Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33322d313238203d3e20323638373037.roa
File:                     323830343a353938343a3a2f33322d313238203d3e20323638373037.roa (raw, json)
Hash identifier:          DayqAZjldLK2NsNzWBIoQsAHtYvFPGxKuNAgCXadcyI=
Subject key identifier:   06:F7:1C:5C:7D:5E:4C:F1:15:18:18:81:97:27:40:BB:23:F0:72:50
Certificate issuer:       /CN=E20F939CD14A803A7EFD9EA9640E79525FAEE9C2
Certificate serial:       176915814C02A085989A4AD40E68AC1947E9BC52
Authority key identifier: E2:0F:93:9C:D1:4A:80:3A:7E:FD:9E:A9:64:0E:79:52:5F:AE:E9:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E20F939CD14A803A7EFD9EA9640E79525FAEE9C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33322d313238203d3e20323638373037.roa
Signing time:             Thu 29 Dec 2022 20:49:27 +0000
ROA not before:           Thu 29 Dec 2022 20:44:27 +0000
ROA not after:            Thu 28 Dec 2023 20:49:27 +0000
asID:                     268707
IP address blocks:        2804:5984::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:69:15:81:4c:02:a0:85:98:9a:4a:d4:0e:68:ac:19:47:e9:bc:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E20F939CD14A803A7EFD9EA9640E79525FAEE9C2
        Validity
            Not Before: Dec 29 20:44:27 2022 GMT
            Not After : Dec 28 20:49:27 2023 GMT
        Subject: CN=06F71C5C7D5E4CF115181881972740BB23F07250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:b8:ac:25:b8:3c:9c:1a:a6:8f:f9:15:a3:
                    e7:0a:f2:91:34:b5:9d:a2:18:82:5f:02:50:7e:84:
                    65:76:08:fc:13:90:a6:cc:df:66:b2:e9:37:6b:f5:
                    84:2d:5f:63:80:73:3c:ab:d3:84:52:83:67:cf:4c:
                    07:2e:32:51:cb:c0:84:87:75:34:cf:58:59:95:3b:
                    03:37:d2:b5:8a:53:9f:91:93:55:a7:0c:20:31:35:
                    f6:e7:44:03:1c:bd:fe:8f:af:95:5d:cd:80:b2:3c:
                    f1:c2:5e:24:9c:70:e1:3b:69:68:4c:bb:16:71:0f:
                    d0:32:03:e1:32:be:16:41:75:82:6e:04:8e:98:f9:
                    51:26:e0:52:c7:08:07:73:b4:e2:d3:6e:8c:c8:23:
                    62:fa:f1:c8:06:12:e6:d0:55:d6:c0:88:13:42:d3:
                    f5:ce:30:c9:7e:27:c4:77:77:b3:c0:83:69:5e:59:
                    81:ea:67:89:e8:21:de:73:5b:83:ed:aa:ac:3a:6e:
                    92:07:dc:4d:3b:14:aa:59:1f:39:f6:83:fc:ff:81:
                    05:5a:5f:5b:22:8c:48:a2:55:03:c8:a5:81:6b:23:
                    82:a1:f9:ca:b4:d7:68:77:96:cf:cc:fe:52:b5:a9:
                    6f:64:94:5b:9c:8e:43:a4:8d:58:e3:5f:e6:5d:94:
                    7f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F7:1C:5C:7D:5E:4C:F1:15:18:18:81:97:27:40:BB:23:F0:72:50
            X509v3 Authority Key Identifier:
                keyid:E2:0F:93:9C:D1:4A:80:3A:7E:FD:9E:A9:64:0E:79:52:5F:AE:E9:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/E20F939CD14A803A7EFD9EA9640E79525FAEE9C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E20F939CD14A803A7EFD9EA9640E79525FAEE9C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33322d313238203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:8c:57:69:d3:26:c6:30:ac:fb:17:ac:6e:09:b3:28:ff:b2:
         36:64:51:0d:cd:eb:34:75:4e:72:89:df:67:bb:78:e4:cb:81:
         23:16:7e:85:bb:83:0a:a2:22:cf:9a:37:ad:1c:ca:79:15:e2:
         28:b8:3f:81:1c:00:71:72:02:26:61:05:70:ed:16:44:76:e7:
         bd:4f:f4:e9:f5:3f:0a:3c:89:b0:29:b8:f8:b4:6d:5a:36:8b:
         d7:e8:77:2a:8f:77:ec:16:66:eb:31:d8:75:c7:18:02:5a:e6:
         41:d7:3a:9b:70:f6:a7:b8:dc:3a:48:97:1d:17:24:c1:00:9a:
         4b:8c:b8:d7:c3:58:42:84:59:91:15:d3:b6:7f:da:e3:65:10:
         8b:e4:f8:56:d5:06:42:a0:8f:fb:72:4d:da:48:b1:e7:90:94:
         84:4b:75:4a:a7:e0:f5:55:e7:5f:23:dd:c3:55:50:24:28:7f:
         54:92:dc:0e:45:e1:b4:de:b4:49:f2:8e:7f:a2:c8:5b:e7:6a:
         54:91:e3:9e:05:7e:6f:cf:82:2d:13:a1:41:4b:39:fa:af:32:
         ef:81:0a:ee:82:63:6b:00:3b:ba:ad:d0:60:3e:b0:39:fa:a9:
         41:6d:bd:00:69:72:2a:3f:39:42:84:2d:f7:fb:ac:a2:21:8e:
         78:1d:8b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----