Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a666666663a316163333a3a2f36342d3634203d3e203631353839.roa
File:                     323830343a343866303a666666663a316163333a3a2f36342d3634203d3e203631353839.roa (raw, json)
Hash identifier:          F1BNoBKUDP9Z64tTib9+COQ0neuIrpnEllBo6bFsw9E=
Subject key identifier:   95:A3:9F:FF:6B:D0:04:E4:27:59:1A:CC:46:C5:3C:24:82:60:0B:9D
Certificate issuer:       /CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
Certificate serial:       3A74D4366D6994530BE08A672661538A218FF4C8
Authority key identifier: 64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a666666663a316163333a3a2f36342d3634203d3e203631353839.roa
Signing time:             Tue 21 Mar 2023 13:29:56 +0000
ROA not before:           Tue 21 Mar 2023 13:24:56 +0000
ROA not after:            Tue 19 Mar 2024 13:29:56 +0000
asID:                     61589
IP address blocks:        2804:48f0:ffff:1ac3::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:74:d4:36:6d:69:94:53:0b:e0:8a:67:26:61:53:8a:21:8f:f4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
        Validity
            Not Before: Mar 21 13:24:56 2023 GMT
            Not After : Mar 19 13:29:56 2024 GMT
        Subject: CN=95A39FFF6BD004E427591ACC46C53C2482600B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:d4:f0:ac:7e:9d:03:62:ec:75:32:38:8a:
                    f1:71:64:59:a6:86:2b:3c:d9:a6:f2:d8:f4:8f:ec:
                    e2:bd:38:63:8e:4f:38:6b:27:ce:64:36:35:cb:27:
                    bb:c8:02:6b:52:1d:9d:0f:85:5b:20:5d:29:0c:d6:
                    3d:08:09:74:3c:35:ee:03:eb:f4:db:ae:fd:fb:40:
                    a2:83:20:4a:b2:57:fd:cb:ff:6b:c4:89:dd:63:41:
                    41:df:21:23:56:37:10:9a:78:28:eb:b1:71:04:7e:
                    8a:ef:43:ac:35:3f:a2:7c:70:2a:07:56:94:87:f4:
                    bb:ee:0e:4c:0d:47:cb:fd:89:b5:6f:a8:24:95:71:
                    e3:d5:8b:d9:4f:43:9a:48:46:2c:0b:fd:ad:a0:61:
                    81:71:09:fb:f9:8f:dd:b3:ea:31:90:05:90:1e:9c:
                    88:7f:82:35:0d:9b:22:e8:75:ba:31:e9:45:f7:44:
                    7c:36:3c:da:48:2c:d8:7a:3d:0a:34:57:d7:6e:c8:
                    dc:56:5a:c6:e8:3c:f0:d4:55:9e:6c:1c:33:0b:b3:
                    20:4e:ed:9d:5b:c0:75:19:a5:fb:1a:40:0a:c3:09:
                    4e:1b:57:d5:45:1f:60:46:9e:6b:8c:6b:31:a8:fa:
                    43:f9:eb:91:ae:40:10:16:ae:32:5e:15:bd:16:de:
                    d8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A3:9F:FF:6B:D0:04:E4:27:59:1A:CC:46:C5:3C:24:82:60:0B:9D
            X509v3 Authority Key Identifier:
                keyid:64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a666666663a316163333a3a2f36342d3634203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0:ffff:1ac3::/64

    Signature Algorithm: sha256WithRSAEncryption
         89:d1:6c:3e:28:4d:51:46:60:63:f9:ae:a6:7b:b8:27:1e:31:
         45:91:91:9a:97:78:37:db:cb:a6:18:9b:4a:95:15:e8:86:12:
         64:30:fa:64:51:5a:52:da:0e:bc:0b:ff:6a:46:45:92:d6:e4:
         64:33:9c:40:fe:86:80:0f:45:a1:35:e4:aa:2b:0b:f9:34:d2:
         a2:99:a9:0d:59:03:55:a1:d0:2b:89:39:a4:c4:42:35:21:ae:
         8d:99:04:8c:5a:bf:04:f2:23:f2:3e:63:83:59:5d:32:7b:0a:
         50:84:c6:75:36:de:48:97:e3:2c:dd:55:17:d6:72:86:fd:8c:
         ec:54:52:98:ca:b9:df:e7:10:29:f4:8d:54:d0:1a:b4:38:84:
         16:18:db:f1:f4:29:1d:03:3a:45:43:fc:e7:ec:7a:93:3d:2f:
         81:59:bd:4c:3c:d7:9f:dd:2d:fd:14:ec:c7:61:32:99:e0:df:
         14:20:a5:bb:51:52:5b:9e:8e:e6:e1:a3:89:f6:89:c3:7b:a3:
         e1:3c:ca:ec:f3:b0:8d:23:bf:1d:c6:76:b4:30:16:5f:f3:71:
         c3:c7:c9:b6:38:b8:8b:52:20:a5:dc:ec:3e:3e:64:d3:16:a1:
         ba:44:27:56:ff:f9:2a:e3:52:4a:5b:eb:92:36:ba:bf:31:3b:
         4f:83:47:0b
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIUOnTUNm1plFML4IpnJmFTiiGP9MgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ0RkRCQkU0NzQzRTVENTZCOEExNzdGQkYyRTMyNTFG
NDJEOTJFOTAeFw0yMzAzMjExMzI0NTZaFw0yNDAzMTkxMzI5NTZaMDMxMTAvBgNV
BAMTKDk1QTM5RkZGNkJEMDA0RTQyNzU5MUFDQzQ2QzUzQzI0ODI2MDBCOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7dTwrH6dA2LsdTI4ivFxZFmm
his82aby2PSP7OK9OGOOTzhrJ85kNjXLJ7vIAmtSHZ0PhVsgXSkM1j0ICXQ8Ne4D
6/Tbrv37QKKDIEqyV/3L/2vEid1jQUHfISNWNxCaeCjrsXEEforvQ6w1P6J8cCoH
VpSH9LvuDkwNR8v9ibVvqCSVcePVi9lPQ5pIRiwL/a2gYYFxCfv5j92z6jGQBZAe
nIh/gjUNmyLodbox6UX3RHw2PNpILNh6PQo0V9duyNxWWsboPPDUVZ5sHDMLsyBO
7Z1bwHUZpfsaQArDCU4bV9VFH2BGnmuMazGo+kP565GuQBAWrjJeFb0W3thnAgMB
AAGjggJmMIICYjAdBgNVHQ4EFgQUlaOf/2vQBOQnWRrMRsU8JIJgC50wHwYDVR0j
BBgwFoAUZE/bvkdD5dVrihd/vy4yUfQtkukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHFpYktIZkRmTWZ0UUp0eWl4Y3FOUWY1ZmlvdUR1ZjRiZmhaNHVzUUhj
RzQvMC82NDRGREJCRTQ3NDNFNUQ1NkI4QTE3N0ZCRjJFMzI1MUY0MkQ5MkU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY0NEZEQkJFNDc0M0U1RDU2
QjhBMTc3RkJGMkUzMjUxRjQyRDkyRTkuY2VyMIG+BggrBgEFBQcBCwSBsTCBrjCB
qwYIKwYBBQUHMAuGgZ5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxaWJLSGZEZk1mdFFKdHlpeGNxTlFmNWZpb3VEdWY0YmZoWjR1c1FIY0c0LzAv
MzIzODMwMzQzYTM0Mzg2NjMwM2E2NjY2NjY2NjNhMzE2MTYzMzMzYTNhMmYzNjM0
MmQzNjM0MjAzZDNlMjAzNjMxMzUzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKARI8P//GsMwDQYJ
KoZIhvcNAQELBQADggEBAInRbD4oTVFGYGP5rqZ7uCceMUWRkZqXeDfby6YYm0qV
FeiGEmQw+mRRWlLaDrwL/2pGRZLW5GQznED+hoAPRaE15KorC/k00qKZqQ1ZA1Wh
0CuJOaTEQjUhro2ZBIxavwTyI/I+Y4NZXTJ7ClCExnU23kiX4yzdVRfWcob9jOxU
UpjKud/nECn0jVTQGrQ4hBYY2/H0KR0DOkVD/OfsepM9L4FZvUw815/dLf0U7Mdh
Mpng3xQgpbtRUluejubho4n2icN7o+E8yuzzsI0jvx3GdrQwFl/zccPHybY4uItS
IKXc7D4+ZNMWobpEJ1b/+SrjUkpb65I2ur8xO0+DRws=
-----END CERTIFICATE-----