Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31343a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a31343a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          qzpkZPDaTvaW3jI4JHFb+sDa97jNNLecGM4zEbzZjM0=
Subject key identifier:   12:63:1B:A1:80:4C:EC:17:59:38:8F:1F:BA:E6:70:70:C9:82:C1:23
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       487A4C38FCA82F0AECE5E22BAEF3EE98D0F63B21
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31343a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:19 +0000
ROA not before:           Wed 23 Nov 2022 18:34:19 +0000
ROA not after:            Wed 22 Nov 2023 18:39:19 +0000
asID:                     53048
IP address blocks:        2804:1b04:14::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7a:4c:38:fc:a8:2f:0a:ec:e5:e2:2b:ae:f3:ee:98:d0:f6:3b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:19 2022 GMT
            Not After : Nov 22 18:39:19 2023 GMT
        Subject: CN=12631BA1804CEC1759388F1FBAE67070C982C123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:66:53:9a:52:71:01:1e:6f:7f:c3:78:27:
                    e3:14:26:10:4f:a0:58:60:3f:bc:9b:7b:1a:7a:96:
                    52:a9:7f:81:7e:77:5e:c4:0e:ab:d5:4f:44:f0:52:
                    e4:05:e5:7f:f4:66:33:b9:6d:1f:bc:d4:5b:db:a6:
                    6f:40:9c:13:40:3c:c8:94:a6:3a:03:af:65:e7:51:
                    8d:c0:45:2a:32:dc:f2:a4:e3:e2:9b:24:03:73:23:
                    bc:40:49:b1:9b:31:69:e6:b5:80:3e:ce:f8:d7:b1:
                    31:ce:01:df:1f:79:22:7f:fe:a6:76:57:0d:01:37:
                    dd:0c:2a:71:fa:4c:6c:2e:27:48:06:83:30:fb:16:
                    70:83:0d:ee:62:06:0d:1a:c9:6c:c8:b0:93:03:1c:
                    45:0e:6f:d3:84:4f:38:d4:c4:51:66:42:c2:09:5b:
                    df:09:f0:31:65:d5:52:c1:2e:07:43:9e:f3:01:a0:
                    4b:c3:e5:07:d9:07:85:b8:8a:89:44:aa:9f:74:9c:
                    ee:1d:a3:df:4d:87:44:d3:63:d9:e8:e0:3d:77:96:
                    24:80:b3:0c:cc:d6:e3:de:df:e2:5f:a0:84:d2:a1:
                    52:cf:df:33:78:9a:78:90:c4:f5:b9:3c:7f:25:5b:
                    fb:4a:ce:e7:bb:ad:61:f0:d9:8f:f5:43:da:41:cb:
                    6b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:63:1B:A1:80:4C:EC:17:59:38:8F:1F:BA:E6:70:70:C9:82:C1:23
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31343a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:7d:b1:0f:69:34:d6:25:ca:3d:76:86:7c:5d:3b:9d:a8:64:
         b5:3b:a9:f8:c8:84:f2:56:e6:8e:fb:73:21:79:74:00:70:a3:
         98:93:84:b8:18:03:c1:6a:b1:00:bf:ea:e6:ab:40:bd:c4:15:
         08:2d:9f:72:12:05:89:0d:bb:51:38:46:ae:dd:af:63:b6:3a:
         82:f0:71:96:45:20:4b:b2:68:2e:0e:a4:73:cc:2d:b9:66:e6:
         ca:bc:38:7d:87:e4:9e:a3:46:bd:7c:37:0b:72:fa:19:82:a5:
         c0:20:d5:2c:7d:ab:77:6f:11:da:47:79:4b:26:a6:b9:ce:8c:
         c9:ba:5f:3f:91:03:e1:ea:40:3c:c2:4f:ea:94:51:d2:a5:13:
         60:ae:4c:07:5e:42:fa:d5:85:75:f5:00:16:09:03:65:1a:bf:
         a7:6e:a5:69:3a:aa:d9:db:a7:a3:30:86:8e:4f:93:32:f7:a3:
         5a:21:2d:fa:fa:32:2e:47:d0:0e:50:8a:b9:4d:a1:2f:46:e6:
         6a:99:7f:eb:97:e5:6b:88:d7:2f:4e:fa:6e:8e:6a:7d:29:9b:
         63:1e:42:b3:f4:a8:68:93:5f:e6:c0:97:d3:0c:c6:6a:4f:43:
         ce:5c:33:97:93:42:11:fd:35:1d:25:86:6a:83:ef:06:7f:2c:
         6e:45:f5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----