Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a343030303a3a2f33342d3334203d3e20323632373938.roa
File:                     323830343a3234303a343030303a3a2f33342d3334203d3e20323632373938.roa (raw, json)
Hash identifier:          UV73nHKkBSw0XgruUXDVKxjHg3gpApodMSYkwh3ISTw=
Subject key identifier:   02:C3:2E:B6:1C:D5:B5:54:98:26:3A:BC:35:E1:C5:2A:AD:69:80:C1
Certificate issuer:       /CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
Certificate serial:       58BBEAE9B2ACD59F963F6FA1DAC18685E88F6D27
Authority key identifier: 55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a343030303a3a2f33342d3334203d3e20323632373938.roa
Signing time:             Fri 11 Feb 2022 19:22:07 +0000
ROA not before:           Fri 11 Feb 2022 19:17:07 +0000
ROA not after:            Fri 10 Feb 2023 19:22:07 +0000
asID:                     262798
IP address blocks:        2804:240:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:bb:ea:e9:b2:ac:d5:9f:96:3f:6f:a1:da:c1:86:85:e8:8f:6d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
        Validity
            Not Before: Feb 11 19:17:07 2022 GMT
            Not After : Feb 10 19:22:07 2023 GMT
        Subject: CN=02C32EB61CD5B55498263ABC35E1C52AAD6980C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6c:c9:44:88:ca:b8:e7:c8:57:f9:51:76:7d:
                    6c:07:3a:ee:85:88:d5:cc:cd:42:38:b9:0e:a0:d2:
                    d1:95:c5:72:2b:a2:8d:c7:a1:d8:f9:00:f0:4b:f1:
                    fc:d2:d4:58:69:ab:64:56:25:f1:93:5d:a8:0f:76:
                    01:cf:f5:0a:bd:c3:ac:4a:fc:c9:0e:92:91:a1:08:
                    cc:cb:de:8d:f7:26:52:e6:16:d6:6b:a5:f9:f4:f4:
                    31:ec:62:38:fe:80:c8:48:5e:ca:c8:3d:92:fe:45:
                    85:b2:09:e4:c1:c0:ff:3f:87:29:e1:53:ff:a5:f7:
                    d7:b2:e2:9b:b0:70:97:bb:a6:a9:2b:7c:f4:b6:7f:
                    59:6b:10:d8:59:05:bd:56:f1:c0:5d:a6:d3:7f:2d:
                    ad:5d:1e:28:82:05:5c:d1:ba:e5:c7:db:f9:52:50:
                    00:89:90:74:18:97:8f:c5:6e:5b:e6:4e:a9:98:90:
                    71:25:e3:dc:b5:99:a5:d5:7c:d6:91:3e:71:21:e3:
                    10:63:3b:97:6f:f6:ec:f3:aa:f8:ab:34:ce:ff:63:
                    cb:3a:7f:6a:cb:84:3e:c9:f5:2e:7f:52:1d:09:1b:
                    7d:f6:6c:48:a8:47:84:f9:6e:62:f3:29:89:60:2a:
                    b4:43:ae:93:77:77:22:09:66:ea:c0:dc:b2:f0:26:
                    56:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C3:2E:B6:1C:D5:B5:54:98:26:3A:BC:35:E1:C5:2A:AD:69:80:C1
            X509v3 Authority Key Identifier:
                keyid:55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a343030303a3a2f33342d3334203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:240:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6c:ad:2d:1a:b2:c0:43:ca:1c:c4:af:1b:99:32:93:f5:aa:0c:
         17:53:2c:03:ac:2f:c8:ae:fc:0c:20:8f:b5:5a:d5:3b:61:26:
         dd:d1:a5:0e:65:5c:7c:50:2d:e2:0a:62:ae:93:8a:8a:2b:29:
         d2:b3:0b:37:dc:7a:25:7d:9a:f0:45:81:98:0b:41:1b:b8:30:
         8d:74:03:c7:6f:f6:0d:5f:ce:f5:17:65:2c:a2:3e:af:10:fd:
         6a:99:d6:fa:2e:3e:48:06:92:7e:c9:fd:f0:3e:ca:e5:6f:7c:
         71:a5:d9:fd:00:b4:8b:cc:79:0b:79:ba:37:cf:9f:42:b8:01:
         12:d9:2f:fd:fe:a6:8d:2c:c6:d1:fc:24:e2:85:90:b5:fb:91:
         cb:92:e0:39:13:40:5c:29:46:86:86:51:24:38:da:87:63:2e:
         a0:e4:52:cd:36:e9:1a:d9:ce:c3:05:5f:25:c7:3d:59:69:ee:
         db:56:b5:da:b4:7b:1e:0b:06:d4:06:31:2b:07:b1:60:00:be:
         54:45:38:05:12:36:5f:ab:97:cd:b0:5e:e5:c9:82:37:4e:00:
         1b:d3:ee:88:62:3a:c0:36:b5:7c:bd:7b:76:eb:36:0a:e3:78:
         db:b2:eb:b6:07:b2:86:e5:44:7a:f7:4f:30:0e:8f:cb:e4:cb:
         9d:8f:79:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----