Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a3a2f33322d3332203d3e20323639303735.roa
File:                     323830343a356631343a3a2f33322d3332203d3e20323639303735.roa (raw, json)
Hash identifier:          r46Uyjq7/WzgoMatJCC15YpjiW7gqy9aUJ1Rn33RHog=
Subject key identifier:   56:E4:B2:77:4E:5E:9D:99:99:82:19:1C:0F:8E:92:79:7C:DA:7D:8F
Certificate issuer:       /CN=A04E01C2C7CEF30C9831FD37C94F10585E93B941
Certificate serial:       67A856CE3AECD8A9D4A5EF5BA63C3A0E68AB01B8
Authority key identifier: A0:4E:01:C2:C7:CE:F3:0C:98:31:FD:37:C9:4F:10:58:5E:93:B9:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A04E01C2C7CEF30C9831FD37C94F10585E93B941.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a3a2f33322d3332203d3e20323639303735.roa
Signing time:             Tue 25 Oct 2022 21:42:09 +0000
ROA not before:           Tue 25 Oct 2022 21:37:09 +0000
ROA not after:            Tue 24 Oct 2023 21:42:09 +0000
asID:                     269075
IP address blocks:        2804:5f14::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a8:56:ce:3a:ec:d8:a9:d4:a5:ef:5b:a6:3c:3a:0e:68:ab:01:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A04E01C2C7CEF30C9831FD37C94F10585E93B941
        Validity
            Not Before: Oct 25 21:37:09 2022 GMT
            Not After : Oct 24 21:42:09 2023 GMT
        Subject: CN=56E4B2774E5E9D999982191C0F8E92797CDA7D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:a4:d5:29:db:b9:21:e1:bb:18:42:61:e7:e7:
                    fd:c2:d9:52:03:20:a9:8a:c5:30:07:d8:47:75:97:
                    7d:8f:4f:90:23:ef:2f:f1:89:66:6b:8a:03:c1:ba:
                    b4:64:c3:44:61:ff:31:a6:42:fa:d3:9a:04:e3:c9:
                    8d:22:49:fa:64:9f:9d:f6:a3:89:80:0f:a4:83:8a:
                    4a:70:25:2d:7e:c2:f7:f6:cb:63:e6:ec:fe:6f:90:
                    86:78:65:1a:71:6a:7d:ac:37:43:7a:a1:5a:bb:54:
                    0a:08:15:c4:18:5a:7d:0d:bc:2d:d7:85:b0:04:f2:
                    2b:54:a4:41:33:e4:44:d0:30:b3:c7:1b:62:fb:a5:
                    f3:b5:36:35:01:0b:d0:b2:2f:e1:47:c4:6d:55:28:
                    d8:fd:2c:1b:c5:09:90:5f:39:7c:c8:82:77:8e:cd:
                    38:e4:17:cf:c2:86:9f:bc:56:37:85:cb:39:0f:d0:
                    17:3e:6c:a5:40:5c:11:4b:e7:86:c6:82:59:ee:e2:
                    5d:fc:b5:87:87:7b:4e:68:dc:41:48:52:20:b3:be:
                    e5:46:f0:20:f0:62:7a:44:ae:30:43:27:bd:f1:6b:
                    24:f0:b2:86:fc:47:c8:54:c4:80:0c:8c:5b:12:58:
                    9c:1d:32:9d:96:32:8b:74:41:0a:78:87:8a:42:37:
                    6f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E4:B2:77:4E:5E:9D:99:99:82:19:1C:0F:8E:92:79:7C:DA:7D:8F
            X509v3 Authority Key Identifier:
                keyid:A0:4E:01:C2:C7:CE:F3:0C:98:31:FD:37:C9:4F:10:58:5E:93:B9:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/A04E01C2C7CEF30C9831FD37C94F10585E93B941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A04E01C2C7CEF30C9831FD37C94F10585E93B941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a3a2f33322d3332203d3e20323639303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f14::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:2d:3b:49:bb:cf:e7:47:9b:b8:88:ec:10:a8:cb:cb:52:8b:
         45:41:c5:69:34:ca:24:db:01:aa:2c:b5:ce:aa:1d:af:52:a4:
         58:57:30:02:16:d4:2f:b7:f2:b3:5a:15:9e:bb:a1:ee:8d:43:
         c4:26:8d:4a:41:40:e9:d5:3e:47:1c:20:fa:a3:32:d6:a7:24:
         f1:dd:38:68:ec:3b:a0:8b:87:9d:7a:fb:d5:88:6d:e1:78:9f:
         c7:22:ff:86:54:8e:0f:47:c9:14:55:ad:01:88:3e:77:f8:ec:
         a5:d2:73:cc:e1:8f:73:62:8e:1a:9a:75:69:24:47:67:15:1c:
         15:e2:1d:00:43:9e:97:02:49:4c:dd:0e:89:6d:fb:80:7c:57:
         b6:d0:c7:e4:ef:bc:f3:62:bf:8c:ef:3f:5d:d0:aa:72:08:a0:
         aa:59:30:ca:cc:b1:50:1b:d6:84:2c:81:20:53:40:4c:0c:ff:
         26:e1:36:a6:2f:30:e0:90:3c:ab:12:45:5d:d1:f9:9e:65:59:
         50:57:36:ae:32:61:32:e9:59:a7:9b:b9:e9:97:dc:92:d3:06:
         f3:f7:76:e8:f6:a0:80:5d:1f:bb:48:60:98:95:99:59:13:93:
         14:98:41:f0:5b:c0:2c:8d:41:f8:b3:d8:2a:5c:49:84:3f:f7:
         a2:3a:16:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----