Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a383a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a383a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          XnQqnQqfFR3fl+zoEiS30OhsVi3+A1SpmNgHD24F4qw=
Subject key identifier:   A4:34:A9:8D:C9:C4:FE:6A:56:03:C9:CA:C5:6E:30:DD:08:EB:B8:96
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       6B5BB2C069F82C829A1398B4502A4344B11DCDA8
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a383a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:19 +0000
ROA not before:           Wed 23 Nov 2022 18:34:19 +0000
ROA not after:            Wed 22 Nov 2023 18:39:19 +0000
asID:                     53048
IP address blocks:        2804:1b04:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5b:b2:c0:69:f8:2c:82:9a:13:98:b4:50:2a:43:44:b1:1d:cd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:19 2022 GMT
            Not After : Nov 22 18:39:19 2023 GMT
        Subject: CN=A434A98DC9C4FE6A5603C9CAC56E30DD08EBB896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f4:6d:52:17:de:f9:ce:cd:f1:eb:6b:1c:91:
                    64:4b:65:be:6e:d0:57:ff:de:61:38:b9:20:de:61:
                    a2:1d:19:9c:8c:29:f9:56:36:84:cb:9c:1d:8d:9d:
                    5a:07:9a:71:33:45:25:80:dd:14:e1:e7:9b:fc:1b:
                    02:a6:74:e5:59:ba:cf:a8:57:69:95:c9:5e:a1:7b:
                    3e:d4:eb:aa:88:e3:7c:4c:07:91:ea:ae:b3:d8:6e:
                    57:8d:a3:23:1e:c4:f8:2b:c5:5f:75:a9:83:81:af:
                    f5:16:93:f7:ca:8b:26:88:40:c7:36:21:79:80:7e:
                    76:6e:e9:19:aa:4b:f1:34:c3:87:19:22:10:47:35:
                    41:27:5a:20:23:33:f2:ea:58:e1:e3:22:0a:0a:2f:
                    c7:f3:33:9e:70:05:e9:3f:e5:50:e3:66:cb:4f:e3:
                    66:0f:41:97:82:fe:40:9a:30:5f:be:57:0f:9a:5d:
                    3d:75:0f:27:b0:34:40:c2:e1:53:f4:46:11:39:3c:
                    1f:8f:e2:88:f7:85:a2:2e:ff:14:b2:4a:c1:9f:07:
                    30:a5:ed:df:3e:bd:05:99:0d:3a:5d:71:9a:48:1d:
                    22:88:03:a7:59:23:6c:de:e5:e3:7a:43:9d:49:4c:
                    3b:53:eb:6e:34:37:93:d8:91:c4:57:33:87:ae:f7:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:34:A9:8D:C9:C4:FE:6A:56:03:C9:CA:C5:6E:30:DD:08:EB:B8:96
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a383a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:40:9b:2f:f9:1c:94:76:41:7d:9f:21:f7:94:2f:c0:2f:b7:
         f5:d7:62:ee:ae:62:b5:52:8b:18:1b:f2:c8:5e:97:44:f3:c4:
         54:a2:d8:d1:b5:8a:d5:86:ad:49:1b:8f:3e:c1:3a:e3:dc:ba:
         b1:c4:00:c2:0a:b9:32:78:65:fb:fb:7d:13:db:80:30:f0:4a:
         f9:4b:81:72:01:09:26:4a:e4:ca:75:eb:f7:3d:42:a1:39:f1:
         0a:60:fa:fa:6f:cd:52:c7:de:20:49:69:c4:88:bc:5f:1b:24:
         ae:ce:98:d3:e5:90:8d:68:56:ea:43:59:75:5e:a0:cb:28:04:
         c0:69:7b:8d:67:f3:9a:53:e8:f5:40:0d:e8:a1:9c:ae:27:aa:
         9e:f4:b8:26:23:0d:af:96:10:b4:2f:c7:1f:18:be:19:55:c5:
         50:9d:63:3e:50:df:1d:c0:8f:49:77:99:86:40:59:04:48:7c:
         a6:ea:7c:2e:76:a7:cf:97:45:50:f3:db:c7:eb:35:e5:05:c0:
         54:0d:fd:c2:e8:af:11:b1:a8:d1:c8:c7:15:a7:8c:88:30:1c:
         26:2d:2e:a9:ed:3c:9e:ef:f8:69:0b:b9:4e:61:5f:41:12:48:
         6e:96:3c:95:33:d2:96:51:5e:dc:47:b9:4f:29:69:e0:cf:a6:
         0f:03:18:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----