Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3334203d3e20323632343037.roa
File:                     323830343a3366343a3a2f33322d3334203d3e20323632343037.roa (raw, json)
Hash identifier:          ztX9zvfaVMp4X/AMa+YAXlVvNsuGTmQUcJjup0XHopg=
Subject key identifier:   DF:9D:92:8D:51:2E:32:4F:B5:23:21:E2:1C:6D:B0:5C:9A:6A:03:3F
Certificate issuer:       /CN=AF9DBF2A5663353E2ACB7FB702C7213AA40E217F
Certificate serial:       6F1EA8C8607011F56DC472E447BA8CE149B4237D
Authority key identifier: AF:9D:BF:2A:56:63:35:3E:2A:CB:7F:B7:02:C7:21:3A:A4:0E:21:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF9DBF2A5663353E2ACB7FB702C7213AA40E217F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3334203d3e20323632343037.roa
Signing time:             Mon 22 Aug 2022 18:07:35 +0000
ROA not before:           Mon 22 Aug 2022 18:02:35 +0000
ROA not after:            Mon 21 Aug 2023 18:07:35 +0000
asID:                     262407
IP address blocks:        2804:3f4::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1e:a8:c8:60:70:11:f5:6d:c4:72:e4:47:ba:8c:e1:49:b4:23:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF9DBF2A5663353E2ACB7FB702C7213AA40E217F
        Validity
            Not Before: Aug 22 18:02:35 2022 GMT
            Not After : Aug 21 18:07:35 2023 GMT
        Subject: CN=DF9D928D512E324FB52321E21C6DB05C9A6A033F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:13:9b:b6:4e:29:ff:41:91:13:d1:35:e1:3e:
                    06:5c:ba:20:f4:e8:fd:15:e5:59:75:45:92:91:08:
                    d6:00:82:4d:da:b4:b2:29:0b:9a:8c:ff:8c:7d:79:
                    60:67:1c:40:fa:5e:e5:53:f5:21:c4:02:c4:e8:ac:
                    5a:43:07:f3:68:08:19:4e:7a:c7:b2:5c:e4:f9:93:
                    3c:d4:5f:de:cf:bf:89:74:fe:ef:f6:14:cf:18:e1:
                    b6:60:2d:b9:d9:bf:f6:25:cd:c0:5a:b7:cc:f5:99:
                    93:1d:c4:76:6f:ac:ce:82:1c:45:2b:f6:92:d8:30:
                    22:7a:c5:b7:02:0b:b2:b8:d3:7e:bb:f9:f6:f3:08:
                    5a:f8:c6:d0:f8:bb:3f:33:bd:60:62:c7:96:96:03:
                    a9:20:4f:95:6d:eb:d1:ef:90:00:4f:ec:44:ae:aa:
                    c6:48:ce:08:03:25:86:40:ae:50:e5:e7:9b:2c:06:
                    a9:fd:b2:d1:e1:c5:55:24:c4:93:5b:9a:be:88:e2:
                    0f:a5:0b:a7:18:ff:21:1c:df:37:ca:bf:40:59:66:
                    9e:e4:a7:ef:3e:c4:45:16:52:f8:19:a8:d3:b3:0a:
                    5b:60:21:db:c3:72:45:b5:35:c6:f5:7e:08:66:f1:
                    0d:7c:48:57:1f:30:a1:13:5e:ca:ea:29:36:f3:ff:
                    34:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9D:92:8D:51:2E:32:4F:B5:23:21:E2:1C:6D:B0:5C:9A:6A:03:3F
            X509v3 Authority Key Identifier:
                keyid:AF:9D:BF:2A:56:63:35:3E:2A:CB:7F:B7:02:C7:21:3A:A4:0E:21:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/AF9DBF2A5663353E2ACB7FB702C7213AA40E217F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF9DBF2A5663353E2ACB7FB702C7213AA40E217F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3334203d3e20323632343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:85:73:bb:47:13:f1:bb:d7:a8:e8:83:b8:f6:46:f2:9c:74:
         50:d3:9e:8d:f6:83:97:fb:cc:c1:68:3a:86:31:d1:56:46:d9:
         f0:a9:92:dd:82:2f:e2:e8:5b:b7:0b:55:84:08:3a:86:76:3e:
         fb:09:ff:d3:8c:83:ed:87:ba:60:d3:48:22:34:2a:ee:73:c0:
         12:18:d4:ff:af:9f:09:a2:25:7f:f1:90:d2:2b:3c:71:ce:3f:
         4f:36:f9:5b:f8:73:3c:df:83:b4:d4:7f:cb:9e:1c:5a:93:5f:
         bd:e2:31:22:d5:ba:17:4a:2b:d0:d1:68:9c:b1:e1:3b:f1:61:
         a2:9c:0c:00:0f:f7:19:95:ea:27:df:b1:0b:b1:20:8f:02:1a:
         6f:54:5c:53:fc:66:bc:e1:d5:23:cf:5c:00:70:f2:9f:2e:f8:
         f4:6f:b2:27:aa:8c:03:2d:b7:10:15:39:39:fe:86:f3:fb:36:
         9a:1b:02:cf:6c:f2:9e:b4:df:8f:e5:30:e5:82:02:e0:95:64:
         06:54:87:b4:1f:87:84:34:2f:d7:8c:77:ab:48:35:a6:e1:77:
         8a:64:c0:62:f1:d0:2e:68:b8:0b:5a:b2:3b:c2:1f:45:48:0f:
         95:2c:b3:6e:54:de:b4:7f:ce:16:5e:7a:b8:b4:80:6c:a6:56:
         6d:53:99:0e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUbx6oyGBwEfVtxHLkR7qM4Um0I30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY5REJGMkE1NjYzMzUzRTJBQ0I3RkI3MDJDNzIxM0FB
NDBFMjE3RjAeFw0yMjA4MjIxODAyMzVaFw0yMzA4MjExODA3MzVaMDMxMTAvBgNV
BAMTKERGOUQ5MjhENTEyRTMyNEZCNTIzMjFFMjFDNkRCMDVDOUE2QTAzM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXE5u2Tin/QZET0TXhPgZcuiD0
6P0V5Vl1RZKRCNYAgk3atLIpC5qM/4x9eWBnHED6XuVT9SHEAsTorFpDB/NoCBlO
eseyXOT5kzzUX97Pv4l0/u/2FM8Y4bZgLbnZv/YlzcBat8z1mZMdxHZvrM6CHEUr
9pLYMCJ6xbcCC7K40367+fbzCFr4xtD4uz8zvWBix5aWA6kgT5Vt69HvkABP7ESu
qsZIzggDJYZArlDl55ssBqn9stHhxVUkxJNbmr6I4g+lC6cY/yEc3zfKv0BZZp7k
p+8+xEUWUvgZqNOzCltgIdvDckW1Ncb1fghm8Q18SFcfMKETXsrqKTbz/zQZAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU352SjVEuMk+1IyHiHG2wXJpqAz8wHwYDVR0j
BBgwFoAUr52/KlZjNT4qy3+3AschOqQOIX8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmF4dDlpZTZZRHA4MWlncmRjbzVYR2VkbXhzZ1l0dUhhMlAxV2RiVFpY
SEUvMC9BRjlEQkYyQTU2NjMzNTNFMkFDQjdGQjcwMkM3MjEzQUE0MEUyMTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FGOURCRjJBNTY2MzM1M0Uy
QUNCN0ZCNzAyQzcyMTNBQTQwRTIxN0YuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JheHQ5aWU2WURwODFpZ3JkY281WEdlZG14c2dZdHVIYTJQMVdkYlRaWEhFLzAv
MzIzODMwMzQzYTMzNjYzNDNhM2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzMjM0
MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEA/QwDQYJKoZIhvcNAQELBQADggEBALOFc7tHE/G7
16jog7j2RvKcdFDTno32g5f7zMFoOoYx0VZG2fCpkt2CL+LoW7cLVYQIOoZ2PvsJ
/9OMg+2HumDTSCI0Ku5zwBIY1P+vnwmiJX/xkNIrPHHOP082+Vv4czzfg7TUf8ue
HFqTX73iMSLVuhdKK9DRaJyx4TvxYaKcDAAP9xmV6iffsQuxII8CGm9UXFP8Zrzh
1SPPXABw8p8u+PRvsieqjAMttxAVOTn+hvP7NpobAs9s8p6034/lMOWCAuCVZAZU
h7Qfh4Q0L9eMd6tINabhd4pkwGLx0C5ouAtasjvCH0VID5Uss25U3rR/zhZeeri0
gGymVm1TmQ4=
-----END CERTIFICATE-----