Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/323830343a363434343a3a2f33322d3332203d3e20323639343137.roa
File:                     323830343a363434343a3a2f33322d3332203d3e20323639343137.roa (raw, json)
Hash identifier:          /Ck+oKesvR1yQu3xL9UOiod+lFwEtbQ1tWiSJbg21po=
Subject key identifier:   AE:A8:C5:18:41:4E:C2:D2:B2:18:84:45:FF:FE:0B:DF:59:D9:32:68
Certificate issuer:       /CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
Certificate serial:       21CA117182D66966B9BD282D031A12A5A1286993
Authority key identifier: 47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/323830343a363434343a3a2f33322d3332203d3e20323639343137.roa
Signing time:             Tue 02 May 2023 13:47:44 +0000
ROA not before:           Tue 02 May 2023 13:42:44 +0000
ROA not after:            Tue 30 Apr 2024 13:47:44 +0000
asID:                     269417
IP address blocks:        2804:6444::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ca:11:71:82:d6:69:66:b9:bd:28:2d:03:1a:12:a5:a1:28:69:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
        Validity
            Not Before: May  2 13:42:44 2023 GMT
            Not After : Apr 30 13:47:44 2024 GMT
        Subject: CN=AEA8C518414EC2D2B2188445FFFE0BDF59D93268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9b:86:76:ea:0a:d3:3f:19:08:e5:33:4b:36:
                    78:29:7e:71:4e:8f:23:17:3b:58:94:c0:d3:36:81:
                    f4:01:26:d8:c4:2e:42:39:f6:43:ad:61:4a:36:dd:
                    d4:11:1c:3e:3c:2b:4e:fd:db:3f:09:25:af:2e:11:
                    58:84:4b:f4:38:b8:ff:a5:f8:d9:c3:41:14:0c:8e:
                    41:c4:8c:e4:dd:d3:59:8f:af:34:bd:df:9c:96:ea:
                    20:d5:46:f1:fe:f2:f7:e3:61:1f:52:45:9b:9d:78:
                    02:11:fd:b9:4b:47:a5:8a:70:83:c8:da:87:4a:49:
                    a2:42:23:7a:ba:b2:d1:f8:70:2a:9e:39:ac:7c:4b:
                    c4:6c:f3:44:6f:c8:ce:62:15:75:de:27:84:4a:8f:
                    8a:65:79:79:24:0d:07:de:09:cb:b5:0d:ec:da:d9:
                    0b:37:e0:36:41:be:3e:24:a2:6d:b9:e7:60:2a:a3:
                    a8:2d:80:61:ac:11:8f:48:9c:bb:ec:75:a0:6f:08:
                    58:44:db:8f:53:3b:50:6d:03:ea:9d:be:0a:e4:4a:
                    5b:1b:56:f0:34:7e:e0:b6:e6:b9:a8:86:45:5d:f2:
                    57:58:45:56:75:dc:2c:9f:be:b7:18:c9:11:25:eb:
                    22:99:0b:c8:15:15:b1:9e:dc:0c:61:7b:ba:64:6c:
                    90:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A8:C5:18:41:4E:C2:D2:B2:18:84:45:FF:FE:0B:DF:59:D9:32:68
            X509v3 Authority Key Identifier:
                keyid:47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/323830343a363434343a3a2f33322d3332203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6444::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:17:6d:58:b8:60:c2:d3:e7:48:99:26:77:c1:dd:df:a4:85:
         93:06:2b:c4:f6:4f:d7:d5:af:0b:e4:f2:ee:92:14:f2:b4:82:
         9e:d6:25:21:bb:bc:7c:82:c6:2f:b8:4a:b3:2b:1e:da:82:5a:
         c1:28:b2:89:09:58:54:ed:87:49:06:19:e4:c7:ca:b1:35:24:
         5d:b5:7d:7f:8a:66:56:2f:22:e5:e8:73:bf:d0:7b:03:b7:cb:
         de:93:fa:73:6c:b0:1a:05:dd:2e:7e:17:56:50:e2:4d:23:a4:
         59:a4:e3:3b:1c:93:de:58:d2:24:e0:ef:a9:ca:96:33:73:d2:
         92:2d:57:7e:be:01:e1:de:26:32:24:02:03:44:61:37:8c:7d:
         9a:1e:46:17:b1:b2:14:9e:1f:ad:62:b3:ed:20:7c:4e:b6:56:
         e1:2c:ee:9d:75:b6:7c:86:4b:19:1e:ba:b7:cc:71:4d:fb:bc:
         66:ad:87:f2:8a:cc:5b:34:90:a5:22:39:94:14:d6:91:ae:43:
         2c:e4:08:e0:0c:4c:a6:41:0c:da:1f:a6:0c:a6:88:68:41:55:
         c0:42:dc:3a:e8:19:c9:35:74:85:29:b1:64:8c:ed:7a:9a:25:
         c4:6f:10:af:b6:1c:62:fc:de:ad:a4:97:03:27:67:f9:fb:cc:
         5d:fe:f0:5a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIcoRcYLWaWa5vSgtAxoSpaEoaZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDczNUE4OEVFRkI1MzVFMEFBOEY5NjAxMzVENTM0NUU4
M0UxQzc4RTAeFw0yMzA1MDIxMzQyNDRaFw0yNDA0MzAxMzQ3NDRaMDMxMTAvBgNV
BAMTKEFFQThDNTE4NDE0RUMyRDJCMjE4ODQ0NUZGRkUwQkRGNTlEOTMyNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbm4Z26grTPxkI5TNLNngpfnFO
jyMXO1iUwNM2gfQBJtjELkI59kOtYUo23dQRHD48K0792z8JJa8uEViES/Q4uP+l
+NnDQRQMjkHEjOTd01mPrzS935yW6iDVRvH+8vfjYR9SRZudeAIR/blLR6WKcIPI
2odKSaJCI3q6stH4cCqeOax8S8Rs80RvyM5iFXXeJ4RKj4pleXkkDQfeCcu1Deza
2Qs34DZBvj4kom2552Aqo6gtgGGsEY9InLvsdaBvCFhE249TO1BtA+qdvgrkSlsb
VvA0fuC25rmohkVd8ldYRVZ13CyfvrcYyREl6yKZC8gVFbGe3Axhe7pkbJBRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUrqjFGEFOwtKyGIRF//4L31nZMmgwHwYDVR0j
BBgwFoAURzWoju+1NeCqj5YBNdU0XoPhx44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXJQNUdXR0pTNWhGUUs3ZjV2UVNIVmRRWmJOYWlKNFdrV3BBeG1iYmVx
NUQvMC80NzM1QTg4RUVGQjUzNUUwQUE4Rjk2MDEzNUQ1MzQ1RTgzRTFDNzhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ3MzVBODhFRUZCNTM1RTBB
QThGOTYwMTM1RDUzNDVFODNFMUM3OEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlyUDVHV0dKUzVoRlFLN2Y1dlFTSFZkUVpiTmFpSjRXa1dwQXhtYmJlcTVELzAv
MzIzODMwMzQzYTM2MzQzNDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzQzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARkRDANBgkqhkiG9w0BAQsFAAOCAQEAFRdtWLhg
wtPnSJkmd8Hd36SFkwYrxPZP19WvC+Ty7pIU8rSCntYlIbu8fILGL7hKsyse2oJa
wSiyiQlYVO2HSQYZ5MfKsTUkXbV9f4pmVi8i5ehzv9B7A7fL3pP6c2ywGgXdLn4X
VlDiTSOkWaTjOxyT3ljSJODvqcqWM3PSki1Xfr4B4d4mMiQCA0RhN4x9mh5GF7Gy
FJ4frWKz7SB8TrZW4SzunXW2fIZLGR66t8xxTfu8Zq2H8orMWzSQpSI5lBTWka5D
LOQI4AxMpkEM2h+mDKaIaEFVwELcOugZyTV0hSmxZIztepolxG8Qr7YcYvzeraSX
Aydn+fvMXf7wWg==
-----END CERTIFICATE-----