Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/323830343a3663343a3a2f33362d3430203d3e20323632383933.roa
File:                     323830343a3663343a3a2f33362d3430203d3e20323632383933.roa (raw, json)
Hash identifier:          1ODoqF0FGwnTPPExnQtUmFf9hjqdU5vuKE09n5L1kZM=
Subject key identifier:   C3:1D:43:DE:42:97:D2:16:7D:DB:46:16:F5:C2:5C:3C:90:F7:72:05
Certificate issuer:       /CN=511B355769823307034985B2E114AB98901BC8A3
Certificate serial:       15C96F15384E3628E215C59FD0CCF3128B5555E9
Authority key identifier: 51:1B:35:57:69:82:33:07:03:49:85:B2:E1:14:AB:98:90:1B:C8:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/511B355769823307034985B2E114AB98901BC8A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/323830343a3663343a3a2f33362d3430203d3e20323632383933.roa
Signing time:             Thu 09 Jun 2022 19:09:28 +0000
ROA not before:           Thu 09 Jun 2022 19:04:28 +0000
ROA not after:            Thu 08 Jun 2023 19:09:28 +0000
asID:                     262893
IP address blocks:        2804:6c4::/36 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c9:6f:15:38:4e:36:28:e2:15:c5:9f:d0:cc:f3:12:8b:55:55:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511B355769823307034985B2E114AB98901BC8A3
        Validity
            Not Before: Jun  9 19:04:28 2022 GMT
            Not After : Jun  8 19:09:28 2023 GMT
        Subject: CN=C31D43DE4297D2167DDB4616F5C25C3C90F77205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:90:54:bd:65:48:18:05:0d:34:5a:ab:8f:
                    79:c5:df:7b:f2:15:fb:3e:2d:01:cd:91:90:38:e4:
                    57:d1:7c:92:98:24:f2:2e:b4:ad:2d:23:7a:12:8b:
                    34:e9:51:e6:68:eb:e0:38:56:6d:16:44:a8:e2:50:
                    23:60:ef:d8:75:12:24:4d:69:fd:9f:2e:78:4e:7a:
                    54:35:35:54:c8:75:9b:eb:ca:15:f7:89:fa:6e:c6:
                    16:7e:da:57:e6:09:e3:02:3a:82:70:98:6a:43:f1:
                    b2:b5:6f:00:fc:fd:9b:3e:cb:25:ac:64:15:c7:ca:
                    0c:6f:5e:36:66:28:c3:67:5d:da:d2:dc:61:b0:8f:
                    80:34:c7:f0:c9:cd:2e:48:3b:cb:78:90:f5:92:9e:
                    16:68:3b:56:06:05:8a:0a:7c:f6:4e:63:35:3b:ed:
                    d4:99:25:45:6c:af:67:49:3e:7a:6d:fb:25:a5:10:
                    71:b5:bd:8a:a7:eb:cc:22:63:4e:3b:92:85:0a:ba:
                    ac:30:ce:0e:a0:36:92:66:e3:90:2b:1e:a4:ef:cd:
                    22:48:d3:6c:63:61:2e:04:cc:dc:3e:08:0e:00:81:
                    62:56:ff:3a:11:39:91:73:73:c6:a9:cf:18:1f:da:
                    b7:87:65:44:20:98:0d:8f:30:82:27:a2:c2:ce:55:
                    f0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1D:43:DE:42:97:D2:16:7D:DB:46:16:F5:C2:5C:3C:90:F7:72:05
            X509v3 Authority Key Identifier:
                keyid:51:1B:35:57:69:82:33:07:03:49:85:B2:E1:14:AB:98:90:1B:C8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/511B355769823307034985B2E114AB98901BC8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/511B355769823307034985B2E114AB98901BC8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/323830343a3663343a3a2f33362d3430203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c4::/36

    Signature Algorithm: sha256WithRSAEncryption
         44:12:e4:b5:62:03:ea:f4:2f:96:7c:9c:30:fb:c2:07:bb:0b:
         bf:17:66:46:b5:c0:46:89:24:9a:76:ea:8f:41:90:86:09:65:
         0f:96:2c:42:43:29:e3:a5:91:cc:41:86:2a:20:f7:33:c1:cd:
         e2:68:87:df:38:8a:b7:28:b3:91:3f:a3:6d:50:bb:1f:7f:0a:
         bb:eb:6b:16:f1:28:ed:9b:fa:74:ee:ae:69:d4:0b:fa:e3:74:
         c9:5e:d0:b3:c6:cf:bf:7b:de:dd:fa:bb:6d:f8:f0:d6:7e:fb:
         34:ee:c1:10:d0:e1:a1:69:52:38:a5:4d:15:ed:58:38:c7:88:
         c3:24:5c:53:bb:e1:8e:d4:fa:93:e6:4a:40:c9:09:e9:29:95:
         87:cf:04:b7:78:87:f3:13:d0:af:47:00:fb:f7:d6:fc:02:ac:
         44:6f:51:ea:3d:49:56:fe:9c:8c:f2:46:4e:dc:91:77:91:d8:
         af:70:99:e6:19:54:4d:80:c3:1a:19:58:d2:27:42:97:a4:3c:
         e4:b6:1a:3f:d5:be:d1:8e:ba:14:06:e9:59:b3:42:a9:97:0e:
         bb:ec:4f:c0:16:ab:74:6d:c9:99:8e:9f:ec:f8:f5:d8:5e:5d:
         59:1f:54:17:9d:1d:d1:fd:dc:c1:79:28:95:1e:07:22:b0:22:
         f8:7e:e0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----