Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31323a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a31323a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          SYoZGzl05FRjj52hVlReatUUUiy5QLgVxNpxTchkptk=
Subject key identifier:   DA:DF:26:9A:7C:C2:24:F4:29:E9:02:10:EF:0A:EB:99:F2:56:88:39
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       63214A191B46D988F4FE656C9818D292C0EFEE3A
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31323a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:14 +0000
ROA not before:           Wed 23 Nov 2022 18:34:14 +0000
ROA not after:            Wed 22 Nov 2023 18:39:14 +0000
asID:                     53048
IP address blocks:        2804:1b04:12::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:21:4a:19:1b:46:d9:88:f4:fe:65:6c:98:18:d2:92:c0:ef:ee:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:14 2022 GMT
            Not After : Nov 22 18:39:14 2023 GMT
        Subject: CN=DADF269A7CC224F429E90210EF0AEB99F2568839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:d0:12:1a:38:8f:8d:33:8d:82:cd:34:bf:
                    2e:67:5a:3f:9b:a6:f0:6a:67:b5:f7:fe:23:21:9f:
                    f2:a2:42:ae:d3:00:94:54:e9:e2:91:23:fe:b8:da:
                    78:e9:fb:3e:34:af:a9:4c:13:92:55:f3:ba:f4:6b:
                    94:b9:9d:bd:df:fa:71:59:cd:ad:38:1c:5e:9e:86:
                    08:08:d3:59:19:65:22:6a:13:c4:c2:10:11:71:61:
                    bc:cd:7b:ae:7e:93:93:c8:87:55:36:28:b7:2d:5b:
                    82:94:c7:9b:03:b6:b3:10:99:d4:85:5e:14:b3:96:
                    b1:f4:93:c9:4e:bc:3c:75:d0:9c:90:65:72:a4:9b:
                    b8:a2:d2:c9:8f:e9:91:71:78:92:94:75:58:a2:a0:
                    36:c6:28:ba:bd:c0:46:d6:80:b3:e6:fe:a7:ae:80:
                    da:bd:89:03:2d:29:20:2a:98:41:a7:2d:57:e7:78:
                    48:4d:3a:84:76:69:97:05:41:cb:a7:3e:4b:33:1c:
                    4f:52:0d:7a:5c:f7:5d:ae:f2:5c:56:15:a6:3f:da:
                    82:ea:98:a6:23:6f:b2:23:15:26:35:e1:7f:c4:df:
                    b2:0f:dd:93:01:ba:7d:ce:4e:7a:9a:72:9d:ab:c1:
                    8c:49:03:47:cc:cb:7d:d5:a6:07:66:f1:19:47:63:
                    02:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DF:26:9A:7C:C2:24:F4:29:E9:02:10:EF:0A:EB:99:F2:56:88:39
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31323a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:8d:db:a8:9c:7a:08:d1:a7:c6:ab:d5:03:06:74:52:5b:d7:
         00:84:28:1f:23:02:51:b2:77:97:ca:93:25:bc:81:15:df:3a:
         4a:14:05:2f:59:3a:2c:0d:99:9b:20:5d:7e:38:e2:f9:1e:45:
         c5:a5:a4:42:e2:4f:21:26:8f:ee:a9:5c:1d:1b:a2:7c:f6:e9:
         1b:dc:5a:b0:9b:f4:07:c2:d2:8b:ba:80:e8:61:70:17:61:74:
         38:d2:91:23:37:7c:e4:a7:51:e3:e4:86:78:19:b1:ae:81:eb:
         ec:c5:b7:ea:b1:78:56:68:5c:9d:fb:7e:90:46:88:de:0b:41:
         d7:81:8e:37:ce:95:9f:bc:18:8c:78:12:1d:ce:4d:34:82:d7:
         f6:a9:70:24:35:08:09:21:98:bb:a5:f7:d3:f1:cf:e0:69:b7:
         d2:56:ea:30:90:e7:f7:aa:69:af:ed:b1:05:7d:dc:62:03:7c:
         97:be:c0:7d:61:71:f0:75:5f:a7:a8:c1:dd:75:1e:67:4a:06:
         4a:eb:b6:6c:b3:65:1d:2a:72:8f:2d:88:c0:6e:88:c7:74:4c:
         f2:4b:03:42:9d:23:63:a0:67:dd:b2:22:03:3f:ab:59:81:88:
         3a:1d:61:5f:98:df:1c:99:89:c8:fd:1f:97:d0:b5:db:87:ec:
         ee:46:4c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----