Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/323830343a353130303a3a2f33322d3634203d3e20323638343234.roa
File:                     323830343a353130303a3a2f33322d3634203d3e20323638343234.roa (raw, json)
Hash identifier:          PItafy6Sm3iDX5wWyVRa2kjJkz7uhOWKaMpafwXPDSs=
Subject key identifier:   A2:C6:5A:B3:6D:CF:B9:68:2F:63:22:6C:95:A9:C6:E2:92:EE:21:89
Certificate issuer:       /CN=E5D490ABABAB1A95C8398DF31DA789425D99FAE3
Certificate serial:       2F408D6427A4971BE23A05FCDCAA9D62EF776ABC
Authority key identifier: E5:D4:90:AB:AB:AB:1A:95:C8:39:8D:F3:1D:A7:89:42:5D:99:FA:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5D490ABABAB1A95C8398DF31DA789425D99FAE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/323830343a353130303a3a2f33322d3634203d3e20323638343234.roa
Signing time:             Mon 13 Jun 2022 23:51:14 +0000
ROA not before:           Mon 13 Jun 2022 23:46:14 +0000
ROA not after:            Mon 12 Jun 2023 23:51:14 +0000
asID:                     268424
IP address blocks:        2804:5100::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:40:8d:64:27:a4:97:1b:e2:3a:05:fc:dc:aa:9d:62:ef:77:6a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5D490ABABAB1A95C8398DF31DA789425D99FAE3
        Validity
            Not Before: Jun 13 23:46:14 2022 GMT
            Not After : Jun 12 23:51:14 2023 GMT
        Subject: CN=A2C65AB36DCFB9682F63226C95A9C6E292EE2189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6e:b8:45:a1:c9:52:bb:8d:ba:87:dc:5f:12:
                    35:c3:26:4b:aa:02:48:b7:2f:f9:92:0b:d8:1a:4d:
                    43:b8:23:0f:46:d6:88:fe:94:22:00:9d:e2:01:6f:
                    47:c7:68:5c:07:bb:b4:49:af:d9:c3:10:40:60:04:
                    ce:54:ac:04:88:09:0a:7d:f3:02:9a:75:34:7c:05:
                    bd:fe:47:22:f2:5a:d0:50:f9:df:d7:97:e1:ed:cb:
                    ef:bb:67:a4:ee:a9:88:4a:93:fe:61:d6:b9:c9:12:
                    bd:8a:a0:ac:47:74:bf:4b:8f:69:16:3f:4c:09:5e:
                    d9:6d:68:fc:d4:a8:39:37:c0:ed:84:d1:95:f3:93:
                    a7:e9:07:91:ef:75:42:8b:d1:f5:26:35:2b:8a:39:
                    fe:0d:a2:5e:7a:f8:64:da:1f:6f:59:83:ff:78:4c:
                    07:27:46:69:e0:15:cb:ad:d9:2c:6a:ab:9f:df:a8:
                    21:9b:a4:7e:47:87:4a:bb:46:d5:19:c1:18:66:f5:
                    4e:50:43:49:b1:10:15:5b:f2:d9:28:cf:83:f2:f3:
                    74:64:8c:32:c4:a9:7b:f6:47:3a:02:a3:75:27:9c:
                    e9:c9:eb:a4:1d:f7:63:9c:de:c9:5a:99:0e:c9:9e:
                    c5:41:f2:7c:1f:66:fa:9d:12:0f:67:59:4e:73:e3:
                    55:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C6:5A:B3:6D:CF:B9:68:2F:63:22:6C:95:A9:C6:E2:92:EE:21:89
            X509v3 Authority Key Identifier:
                keyid:E5:D4:90:AB:AB:AB:1A:95:C8:39:8D:F3:1D:A7:89:42:5D:99:FA:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/E5D490ABABAB1A95C8398DF31DA789425D99FAE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5D490ABABAB1A95C8398DF31DA789425D99FAE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/323830343a353130303a3a2f33322d3634203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5100::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:b3:d1:26:6d:ad:56:78:38:0f:2d:96:4d:8a:6c:30:47:f2:
         40:f6:fc:f5:28:30:ce:ce:e9:66:cf:f0:37:16:fe:72:cd:9a:
         86:7a:77:b5:59:aa:82:e6:1b:b5:2f:f9:c6:94:3b:06:fe:aa:
         c6:5f:25:ad:9f:22:da:aa:40:30:2c:b9:47:e0:92:74:c4:18:
         5f:bf:f6:f2:ea:d4:da:a8:74:ec:93:37:14:7e:0b:32:99:39:
         03:00:86:2e:e6:3c:98:da:72:c5:08:0e:c5:39:54:6f:a6:76:
         1d:b5:0f:da:f2:77:29:30:41:fa:36:66:f0:5b:3c:38:89:a4:
         54:5c:2b:26:ad:b3:17:7d:0e:75:87:ae:b5:75:29:6a:17:4f:
         43:ae:5a:97:57:35:9a:dd:13:b3:0d:d0:b6:78:76:d0:29:38:
         cb:01:de:99:38:15:6f:bb:e8:45:0e:07:32:d0:4e:21:79:a8:
         30:2d:bb:b0:a0:c0:7d:29:dd:9f:74:89:80:ac:cd:bc:07:ed:
         46:8f:d8:98:20:cc:be:45:36:c7:8c:cb:3f:77:9e:bc:62:5a:
         ee:23:d1:de:af:57:04:2e:85:2b:27:6f:0c:05:52:60:2b:95:
         ce:48:bc:0c:a6:83:63:04:be:6c:d5:0e:81:0d:8c:c0:aa:d5:
         61:89:23:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----