Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a613030303a3a2f33352d3335203d3e20323636343837.roa
File:                     323830343a333839343a613030303a3a2f33352d3335203d3e20323636343837.roa (raw, json)
Hash identifier:          D+1H2q5DN5BBpN57pMRzRXntXWlhcqADY9HFir34Pks=
Subject key identifier:   11:ED:80:10:A5:C5:B2:B9:8F:F1:88:C4:83:9A:E5:F7:10:30:72:13
Certificate issuer:       /CN=9EE7E228565399C7733D7B54CA4022D13B0E9209
Certificate serial:       1C9CC638ADBEAE48518F49C986B2C4F73258B511
Authority key identifier: 9E:E7:E2:28:56:53:99:C7:73:3D:7B:54:CA:40:22:D1:3B:0E:92:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EE7E228565399C7733D7B54CA4022D13B0E9209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a613030303a3a2f33352d3335203d3e20323636343837.roa
Signing time:             Fri 14 Jul 2023 12:17:59 +0000
ROA not before:           Fri 14 Jul 2023 12:12:59 +0000
ROA not after:            Fri 12 Jul 2024 12:17:59 +0000
asID:                     266487
IP address blocks:        2804:3894:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9c:c6:38:ad:be:ae:48:51:8f:49:c9:86:b2:c4:f7:32:58:b5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE7E228565399C7733D7B54CA4022D13B0E9209
        Validity
            Not Before: Jul 14 12:12:59 2023 GMT
            Not After : Jul 12 12:17:59 2024 GMT
        Subject: CN=11ED8010A5C5B2B98FF188C4839AE5F710307213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f6:dd:73:f9:95:e0:b8:9b:d3:ce:be:e2:9c:
                    71:b7:4f:61:94:fd:22:28:6c:98:a1:a9:62:93:a0:
                    ca:7a:e1:b9:6f:ab:4d:00:1f:8a:53:d4:2e:51:18:
                    7d:d3:ba:31:9d:6f:71:64:1c:64:c3:90:0f:63:1d:
                    02:db:23:27:08:1a:f6:78:46:ec:2e:cd:13:b0:5c:
                    8c:c5:e0:c2:88:ab:ca:fd:76:3f:b6:00:92:e0:ee:
                    eb:46:59:d2:1b:40:dd:c9:b4:f9:92:6e:23:ff:c4:
                    60:54:9a:8b:0b:86:6c:82:27:c7:08:3a:ee:fd:fd:
                    60:1a:51:2c:e4:89:9b:b8:fa:8e:ff:7c:4e:0a:46:
                    e7:7b:87:8e:01:fa:73:20:fc:d5:47:59:e0:4e:32:
                    d1:27:6f:e7:f1:df:7f:0a:b5:61:c2:e9:bd:01:dc:
                    74:1c:16:eb:00:d9:7f:ec:34:b5:aa:6c:6e:6b:9d:
                    55:a5:48:2c:81:29:e2:c7:89:5e:c6:25:77:60:a8:
                    da:0b:16:de:51:82:2e:87:da:13:79:2f:dc:22:0d:
                    83:c3:1c:e8:0a:07:0d:c8:25:6a:b4:32:be:06:99:
                    c0:8d:28:c2:27:3c:57:48:84:f7:de:f1:38:38:55:
                    3d:ec:67:85:8f:c4:a0:6f:30:a6:16:96:f7:16:70:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:ED:80:10:A5:C5:B2:B9:8F:F1:88:C4:83:9A:E5:F7:10:30:72:13
            X509v3 Authority Key Identifier:
                keyid:9E:E7:E2:28:56:53:99:C7:73:3D:7B:54:CA:40:22:D1:3B:0E:92:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/9EE7E228565399C7733D7B54CA4022D13B0E9209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EE7E228565399C7733D7B54CA4022D13B0E9209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a613030303a3a2f33352d3335203d3e20323636343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3894:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         35:8e:25:9b:8b:70:f6:7c:33:67:cb:2e:33:ea:16:a8:0c:9e:
         50:ad:20:5c:1c:92:dd:d6:85:cf:cf:4d:85:a0:b7:5a:8a:8d:
         60:e0:ee:e4:00:8a:32:fc:d1:5d:6e:43:18:97:e7:30:41:17:
         87:d2:ed:23:21:cb:32:07:5e:33:13:8b:74:bd:75:15:e5:38:
         42:4f:98:20:77:3b:ea:3d:40:86:96:0f:5d:eb:a8:ef:b5:a6:
         ea:c6:bc:13:f4:07:2b:37:55:54:86:5e:e3:c8:ee:7c:c1:2d:
         42:ed:0a:cf:b5:8e:62:f5:7d:54:3c:65:9e:d9:a3:19:b0:98:
         af:77:5e:4f:a3:d0:52:54:3a:fb:66:78:0b:57:01:3f:15:68:
         c4:b5:a7:e6:d5:b4:ec:d0:e0:fa:92:fc:20:49:37:2b:92:e3:
         b7:bd:d8:6d:90:ca:3f:61:ca:d6:85:a0:1c:25:b9:cd:6b:1e:
         59:07:ba:4d:a0:7e:37:97:f5:7a:55:b3:c4:d5:65:7e:db:3f:
         26:69:6f:47:63:67:fa:60:e0:e2:ea:cc:e4:fd:64:6f:35:5a:
         61:d0:59:fb:21:fc:a9:79:1b:1b:a7:83:c6:18:81:73:22:fb:
         e6:86:72:92:93:d5:ed:30:5e:0a:dc:10:c1:1e:3b:49:6f:9e:
         d0:a6:19:93
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHJzGOK2+rkhRj0nJhrLE9zJYtREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVFN0UyMjg1NjUzOTlDNzczM0Q3QjU0Q0E0MDIyRDEz
QjBFOTIwOTAeFw0yMzA3MTQxMjEyNTlaFw0yNDA3MTIxMjE3NTlaMDMxMTAvBgNV
BAMTKDExRUQ4MDEwQTVDNUIyQjk4RkYxODhDNDgzOUFFNUY3MTAzMDcyMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9t1z+ZXguJvTzr7inHG3T2GU
/SIobJihqWKToMp64blvq00AH4pT1C5RGH3TujGdb3FkHGTDkA9jHQLbIycIGvZ4
RuwuzROwXIzF4MKIq8r9dj+2AJLg7utGWdIbQN3JtPmSbiP/xGBUmosLhmyCJ8cI
Ou79/WAaUSzkiZu4+o7/fE4KRud7h44B+nMg/NVHWeBOMtEnb+fx338KtWHC6b0B
3HQcFusA2X/sNLWqbG5rnVWlSCyBKeLHiV7GJXdgqNoLFt5Rgi6H2hN5L9wiDYPD
HOgKBw3IJWq0Mr4GmcCNKMInPFdIhPfe8Tg4VT3sZ4WPxKBvMKYWlvcWcCI5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUEe2AEKXFsrmP8YjEg5rl9xAwchMwHwYDVR0j
BBgwFoAUnufiKFZTmcdzPXtUykAi0TsOkgkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXFjWUZibWRnaXQzYnlITHZFZ24xRzJSQ3FMYXZtQ1NINFdRZXVGRHk3
cFUvMC85RUU3RTIyODU2NTM5OUM3NzMzRDdCNTRDQTQwMjJEMTNCMEU5MjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlFRTdFMjI4NTY1Mzk5Qzc3
MzNEN0I1NENBNDAyMkQxM0IwRTkyMDkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxY1lGYm1kZ2l0M2J5SEx2RWduMUcyUkNxTGF2bUNTSDRXUWV1RkR5N3BVLzAv
MzIzODMwMzQzYTMzMzgzOTM0M2E2MTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzNjM0MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEOJSgMA0GCSqGSIb3DQEBCwUA
A4IBAQA1jiWbi3D2fDNnyy4z6haoDJ5QrSBcHJLd1oXPz02FoLdaio1g4O7kAIoy
/NFdbkMYl+cwQReH0u0jIcsyB14zE4t0vXUV5ThCT5ggdzvqPUCGlg9d66jvtabq
xrwT9AcrN1VUhl7jyO58wS1C7QrPtY5i9X1UPGWe2aMZsJivd15Po9BSVDr7ZngL
VwE/FWjEtafm1bTs0OD6kvwgSTcrkuO3vdhtkMo/YcrWhaAcJbnNax5ZB7pNoH43
l/V6VbPE1WV+2z8maW9HY2f6YODi6szk/WRvNVph0Fn7IfypeRsbp4PGGIFzIvvm
hnKSk9XtMF4K3BDBHjtJb57QphmT
-----END CERTIFICATE-----