Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a633030303a3a2f33342d3334203d3e20323636343837.roa
File:                     323830343a333839343a633030303a3a2f33342d3334203d3e20323636343837.roa (raw, json)
Hash identifier:          V4owbEK74xCezr1vSUckd4WVFWoDLE3W2XsUxnxXy/I=
Subject key identifier:   23:91:EE:B0:96:52:7B:B8:84:0F:D2:6F:85:7E:2E:2F:3B:E5:11:7E
Certificate issuer:       /CN=9EE7E228565399C7733D7B54CA4022D13B0E9209
Certificate serial:       77825417F9166A8FB347294A78B4334C41E489DD
Authority key identifier: 9E:E7:E2:28:56:53:99:C7:73:3D:7B:54:CA:40:22:D1:3B:0E:92:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EE7E228565399C7733D7B54CA4022D13B0E9209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a633030303a3a2f33342d3334203d3e20323636343837.roa
Signing time:             Fri 14 Jul 2023 12:18:01 +0000
ROA not before:           Fri 14 Jul 2023 12:13:01 +0000
ROA not after:            Fri 12 Jul 2024 12:18:01 +0000
asID:                     266487
IP address blocks:        2804:3894:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:82:54:17:f9:16:6a:8f:b3:47:29:4a:78:b4:33:4c:41:e4:89:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE7E228565399C7733D7B54CA4022D13B0E9209
        Validity
            Not Before: Jul 14 12:13:01 2023 GMT
            Not After : Jul 12 12:18:01 2024 GMT
        Subject: CN=2391EEB096527BB8840FD26F857E2E2F3BE5117E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d1:5d:d6:08:7d:ac:be:1d:36:a7:d2:cf:28:
                    9e:a9:7c:2f:25:20:04:0b:96:18:a6:d8:98:7f:9b:
                    27:5c:c1:2d:87:91:dc:9d:6a:ea:78:c3:2c:e3:e9:
                    59:52:9b:b0:39:bd:06:f7:19:1a:18:0d:7f:8e:81:
                    de:e3:fa:1e:53:96:d6:73:a7:9b:e6:f9:03:24:c6:
                    26:bb:88:a5:fb:61:02:13:6c:e9:37:61:7a:ad:0c:
                    44:10:24:a7:b1:71:37:9f:46:24:09:5a:f2:c5:9f:
                    d0:b9:39:d0:9e:c9:ce:d2:cb:70:4f:52:05:12:a1:
                    7b:8c:32:d4:19:76:6e:01:b6:7f:b7:31:3c:6d:7c:
                    33:58:9c:a3:3c:54:1d:02:86:6f:f2:1b:76:66:5d:
                    83:d7:81:f0:64:62:96:60:9b:42:a8:04:23:5f:98:
                    60:cb:de:b9:0c:74:35:9e:f2:e7:82:a7:c4:ae:f8:
                    20:08:8c:73:a1:20:f7:7a:9d:1e:16:aa:0c:14:19:
                    f3:d7:08:24:8b:03:62:48:ed:6e:50:2f:52:cd:fe:
                    71:c9:7a:eb:7d:50:a6:e3:19:34:60:7f:53:62:18:
                    32:1b:7e:37:5f:d7:ea:f1:ad:89:e6:ce:68:62:46:
                    e3:e4:5b:b0:11:b2:64:be:e8:a1:db:72:6b:13:ab:
                    51:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:91:EE:B0:96:52:7B:B8:84:0F:D2:6F:85:7E:2E:2F:3B:E5:11:7E
            X509v3 Authority Key Identifier:
                keyid:9E:E7:E2:28:56:53:99:C7:73:3D:7B:54:CA:40:22:D1:3B:0E:92:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/9EE7E228565399C7733D7B54CA4022D13B0E9209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EE7E228565399C7733D7B54CA4022D13B0E9209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a633030303a3a2f33342d3334203d3e20323636343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3894:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6c:38:5b:cd:85:f2:84:de:ad:ed:87:8c:5c:44:f4:37:57:63:
         bd:73:5d:de:10:06:aa:3a:c9:37:f7:07:89:11:85:d2:cd:1b:
         84:a5:6a:40:0e:61:7a:2e:71:3f:7a:6b:76:47:2b:83:83:40:
         a8:0b:0d:29:db:a6:3a:8d:30:16:ec:ad:c5:f1:f9:75:53:cc:
         6a:94:42:c6:99:56:f2:e1:7f:a2:1b:74:75:b0:ae:0c:d2:3f:
         50:f3:27:e7:08:ff:9a:83:59:95:bd:22:f5:f1:25:9d:a0:32:
         38:d5:86:a3:86:b5:28:01:9e:76:ba:65:7b:e6:7d:6f:68:19:
         28:0c:e2:c2:fa:4d:3b:9c:a5:aa:62:d1:b8:93:13:e3:6c:27:
         02:e8:e4:2d:63:6e:52:7d:00:c4:82:d2:95:eb:42:40:98:46:
         23:58:d5:0a:38:78:1d:7d:6a:91:28:ba:10:0d:b4:b9:12:d7:
         f6:f5:a3:78:3c:51:80:56:ed:d6:89:d2:74:29:12:bc:a1:1d:
         69:18:76:18:4a:2a:25:0c:09:b5:13:de:89:c7:55:12:20:9f:
         0b:29:05:f8:60:7d:a1:9d:65:fa:44:4f:eb:98:fa:0c:db:ae:
         e3:45:9c:86:a1:27:8d:27:79:bf:74:45:95:94:97:c0:ba:08:
         35:be:a1:af
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUd4JUF/kWao+zRylKeLQzTEHkid0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVFN0UyMjg1NjUzOTlDNzczM0Q3QjU0Q0E0MDIyRDEz
QjBFOTIwOTAeFw0yMzA3MTQxMjEzMDFaFw0yNDA3MTIxMjE4MDFaMDMxMTAvBgNV
BAMTKDIzOTFFRUIwOTY1MjdCQjg4NDBGRDI2Rjg1N0UyRTJGM0JFNTExN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc0V3WCH2svh02p9LPKJ6pfC8l
IAQLlhim2Jh/mydcwS2Hkdydaup4wyzj6VlSm7A5vQb3GRoYDX+Ogd7j+h5TltZz
p5vm+QMkxia7iKX7YQITbOk3YXqtDEQQJKexcTefRiQJWvLFn9C5OdCeyc7Sy3BP
UgUSoXuMMtQZdm4Btn+3MTxtfDNYnKM8VB0Chm/yG3ZmXYPXgfBkYpZgm0KoBCNf
mGDL3rkMdDWe8ueCp8Su+CAIjHOhIPd6nR4WqgwUGfPXCCSLA2JI7W5QL1LN/nHJ
eut9UKbjGTRgf1NiGDIbfjdf1+rxrYnmzmhiRuPkW7ARsmS+6KHbcmsTq1ErAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUI5HusJZSe7iED9JvhX4uLzvlEX4wHwYDVR0j
BBgwFoAUnufiKFZTmcdzPXtUykAi0TsOkgkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXFjWUZibWRnaXQzYnlITHZFZ24xRzJSQ3FMYXZtQ1NINFdRZXVGRHk3
cFUvMC85RUU3RTIyODU2NTM5OUM3NzMzRDdCNTRDQTQwMjJEMTNCMEU5MjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlFRTdFMjI4NTY1Mzk5Qzc3
MzNEN0I1NENBNDAyMkQxM0IwRTkyMDkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxY1lGYm1kZ2l0M2J5SEx2RWduMUcyUkNxTGF2bUNTSDRXUWV1RkR5N3BVLzAv
MzIzODMwMzQzYTMzMzgzOTM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjM0MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEOJTAMA0GCSqGSIb3DQEBCwUA
A4IBAQBsOFvNhfKE3q3th4xcRPQ3V2O9c13eEAaqOsk39weJEYXSzRuEpWpADmF6
LnE/emt2RyuDg0CoCw0p26Y6jTAW7K3F8fl1U8xqlELGmVby4X+iG3R1sK4M0j9Q
8yfnCP+ag1mVvSL18SWdoDI41YajhrUoAZ52umV75n1vaBkoDOLC+k07nKWqYtG4
kxPjbCcC6OQtY25SfQDEgtKV60JAmEYjWNUKOHgdfWqRKLoQDbS5Etf29aN4PFGA
Vu3WidJ0KRK8oR1pGHYYSiolDAm1E96Jx1USIJ8LKQX4YH2hnWX6RE/rmPoM267j
RZyGoSeNJ3m/dEWVlJfAugg1vqGv
-----END CERTIFICATE-----