Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a643030303a3a2f33362d3336203d3e20323632373938.roa
File:                     323830343a3234303a643030303a3a2f33362d3336203d3e20323632373938.roa (raw, json)
Hash identifier:          uJsStcDR8RoHvp+xQMRJ80iNKKaL5ur0tMTQTMlokcU=
Subject key identifier:   DA:55:AC:21:F0:1F:56:43:9A:86:46:66:20:C1:3D:92:60:12:1C:DF
Certificate issuer:       /CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
Certificate serial:       2058C7E38B7AD6F6B03C5F361C333390283CEA19
Authority key identifier: 55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a643030303a3a2f33362d3336203d3e20323632373938.roa
Signing time:             Fri 11 Feb 2022 19:29:48 +0000
ROA not before:           Fri 11 Feb 2022 19:24:48 +0000
ROA not after:            Fri 10 Feb 2023 19:29:48 +0000
asID:                     262798
IP address blocks:        2804:240:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:58:c7:e3:8b:7a:d6:f6:b0:3c:5f:36:1c:33:33:90:28:3c:ea:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
        Validity
            Not Before: Feb 11 19:24:48 2022 GMT
            Not After : Feb 10 19:29:48 2023 GMT
        Subject: CN=DA55AC21F01F56439A86466620C13D9260121CDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:19:ef:26:b3:73:22:f6:b8:3f:57:e4:48:c0:
                    f8:e7:f0:ab:de:8a:eb:23:75:d6:c5:63:91:63:2b:
                    42:bb:9e:8b:a3:2f:de:de:be:30:ae:7b:e7:06:20:
                    d2:a4:9b:1c:d0:2b:b5:84:d5:2c:8a:50:48:73:8f:
                    c7:26:72:e1:b7:3d:27:cc:f0:13:5c:cf:19:37:cb:
                    1c:b6:b1:fb:77:fd:31:99:b2:e3:68:fd:52:9d:d0:
                    09:ac:da:71:66:91:cc:14:98:a2:c0:a9:80:fb:ae:
                    d8:0f:74:0d:b3:b5:49:a9:e5:1a:8b:ac:12:d9:5e:
                    60:ad:9c:42:b1:25:a2:aa:3d:89:bd:d4:3c:d4:e7:
                    6a:40:af:a6:36:2c:f8:d7:fa:7b:21:32:7a:c0:69:
                    1c:92:b9:8f:3d:61:97:65:22:7d:b1:2a:5f:68:68:
                    0a:a9:4b:a7:ee:15:cc:24:a4:32:39:5c:26:4b:b2:
                    7b:5a:f4:1a:83:17:38:ae:45:db:db:da:c1:52:86:
                    e9:8c:f3:bc:a4:ae:92:b7:6d:68:9d:75:bc:b5:bb:
                    a6:6f:b5:f1:08:0f:fb:77:15:71:64:36:bc:c3:14:
                    17:d7:c9:2b:be:72:5e:57:b8:84:3d:eb:fd:27:a2:
                    b7:9a:b4:f9:16:8f:b9:d0:66:28:03:56:be:86:6c:
                    21:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:55:AC:21:F0:1F:56:43:9A:86:46:66:20:C1:3D:92:60:12:1C:DF
            X509v3 Authority Key Identifier:
                keyid:55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a643030303a3a2f33362d3336203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:240:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4b:5f:76:46:5b:f2:c3:8f:cc:10:4d:be:ce:4d:44:f0:a1:07:
         0f:9f:d3:26:46:17:84:08:04:70:40:c3:2c:f8:a4:95:7e:8a:
         9e:22:79:90:72:7a:9b:ec:0f:2e:8c:6d:67:5a:09:14:65:34:
         f4:04:f6:6d:ba:1f:13:c3:f3:42:64:fc:28:b4:06:16:50:29:
         43:c2:a6:93:ca:19:19:82:00:eb:1f:bb:b1:03:f4:9e:32:67:
         8c:36:5c:ff:95:82:7c:78:a4:00:05:56:46:64:d5:4d:6a:d6:
         16:26:a1:08:3f:e0:57:3f:d6:dc:40:30:3a:bb:ef:3e:97:20:
         79:99:06:24:3b:b2:0f:ad:54:17:a6:0a:82:87:e5:5c:d1:30:
         19:06:91:26:d9:84:40:d9:7d:fe:4d:5c:d2:8b:a5:83:3b:50:
         85:8f:27:e4:8d:44:d7:f8:69:dd:1d:1d:d6:07:7b:9d:b0:68:
         53:e8:97:37:00:32:9d:aa:4b:ea:05:22:61:7a:a7:0d:c4:3d:
         3e:f1:5b:03:a2:5f:27:75:3c:ae:22:03:63:44:ac:2c:e8:a6:
         15:dd:65:1d:41:ca:a4:66:f3:c2:f2:16:9f:bd:36:f7:b2:42:
         ac:9f:34:20:1c:8b:eb:ac:ed:c3:43:69:5a:99:4b:93:f4:e6:
         2c:8d:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----