Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/323830343a346266343a666666303a3a2f34352d3435203d3e20323637333339.roa
File:                     323830343a346266343a666666303a3a2f34352d3435203d3e20323637333339.roa (raw, json)
Hash identifier:          uVBHDarUAG4IylQrtgGdygINV+SiVR8ookYIyAuD4pY=
Subject key identifier:   E1:25:34:F3:FA:53:7B:72:D7:F8:B6:99:CA:D5:D6:53:57:25:49:EB
Certificate issuer:       /CN=A09087E55846274477AB0E4597FD754DB0509203
Certificate serial:       7973CD45D800151B1BDEAF47D003EE4FE961953C
Authority key identifier: A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/323830343a346266343a666666303a3a2f34352d3435203d3e20323637333339.roa
Signing time:             Sun 09 Jul 2023 04:08:10 +0000
ROA not before:           Sun 09 Jul 2023 04:03:10 +0000
ROA not after:            Sun 07 Jul 2024 04:08:10 +0000
asID:                     267339
IP address blocks:        2804:4bf4:fff0::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:73:cd:45:d8:00:15:1b:1b:de:af:47:d0:03:ee:4f:e9:61:95:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09087E55846274477AB0E4597FD754DB0509203
        Validity
            Not Before: Jul  9 04:03:10 2023 GMT
            Not After : Jul  7 04:08:10 2024 GMT
        Subject: CN=E12534F3FA537B72D7F8B699CAD5D653572549EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:20:90:d4:8b:67:1c:75:1a:40:4e:4a:25:
                    88:fc:b4:63:d4:82:c4:79:1e:03:8c:af:9e:98:95:
                    d3:d3:3d:47:15:9b:17:ed:d2:a1:98:75:4b:22:1f:
                    b3:17:a3:1d:91:97:fd:53:f9:5d:9e:a5:2c:b8:6b:
                    c4:6a:78:14:dc:84:37:5c:ed:6b:4a:82:c3:45:6f:
                    99:ae:40:cb:cc:cc:17:5a:26:3b:84:f0:4d:97:a1:
                    43:4b:58:6a:b4:62:3d:f5:87:ad:2d:ac:9d:c1:d1:
                    d8:0f:a3:3b:fe:de:8d:18:cb:35:1f:cf:1e:c1:cc:
                    7c:86:4d:27:77:17:30:a0:f6:17:e2:72:fe:09:04:
                    99:65:5e:11:aa:79:73:ff:72:dc:30:64:42:54:d0:
                    fd:dd:6a:50:57:1f:ae:91:ba:f5:b2:59:9d:61:9f:
                    f1:3c:5b:ae:12:04:9a:b4:47:86:58:a6:f0:b6:2d:
                    79:2d:8b:bf:26:f4:0e:35:35:09:80:df:c0:6f:7a:
                    42:31:b5:e9:b8:6a:b0:75:72:5b:d9:91:56:a5:b4:
                    00:1d:51:47:63:ef:73:0d:0a:9a:1e:09:1f:45:60:
                    c9:09:80:48:01:f3:8c:17:86:8b:d3:07:30:76:f5:
                    eb:2d:07:54:d5:8f:7f:65:4d:17:c6:f6:dc:68:22:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:25:34:F3:FA:53:7B:72:D7:F8:B6:99:CA:D5:D6:53:57:25:49:EB
            X509v3 Authority Key Identifier:
                keyid:A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/A09087E55846274477AB0E4597FD754DB0509203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/323830343a346266343a666666303a3a2f34352d3435203d3e20323637333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bf4:fff0::/45

    Signature Algorithm: sha256WithRSAEncryption
         75:f2:9c:55:03:09:0a:d1:b1:5f:65:72:79:a2:7a:58:9a:29:
         4a:4e:63:03:59:50:8b:f9:57:02:d8:53:f4:f0:15:68:b3:ca:
         d2:d6:57:dc:d5:76:41:d1:8a:71:87:d9:55:2f:bb:d0:a2:75:
         19:c9:3d:9f:49:16:8c:07:d6:f5:e8:5f:fe:4f:a2:2d:16:16:
         1d:9b:c4:e4:d3:96:32:bb:1d:66:ce:05:43:d4:cb:04:6b:28:
         49:52:2f:ec:e1:51:d5:45:72:70:40:aa:ad:e5:27:08:2f:2d:
         51:ca:6d:0b:ff:b1:a6:d4:aa:d2:57:e8:16:c8:f5:68:d9:02:
         45:46:89:6a:9a:6a:32:74:ad:89:3d:6f:5c:09:4d:db:24:4a:
         25:2a:df:9c:76:d7:59:d8:28:c0:1b:07:71:0f:eb:75:28:86:
         2a:d2:03:4e:a5:eb:e4:21:eb:51:87:c0:97:ac:12:c5:8b:fc:
         3c:d8:40:91:be:5c:f9:bd:75:ac:c8:8f:b9:3f:f5:ea:9d:7a:
         9b:0b:e7:bd:98:d5:09:a4:d7:96:24:d9:78:b5:bb:2c:58:ed:
         30:d6:6a:90:10:93:45:16:7c:7f:44:1a:34:54:e2:f0:01:c6:
         e2:18:2a:6c:bd:7d:57:e0:d8:4d:08:34:04:2d:f6:a5:50:67:
         52:b7:c7:1a
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUeXPNRdgAFRsb3q9H0APuT+lhlTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5MDg3RTU1ODQ2Mjc0NDc3QUIwRTQ1OTdGRDc1NERC
MDUwOTIwMzAeFw0yMzA3MDkwNDAzMTBaFw0yNDA3MDcwNDA4MTBaMDMxMTAvBgNV
BAMTKEUxMjUzNEYzRkE1MzdCNzJEN0Y4QjY5OUNBRDVENjUzNTcyNTQ5RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+CCQ1ItnHHUaQE5KJYj8tGPU
gsR5HgOMr56YldPTPUcVmxft0qGYdUsiH7MXox2Rl/1T+V2epSy4a8RqeBTchDdc
7WtKgsNFb5muQMvMzBdaJjuE8E2XoUNLWGq0Yj31h60trJ3B0dgPozv+3o0YyzUf
zx7BzHyGTSd3FzCg9hficv4JBJllXhGqeXP/ctwwZEJU0P3dalBXH66RuvWyWZ1h
n/E8W64SBJq0R4ZYpvC2LXkti78m9A41NQmA38BvekIxtem4arB1clvZkValtAAd
UUdj73MNCpoeCR9FYMkJgEgB84wXhovTBzB29estB1TVj39lTRfG9txoIvIJAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU4SU08/pTe3LX+LaZytXWU1clSeswHwYDVR0j
BBgwFoAUoJCH5VhGJ0R3qw5Fl/11TbBQkgMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW9CYndxeFg5MURleGgxVFRxeng5WDlab0ZDNFQ1VEw0OGIycVJTcm9E
WVcvMC9BMDkwODdFNTU4NDYyNzQ0NzdBQjBFNDU5N0ZENzU0REIwNTA5MjAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwOTA4N0U1NTg0NjI3NDQ3
N0FCMEU0NTk3RkQ3NTREQjA1MDkyMDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FvQmJ3cXhYOTFEZXhoMVRUcXp4OVg5Wm9GQzRUNVRMNDhiMnFSU3JvRFlXLzAv
MzIzODMwMzQzYTM0NjI2NjM0M2E2NjY2NjYzMDNhM2EyZjM0MzUyZDM0MzUyMDNk
M2UyMDMyMzYzNzMzMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAygES/T/8DANBgkqhkiG9w0BAQsF
AAOCAQEAdfKcVQMJCtGxX2VyeaJ6WJopSk5jA1lQi/lXAthT9PAVaLPK0tZX3NV2
QdGKcYfZVS+70KJ1Gck9n0kWjAfW9ehf/k+iLRYWHZvE5NOWMrsdZs4FQ9TLBGso
SVIv7OFR1UVycECqreUnCC8tUcptC/+xptSq0lfoFsj1aNkCRUaJappqMnStiT1v
XAlN2yRKJSrfnHbXWdgowBsHcQ/rdSiGKtIDTqXr5CHrUYfAl6wSxYv8PNhAkb5c
+b11rMiPuT/16p16mwvnvZjVCaTXliTZeLW7LFjtMNZqkBCTRRZ8f0QaNFTi8AHG
4hgqbL19V+DYTQg0BC32pVBnUrfHGg==
-----END CERTIFICATE-----