:7A:30:0C:BD:28:58:F3:33:3D:17:C9:1E:B0:07:FF:EA:EA:49:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB7A300CBD2858F3333D17C91EB007FFEAEA49DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/323830343a376266303a3a2f33322d3332203d3e20323731343634.roa
Signing time:             Fri 18 Mar 2022 18:56:28 +0000
ROA not before:           Fri 18 Mar 2022 18:51:28 +0000
ROA not after:            Fri 17 Mar 2023 18:56:28 +0000
asID:                     271464
IP address blocks:        2804:7bf0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6b:6b:8d:fe:05:5f:a9:83:d7:d8:86:5e:01:b5:3f:5a:19:c1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB7A300CBD2858F3333D17C91EB007FFEAEA49DE
        Validity
            Not Before: Mar 18 18:51:28 2022 GMT
            Not After : Mar 17 18:56:28 2023 GMT
        Subject: CN=4E6D1BB7F52B0EDAEE6CE8074219184435E1B864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:6f:27:41:0d:fb:5c:34:fd:f5:e5:4c:6e:
                    49:89:b5:a2:64:eb:31:c2:52:e0:15:fa:20:5c:42:
                    96:55:d1:95:68:98:ef:48:ca:7c:bb:ed:21:8b:66:
                    a3:de:ec:d9:0c:5d:0f:1a:12:77:5d:53:be:b0:58:
                    8d:4d:b8:d3:31:50:d6:5d:07:35:f3:88:61:ae:50:
                    1e:b8:38:f1:ab:a1:87:d3:eb:27:d3:8f:48:ca:90:
                    2c:63:ec:9d:7e:15:d3:9a:6f:09:99:9c:fd:51:f8:
                    c1:50:e5:76:e5:d3:51:2e:49:57:f7:8a:51:82:fb:
                    1f:dc:26:91:cf:fd:fc:ae:e7:d8:0c:cd:42:4b:b5:
                    0d:fb:c2:61:7f:e1:a8:1f:cc:f3:86:c5:e9:9d:d3:
                    0b:2b:27:cd:d7:6d:f6:e6:d1:ba:af:73:7b:b6:2d:
                    41:96:9f:3b:1c:ef:58:ad:29:6c:e8:a1:43:4b:13:
                    95:73:6b:b1:e3:31:43:24:98:21:f7:4c:e2:47:17:
                    81:59:06:2a:2b:3d:cd:70:d1:71:b2:6b:12:47:b6:
                    90:bf:55:b1:4c:b0:38:4c:e6:ea:53:48:3e:2c:a8:
                    6f:a2:05:74:ff:e5:54:6a:0a:4c:a6:0d:3a:24:a6:
                    dd:16:2d:30:8e:d2:c7:71:42:64:65:b9:76:94:40:
                    66:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6D:1B:B7:F5:2B:0E:DA:EE:6C:E8:07:42:19:18:44:35:E1:B8:64
            X509v3 Authority Key Identifier:
                keyid:DB:7A:30:0C:BD:28:58:F3:33:3D:17:C9:1E:B0:07:FF:EA:EA:49:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/DB7A300CBD2858F3333D17C91EB007FFEAEA49DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB7A300CBD2858F3333D17C91EB007FFEAEA49DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/323830343a376266303a3a2f33322d3332203d3e20323731343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:94:c2:4e:37:40:05:84:28:de:a6:b8:b5:1f:8f:48:6e:30:
         0e:1e:5d:7c:de:06:f5:9d:7d:43:85:c3:d0:ba:eb:08:5f:98:
         1b:eb:c3:a7:be:07:c7:96:9f:86:08:e5:d5:22:60:fa:64:35:
         5e:a1:47:d0:f1:c3:06:b1:b9:48:89:31:eb:ac:b1:25:94:1e:
         1c:75:a7:3e:22:16:b2:57:b2:37:33:e0:a2:b0:94:a7:5f:04:
         7a:68:d7:b9:8c:df:bd:53:8b:30:8a:de:cb:97:85:67:86:1f:
         6c:63:d4:47:5b:05:8c:b5:a8:2f:3d:41:63:93:de:03:7d:f8:
         68:12:4d:00:db:69:27:7e:2e:98:95:04:04:ce:f0:4d:bc:13:
         80:08:30:28:d9:3d:7e:28:69:1d:87:8a:8c:38:c8:34:03:3b:
         17:29:b2:46:61:23:0a:ca:c5:20:c4:ee:27:75:11:a7:79:85:
         3e:e7:dc:e4:a5:5a:cd:74:db:0d:01:c8:9f:b6:d5:4b:a3:f6:
         4c:19:ad:81:3f:a9:40:df:20:16:86:8e:08:4c:52:6c:1e:0a:
         38:ce:9d:c1:bc:9d:08:06:c8:f9:26:f2:d0:b8:07:97:3b:87:
         49:44:f7:e0:fb:fd:4d:5f:e5:d7:b8:87:ad:6c:57:9a:18:ca:
         1d:b3:b4:b9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCmtrjf4FX6mD19iGXgG1P1oZwfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI3QTMwMENCRDI4NThGMzMzM0QxN0M5MUVCMDA3RkZF
QUVBNDlERTAeFw0yMjAzMTgxODUxMjhaFw0yMzAzMTcxODU2MjhaMDMxMTAvBgNV
BAMTKDRFNkQxQkI3RjUyQjBFREFFRTZDRTgwNzQyMTkxODQ0MzVFMUI4NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjX28nQQ37XDT99eVMbkmJtaJk
6zHCUuAV+iBcQpZV0ZVomO9Iyny77SGLZqPe7NkMXQ8aEnddU76wWI1NuNMxUNZd
BzXziGGuUB64OPGroYfT6yfTj0jKkCxj7J1+FdOabwmZnP1R+MFQ5Xbl01EuSVf3
ilGC+x/cJpHP/fyu59gMzUJLtQ37wmF/4agfzPOGxemd0wsrJ83Xbfbm0bqvc3u2
LUGWnzsc71itKWzooUNLE5Vza7HjMUMkmCH3TOJHF4FZBiorPc1w0XGyaxJHtpC/
VbFMsDhM5upTSD4sqG+iBXT/5VRqCkymDTokpt0WLTCO0sdxQmRluXaUQGaFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUTm0bt/UrDtrubOgHQhkYRDXhuGQwHwYDVR0j
BBgwFoAU23owDL0oWPMzPRfJHrAH/+rqSd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU44U0Qzcml0cjlIeUhEZHFlZ05wYm9VQm13QlZvcEp5cGlTSlRWQUR4
RmkvMC9EQjdBMzAwQ0JEMjg1OEYzMzMzRDE3QzkxRUIwMDdGRkVBRUE0OURFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCN0EzMDBDQkQyODU4RjMz
MzNEMTdDOTFFQjAwN0ZGRUFFQTQ5REUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlOOFNEM3JpdHI5SHlIRGRxZWdOcGJvVUJtd0JWb3BKeXBpU0pUVkFEeEZpLzAv
MzIzODMwMzQzYTM3NjI2NjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzQzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR78DANBgkqhkiG9w0BAQsFAAOCAQEAl5TCTjdA
BYQo3qa4tR+PSG4wDh5dfN4G9Z19Q4XD0LrrCF+YG+vDp74Hx5afhgjl1SJg+mQ1
XqFH0PHDBrG5SIkx66yxJZQeHHWnPiIWsleyNzPgorCUp18EemjXuYzfvVOLMIre
y5eFZ4YfbGPUR1sFjLWoLz1BY5PeA334aBJNANtpJ34umJUEBM7wTbwTgAgwKNk9
fihpHYeKjDjINAM7FymyRmEjCsrFIMTuJ3URp3mFPufc5KVazXTbDQHIn7bVS6P2
TBmtgT+pQN8gFoaOCExSbB4KOM6dwbydCAbI+Sby0LgHlzuHSUT34Pv9TV/l17iH
rWxXmhjKHbO0uQ==
-----END CERTIFICATE-----