Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a3a2f33322d3332203d3e20323638333439.roa
File:                     323830343a346663383a3a2f33322d3332203d3e20323638333439.roa (raw, json)
Hash identifier:          QcwPnAUJTZUIjfk/rVYZ2CPFhM7POK+LPBftd6YuF+o=
Subject key identifier:   5D:7E:0C:CC:59:9A:17:23:4F:71:42:D8:0A:0F:DA:38:8A:78:F1:B5
Certificate issuer:       /CN=554D532A2B109EC3757B4A4CFF89A9F1E3456550
Certificate serial:       1369461E8548E760E9BD8F34B1659FEA11233A98
Authority key identifier: 55:4D:53:2A:2B:10:9E:C3:75:7B:4A:4C:FF:89:A9:F1:E3:45:65:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/554D532A2B109EC3757B4A4CFF89A9F1E3456550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a3a2f33322d3332203d3e20323638333439.roa
Signing time:             Thu 17 Feb 2022 17:33:33 +0000
ROA not before:           Thu 17 Feb 2022 17:28:33 +0000
ROA not after:            Thu 16 Feb 2023 17:33:33 +0000
asID:                     268349
IP address blocks:        2804:4fc8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:69:46:1e:85:48:e7:60:e9:bd:8f:34:b1:65:9f:ea:11:23:3a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554D532A2B109EC3757B4A4CFF89A9F1E3456550
        Validity
            Not Before: Feb 17 17:28:33 2022 GMT
            Not After : Feb 16 17:33:33 2023 GMT
        Subject: CN=5D7E0CCC599A17234F7142D80A0FDA388A78F1B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:42:83:a9:22:43:42:2f:d9:9d:5b:51:e6:95:
                    1f:dd:12:8e:4a:83:ad:92:da:37:9a:81:24:d7:af:
                    9c:8a:68:ec:d7:1d:b3:b5:f6:3b:19:f5:dc:15:16:
                    5b:30:e3:9f:71:da:87:cd:96:eb:5c:74:50:df:8e:
                    6b:76:6e:35:0b:2a:45:de:e4:e4:e4:57:0c:cc:b5:
                    ed:e9:cd:f9:64:7b:7a:91:6b:5e:43:67:cf:7a:60:
                    9c:74:70:80:19:32:38:c0:08:67:44:1a:b8:26:e3:
                    e8:97:e8:9e:13:43:ae:17:d8:6d:bc:ca:c7:d0:54:
                    61:3d:5b:71:e3:27:11:54:41:1f:f3:f9:d4:41:41:
                    f1:b4:f6:15:a4:9e:b2:51:ff:af:b2:2f:49:d1:cb:
                    66:d0:f1:37:49:a1:3e:8b:3a:aa:47:14:1b:88:92:
                    34:46:32:b9:38:4a:a0:10:66:5f:cd:07:08:4f:85:
                    d0:13:a3:26:f6:05:cf:f4:88:79:b7:d8:35:e9:d5:
                    5f:fc:dc:5c:37:db:32:fa:b4:56:20:7b:89:67:b3:
                    ea:a9:bd:e1:30:9e:19:b1:bc:7b:f1:5f:2a:cc:c1:
                    5e:7c:29:f6:d8:3e:94:ba:83:cc:8d:cd:af:d1:28:
                    a1:57:8d:00:56:0c:2b:42:2e:d3:bb:15:9b:24:c4:
                    93:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7E:0C:CC:59:9A:17:23:4F:71:42:D8:0A:0F:DA:38:8A:78:F1:B5
            X509v3 Authority Key Identifier:
                keyid:55:4D:53:2A:2B:10:9E:C3:75:7B:4A:4C:FF:89:A9:F1:E3:45:65:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/554D532A2B109EC3757B4A4CFF89A9F1E3456550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/554D532A2B109EC3757B4A4CFF89A9F1E3456550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a3a2f33322d3332203d3e20323638333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:7b:4f:75:8b:cd:5e:1a:dc:f9:53:96:be:89:af:f4:bf:94:
         5c:78:3a:2c:6c:bb:aa:83:64:f9:61:97:de:3b:07:54:38:03:
         69:8f:3b:f0:17:4f:b5:c6:bb:5a:82:f3:3f:3c:b0:1e:9e:e8:
         58:c6:87:91:eb:06:83:46:28:b9:10:f0:6f:c4:57:24:8f:10:
         de:62:88:82:29:60:f4:20:5a:1b:89:a9:90:fa:a4:93:5c:d1:
         ea:8c:ae:d6:96:7e:9a:23:64:ee:cd:0e:ea:55:a0:8c:c4:ba:
         97:4a:88:0e:e3:d6:9c:73:4f:f9:71:29:c1:86:1c:aa:cb:c3:
         22:b7:cb:e7:99:fa:08:92:59:e1:76:01:ab:fa:39:07:bc:d5:
         26:2a:ca:1b:ae:31:bd:82:0c:89:bf:5c:9e:e2:cf:79:a5:a4:
         54:0b:0e:15:5e:8f:35:d7:aa:c1:0a:55:85:a0:5b:5d:71:d2:
         d5:5f:75:4d:f2:e1:0f:e2:45:ea:1a:9a:d4:33:71:4a:b8:a4:
         4b:78:03:10:db:9b:9f:c8:a3:2a:ea:c5:eb:0b:42:a1:e0:a4:
         92:f4:84:b6:f1:4f:82:b9:98:78:09:a5:aa:2b:82:5d:28:c3:
         9c:43:18:9b:1d:33:35:5a:43:8c:44:cb:74:14:1c:28:f0:58:
         8a:81:86:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----