Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/323830343a323736303a3a2f33322d3338203d3e20323633383937.roa
File:                     323830343a323736303a3a2f33322d3338203d3e20323633383937.roa (raw, json)
Hash identifier:          YGZNgJa5aQ67LgkdtBokujvO/sbMo164MACBZUIeXA0=
Subject key identifier:   02:63:58:07:A4:5A:B0:B6:4D:7F:E9:98:60:5C:75:78:75:FD:8C:8A
Certificate issuer:       /CN=73F4CAC0D954451739E79AFE193B21C06A17D668
Certificate serial:       38E0D2D33A242DB34C26F4E2C19B3A7E15497350
Authority key identifier: 73:F4:CA:C0:D9:54:45:17:39:E7:9A:FE:19:3B:21:C0:6A:17:D6:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73F4CAC0D954451739E79AFE193B21C06A17D668.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/323830343a323736303a3a2f33322d3338203d3e20323633383937.roa
Signing time:             Tue 20 Sep 2022 13:54:59 +0000
ROA not before:           Tue 20 Sep 2022 13:49:59 +0000
ROA not after:            Tue 19 Sep 2023 13:54:59 +0000
asID:                     263897
IP address blocks:        2804:2760::/32 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e0:d2:d3:3a:24:2d:b3:4c:26:f4:e2:c1:9b:3a:7e:15:49:73:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73F4CAC0D954451739E79AFE193B21C06A17D668
        Validity
            Not Before: Sep 20 13:49:59 2022 GMT
            Not After : Sep 19 13:54:59 2023 GMT
        Subject: CN=02635807A45AB0B64D7FE998605C757875FD8C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6b:3d:a8:c7:fe:d1:1c:9f:e9:bb:32:d4:06:
                    86:0e:9e:86:af:c5:9d:e8:ad:d6:04:f8:73:f3:43:
                    85:74:cf:af:78:05:37:98:fa:35:6e:35:b8:96:d4:
                    ec:6a:3b:c5:93:d6:13:42:12:fe:66:20:01:2a:6a:
                    8d:0e:4c:82:fe:ce:f2:04:72:8a:a1:6d:f8:75:45:
                    5f:f8:e6:b7:64:ea:4e:d1:00:6f:13:48:cd:1f:b6:
                    60:4b:da:79:39:d4:4e:c7:e4:5d:1b:95:79:49:a4:
                    79:a1:d7:83:9f:fa:2a:88:36:19:fd:27:3f:0b:4b:
                    ee:6f:03:8a:04:07:ed:00:fa:38:e3:f3:70:ff:ef:
                    e9:b6:7b:b1:2a:47:86:ca:d6:50:37:ea:9e:dd:ff:
                    fc:1c:79:52:a6:68:2a:a7:b7:b5:ac:73:4d:b1:7b:
                    78:9b:07:86:6c:a9:1c:51:56:2e:fe:16:37:f6:e4:
                    74:52:06:42:f1:5f:e7:52:e4:b8:2d:b9:d3:0f:f6:
                    20:54:4f:43:f6:24:44:68:df:50:08:bd:bb:12:7a:
                    6a:5e:b1:fb:b2:49:c6:6c:d7:83:7e:bd:33:c7:23:
                    c8:64:b1:12:c2:3b:23:3c:18:65:53:30:d3:1f:99:
                    8f:15:41:e5:9b:cd:22:a9:fa:0a:38:1b:13:40:30:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:63:58:07:A4:5A:B0:B6:4D:7F:E9:98:60:5C:75:78:75:FD:8C:8A
            X509v3 Authority Key Identifier:
                keyid:73:F4:CA:C0:D9:54:45:17:39:E7:9A:FE:19:3B:21:C0:6A:17:D6:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/73F4CAC0D954451739E79AFE193B21C06A17D668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73F4CAC0D954451739E79AFE193B21C06A17D668.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/323830343a323736303a3a2f33322d3338203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2760::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:49:5f:12:a1:f0:bc:83:63:01:b8:7d:7c:e0:af:12:f2:83:
         93:08:20:f5:ad:7f:b3:bd:45:74:be:93:0d:90:e2:1e:f0:16:
         e9:17:80:3a:d0:3c:1d:c8:b9:ab:5c:1f:fb:0c:21:c1:da:d7:
         00:5f:79:d5:c1:1b:62:8e:0e:c6:75:02:16:1f:88:a5:99:33:
         fb:55:76:3c:0d:72:d9:3a:60:57:ef:18:66:91:49:58:8e:79:
         f8:9d:53:d8:71:5f:94:89:fb:65:a4:06:7f:10:63:91:cf:46:
         77:12:dd:03:80:1f:6f:66:60:50:d2:1d:64:d4:9c:19:5b:fa:
         a3:de:9e:39:67:3d:dc:38:2d:84:23:ef:de:c8:de:aa:79:4a:
         42:3e:33:9f:ce:1c:48:9a:40:e4:d9:62:8f:54:55:88:e8:cd:
         ef:e8:7f:bc:2c:73:07:3d:14:75:7f:36:ed:2a:19:aa:b2:33:
         ce:60:31:21:a2:9c:aa:fc:b5:5b:0f:86:81:da:84:09:e3:c4:
         80:18:96:3d:06:76:d3:89:d6:a4:b3:d7:46:6c:46:c5:61:1c:
         a7:33:bd:1b:07:8d:15:91:c2:fb:01:bd:60:06:bc:2d:06:8c:
         6f:fb:cb:36:09:f9:85:59:2f:21:be:73:af:fb:71:2b:00:ad:
         1c:92:fe:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----