Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a373030303a3a2f33362d3336203d3e20323632373938.roa
File:                     323830343a3234303a373030303a3a2f33362d3336203d3e20323632373938.roa (raw, json)
Hash identifier:          psU0mFU3bkV0vEsTujUK3VchmwivkHg875CzLE42kqg=
Subject key identifier:   F0:72:FF:AC:98:B5:52:E1:50:F1:33:04:84:76:2F:0D:8F:A0:76:ED
Certificate issuer:       /CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
Certificate serial:       0F4EC444B20F8DC113E88EA588FB08221F199B5F
Authority key identifier: 55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a373030303a3a2f33362d3336203d3e20323632373938.roa
Signing time:             Fri 11 Feb 2022 19:28:04 +0000
ROA not before:           Fri 11 Feb 2022 19:23:04 +0000
ROA not after:            Fri 10 Feb 2023 19:28:04 +0000
asID:                     262798
IP address blocks:        2804:240:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4e:c4:44:b2:0f:8d:c1:13:e8:8e:a5:88:fb:08:22:1f:19:9b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
        Validity
            Not Before: Feb 11 19:23:04 2022 GMT
            Not After : Feb 10 19:28:04 2023 GMT
        Subject: CN=F072FFAC98B552E150F1330484762F0D8FA076ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:a9:bb:08:70:ca:a5:2b:4f:6f:b0:f1:ee:
                    c6:51:f2:bb:a9:fe:35:24:ac:d3:a1:7e:b5:20:ba:
                    71:84:ce:7c:32:be:d0:8c:4b:e6:ed:3a:43:48:4d:
                    8e:98:a7:53:ab:a0:3b:60:eb:33:85:bc:90:df:94:
                    35:af:2d:9d:8b:f0:5a:bd:6f:db:10:51:51:53:3a:
                    f2:09:9b:ee:dd:7f:06:56:7c:e9:bb:72:b7:5b:98:
                    01:69:48:26:aa:f3:73:5e:47:02:b6:c9:3d:11:e9:
                    ff:06:6f:88:67:e5:1a:4f:0b:28:21:46:a3:8f:4e:
                    1e:42:f0:b8:cd:34:7f:c3:40:53:a1:af:33:0e:b0:
                    f5:a5:8c:dc:27:59:f0:ea:d0:35:7b:19:6f:00:f5:
                    90:b8:0e:95:86:d1:d1:a5:4e:6d:d4:37:8a:93:67:
                    9c:97:3f:2e:cc:a9:9f:4a:1b:b1:78:cb:b3:33:3e:
                    03:76:a1:24:34:5c:90:71:67:86:6f:72:64:ef:01:
                    a2:ba:2b:20:75:d2:8f:d2:91:03:4f:96:fa:10:5c:
                    0b:f2:8b:d6:44:0d:bb:6a:76:be:12:67:30:4d:7a:
                    13:11:c8:92:2f:ce:a3:e6:c3:81:7a:60:c9:f5:48:
                    5e:93:50:4e:20:45:30:c6:b3:8e:75:26:be:fd:70:
                    58:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:72:FF:AC:98:B5:52:E1:50:F1:33:04:84:76:2F:0D:8F:A0:76:ED
            X509v3 Authority Key Identifier:
                keyid:55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a373030303a3a2f33362d3336203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:240:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         85:2c:7b:b3:f9:3c:b7:38:f2:10:46:9e:d2:65:7a:85:8c:e7:
         53:2f:ac:1c:cc:55:8e:b4:19:91:fd:ac:f8:3c:93:55:ec:97:
         e0:a5:ef:fe:3a:1e:b0:b0:9d:ae:4e:07:14:96:67:25:11:76:
         76:14:d2:20:be:61:fc:be:1a:77:08:03:1f:50:5c:4d:d7:a7:
         00:8f:5b:c9:48:1e:31:ad:ca:5e:cc:d1:ed:66:8b:b9:4c:94:
         8d:6e:d7:07:da:c4:c6:18:f9:9c:71:39:e6:70:c8:3f:df:8d:
         de:45:cb:27:70:72:90:2c:90:50:18:2b:fa:74:e8:52:76:2f:
         74:d7:2c:7e:1b:3e:bb:ca:cb:19:3c:46:5b:a0:81:cd:38:00:
         f1:7c:29:88:dd:d4:e5:21:4a:97:cb:32:8a:cf:1c:13:f5:18:
         24:8d:4e:90:27:20:1c:5b:2b:bc:0a:1f:e2:d3:10:dc:ff:ba:
         b6:3c:58:17:3f:7b:ef:65:ba:17:07:f1:ab:2a:db:cd:5d:55:
         af:c7:63:f3:64:af:46:ae:2f:3e:bc:ee:cc:72:28:0c:03:56:
         c1:14:60:64:4f:93:c3:d6:ad:ee:5d:aa:60:92:35:96:2d:6f:
         45:e2:20:2b:d5:3e:fb:fd:18:2e:45:ec:7c:32:3f:32:b9:6b:
         6b:d5:86:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----