Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7udFUBbzxoQN5gQ6PxiRJzXcc5KTWgjh79BncQxnfSo/0/323830343a383438383a3a2f33322d3332203d3e20323732323636.roa
File:                     323830343a383438383a3a2f33322d3332203d3e20323732323636.roa (raw, json)
Hash identifier:          oYlFYp1LrpdIYv1JuLQ8xH2TXdygl+5vv0JdnEDlWm0=
Subject key identifier:   D5:ED:F6:5E:45:A5:43:CD:9C:1F:63:D0:C6:D1:8F:97:06:9F:99:D8
Certificate issuer:       /CN=9E861A18AA40FAA8B4330ED5B9B005CBD061968B
Certificate serial:       7B3E6BAE78D7D86B01B715900FEAFA6561D184CA
Authority key identifier: 9E:86:1A:18:AA:40:FA:A8:B4:33:0E:D5:B9:B0:05:CB:D0:61:96:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E861A18AA40FAA8B4330ED5B9B005CBD061968B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7udFUBbzxoQN5gQ6PxiRJzXcc5KTWgjh79BncQxnfSo/0/323830343a383438383a3a2f33322d3332203d3e20323732323636.roa
Signing time:             Thu 20 Jul 2023 15:09:43 +0000
ROA not before:           Thu 20 Jul 2023 15:04:43 +0000
ROA not after:            Thu 18 Jul 2024 15:09:43 +0000
asID:                     272266
IP address blocks:        2804:8488::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3e:6b:ae:78:d7:d8:6b:01:b7:15:90:0f:ea:fa:65:61:d1:84:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E861A18AA40FAA8B4330ED5B9B005CBD061968B
        Validity
            Not Before: Jul 20 15:04:43 2023 GMT
            Not After : Jul 18 15:09:43 2024 GMT
        Subject: CN=D5EDF65E45A543CD9C1F63D0C6D18F97069F99D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:73:64:5d:1d:01:e0:04:02:a3:ab:d0:f3:d2:
                    f7:38:91:b5:36:82:aa:5a:1a:35:0d:dd:bf:6a:10:
                    8c:7f:1d:00:a3:b0:c4:f9:57:cf:b7:eb:c0:5f:b6:
                    42:e8:da:4d:2b:e2:36:29:1c:ef:e6:50:3f:17:2f:
                    14:e9:a3:ff:8b:2b:5b:a6:df:e8:1e:de:68:c2:f9:
                    24:0f:38:5f:06:7b:7e:f3:a8:54:5b:74:c5:7a:47:
                    7d:28:f8:51:e2:9f:4d:1a:1c:d9:cb:c7:97:c9:6f:
                    69:6f:98:2c:b1:25:9c:29:35:1d:f0:d4:74:05:b9:
                    fa:82:46:d3:81:4a:6f:65:fe:ba:48:1b:4e:e8:61:
                    f8:30:42:5d:0f:6b:aa:49:09:bc:4a:44:71:79:31:
                    6e:a3:be:43:2d:85:9e:72:a8:d1:a6:7f:38:0e:26:
                    54:54:e2:ae:86:11:b5:57:eb:f9:dc:83:5c:a9:ef:
                    27:4a:1c:a1:ec:e3:9d:4f:d8:5b:2b:95:b6:eb:f8:
                    eb:68:86:cb:92:f9:b7:69:ae:2a:27:67:bb:e7:3e:
                    4b:35:9a:9e:28:d9:11:da:d3:9f:ad:57:de:57:c0:
                    e9:6b:32:1c:ab:11:ab:e8:3a:dc:0c:c5:5b:0b:1d:
                    7f:94:3e:68:30:3d:62:82:71:fa:f4:ee:74:8e:3f:
                    7d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:ED:F6:5E:45:A5:43:CD:9C:1F:63:D0:C6:D1:8F:97:06:9F:99:D8
            X509v3 Authority Key Identifier:
                keyid:9E:86:1A:18:AA:40:FA:A8:B4:33:0E:D5:B9:B0:05:CB:D0:61:96:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7udFUBbzxoQN5gQ6PxiRJzXcc5KTWgjh79BncQxnfSo/0/9E861A18AA40FAA8B4330ED5B9B005CBD061968B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E861A18AA40FAA8B4330ED5B9B005CBD061968B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7udFUBbzxoQN5gQ6PxiRJzXcc5KTWgjh79BncQxnfSo/0/323830343a383438383a3a2f33322d3332203d3e20323732323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8488::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:9b:06:dc:ea:7d:a3:33:ed:fb:7e:bf:be:61:7c:d2:c4:fa:
         c2:7a:70:81:e0:4f:53:1b:4d:96:74:d5:73:d8:c2:f2:bc:bf:
         87:91:91:e6:61:5c:5e:3b:89:07:ed:71:59:ff:0c:9e:42:31:
         fa:34:48:33:9c:90:fc:44:a9:94:2f:64:f9:77:b4:04:f4:d4:
         27:ae:23:48:5c:08:a1:78:09:31:95:01:cc:41:a8:ae:8d:4a:
         e9:88:d9:d2:31:a7:1e:95:0f:a6:d7:e2:5a:5c:f8:96:41:0c:
         49:5a:5a:3e:7e:49:e9:fc:33:0b:71:74:ba:f5:66:ef:5f:d9:
         80:79:09:de:f5:a3:6c:62:ea:ea:58:e9:71:3f:4a:81:64:bb:
         ca:7c:db:b4:7b:5e:50:c0:07:5c:64:65:b0:5e:2c:fc:c1:49:
         03:d1:a8:7f:24:a3:17:8f:59:9e:91:65:29:77:5f:9f:fc:c1:
         da:fe:e3:1b:ac:79:f4:21:a7:97:b7:da:66:a5:b3:c7:d5:3f:
         79:e2:f8:7f:25:b7:d7:98:65:d6:cd:52:0b:f2:ce:f6:e9:89:
         d1:4c:e6:48:f6:ed:43:4b:71:43:81:53:6c:0e:85:c1:30:2e:
         86:c1:46:33:0d:45:98:12:c9:1d:71:6a:0a:ed:32:d0:03:7e:
         04:eb:b7:d3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUez5rrnjX2GsBtxWQD+r6ZWHRhMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU4NjFBMThBQTQwRkFBOEI0MzMwRUQ1QjlCMDA1Q0JE
MDYxOTY4QjAeFw0yMzA3MjAxNTA0NDNaFw0yNDA3MTgxNTA5NDNaMDMxMTAvBgNV
BAMTKEQ1RURGNjVFNDVBNTQzQ0Q5QzFGNjNEMEM2RDE4Rjk3MDY5Rjk5RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrc2RdHQHgBAKjq9Dz0vc4kbU2
gqpaGjUN3b9qEIx/HQCjsMT5V8+368BftkLo2k0r4jYpHO/mUD8XLxTpo/+LK1um
3+ge3mjC+SQPOF8Ge37zqFRbdMV6R30o+FHin00aHNnLx5fJb2lvmCyxJZwpNR3w
1HQFufqCRtOBSm9l/rpIG07oYfgwQl0Pa6pJCbxKRHF5MW6jvkMthZ5yqNGmfzgO
JlRU4q6GEbVX6/ncg1yp7ydKHKHs451P2Fsrlbbr+OtohsuS+bdprionZ7vnPks1
mp4o2RHa05+tV95XwOlrMhyrEavoOtwMxVsLHX+UPmgwPWKCcfr07nSOP30VAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1e32XkWlQ82cH2PQxtGPlwafmdgwHwYDVR0j
BBgwFoAUnoYaGKpA+qi0Mw7VubAFy9BhloswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjd1ZEZVQmJ6eG9RTjVnUTZQeGlSSnpYY2M1S1RXZ2poNzlCbmNReG5m
U28vMC85RTg2MUExOEFBNDBGQUE4QjQzMzBFRDVCOUIwMDVDQkQwNjE5NjhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlFODYxQTE4QUE0MEZBQThC
NDMzMEVENUI5QjAwNUNCRDA2MTk2OEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o3dWRGVUJienhvUU41Z1E2UHhpUkp6WGNjNUtUV2dqaDc5Qm5jUXhuZlNvLzAv
MzIzODMwMzQzYTM4MzQzODM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMy
MzIzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASEiDANBgkqhkiG9w0BAQsFAAOCAQEAiJsG3Op9
ozPt+36/vmF80sT6wnpwgeBPUxtNlnTVc9jC8ry/h5GR5mFcXjuJB+1xWf8MnkIx
+jRIM5yQ/ESplC9k+Xe0BPTUJ64jSFwIoXgJMZUBzEGoro1K6YjZ0jGnHpUPptfi
Wlz4lkEMSVpaPn5J6fwzC3F0uvVm71/ZgHkJ3vWjbGLq6ljpcT9KgWS7ynzbtHte
UMAHXGRlsF4s/MFJA9GofySjF49ZnpFlKXdfn/zB2v7jG6x59CGnl7faZqWzx9U/
eeL4fyW315hl1s1SC/LO9umJ0UzmSPbtQ0txQ4FTbA6FwTAuhsFGMw1FmBLJHXFq
Cu0y0AN+BOu30w==
-----END CERTIFICATE-----