Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a383130303a3a2f34302d3430203d3e20323633393234.roa
File:                     323830343a323764343a383130303a3a2f34302d3430203d3e20323633393234.roa (raw, json)
Hash identifier:          qeA4Kz796YnS+pnTUVIWGZo1eO7PTHlTHmcGyuO42AQ=
Subject key identifier:   26:29:0C:52:01:BB:34:C7:A1:90:69:F8:F3:5C:A3:F3:76:C5:9C:31
Certificate issuer:       /CN=37920E0FA868864513370CCCA4671F6B43B65F22
Certificate serial:       25E8B7B4DC44125F271A7919D29AA06AA7BE4BE4
Authority key identifier: 37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a383130303a3a2f34302d3430203d3e20323633393234.roa
Signing time:             Mon 07 Feb 2022 12:09:18 +0000
ROA not before:           Mon 07 Feb 2022 12:04:18 +0000
ROA not after:            Mon 06 Feb 2023 12:09:18 +0000
asID:                     263924
IP address blocks:        2804:27d4:8100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e8:b7:b4:dc:44:12:5f:27:1a:79:19:d2:9a:a0:6a:a7:be:4b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37920E0FA868864513370CCCA4671F6B43B65F22
        Validity
            Not Before: Feb  7 12:04:18 2022 GMT
            Not After : Feb  6 12:09:18 2023 GMT
        Subject: CN=26290C5201BB34C7A19069F8F35CA3F376C59C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1c:8d:7b:e3:aa:56:51:6b:2d:b6:76:14:7d:
                    cf:34:96:e7:58:cb:a8:23:7a:f2:4b:34:c7:e9:52:
                    aa:d7:57:3d:0e:61:c4:89:06:48:bb:0c:36:f8:98:
                    1f:aa:67:ff:aa:6e:7a:40:f7:47:6d:c5:06:54:8c:
                    92:d0:88:2c:50:67:47:95:68:6e:f2:59:34:7f:6e:
                    2d:9e:e1:92:c6:1b:48:70:21:8d:33:f0:37:14:c4:
                    dd:bd:41:3d:5f:0d:a1:19:76:c5:74:89:8f:02:58:
                    66:fc:f3:9e:56:92:cb:65:d3:57:20:bb:b4:7e:e4:
                    a6:09:97:fb:59:3c:4e:38:51:a2:5e:64:69:63:99:
                    3e:11:37:4e:1a:45:e1:7c:45:b5:27:d4:93:62:f8:
                    af:a9:46:83:34:cb:62:d7:89:74:26:f4:dc:a4:69:
                    7c:44:81:5f:fe:17:71:5b:bc:6c:c0:ae:ab:9d:21:
                    48:4f:7f:24:f6:a9:5e:29:03:e8:0c:b6:fd:a7:5a:
                    6c:57:3f:8a:ca:47:96:87:d2:f5:36:33:7a:3b:d4:
                    ed:0b:9a:f6:4a:26:86:27:0b:6b:bd:af:94:dc:14:
                    e4:a7:16:ee:d7:52:27:1f:13:ef:85:1f:60:7a:c8:
                    a5:ba:f8:4b:ea:ec:9d:e4:52:fa:c4:ce:70:01:e3:
                    fe:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:29:0C:52:01:BB:34:C7:A1:90:69:F8:F3:5C:A3:F3:76:C5:9C:31
            X509v3 Authority Key Identifier:
                keyid:37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/37920E0FA868864513370CCCA4671F6B43B65F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a383130303a3a2f34302d3430203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27d4:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:2b:69:4b:18:77:89:9e:f9:a2:73:d4:97:74:8f:47:c9:19:
         9b:80:9e:b7:26:61:72:8c:99:be:d5:2e:f6:8e:ab:6c:30:40:
         92:42:29:fe:11:af:08:3d:fd:a1:a3:40:d9:c6:f6:b0:e8:2a:
         31:29:9e:db:c6:da:3b:09:9d:ae:12:b7:fa:43:45:ab:08:73:
         9b:5d:b7:5e:f5:dc:82:29:d6:7a:ac:4a:b9:2d:21:cc:35:a7:
         99:52:a1:ff:e1:cb:98:cf:b2:35:67:86:60:34:e0:a7:01:03:
         bf:55:b4:77:eb:6d:41:31:4e:15:5c:19:4d:0b:0a:3a:49:ba:
         cd:a0:41:39:fe:e2:55:95:12:5d:61:79:55:e4:05:41:7a:49:
         c9:55:14:c6:c6:a2:55:c6:f4:2f:a5:64:1d:af:f9:94:fe:c9:
         22:de:84:ec:05:82:07:1f:47:41:4c:4b:d0:66:74:b4:99:ee:
         cc:27:4e:7d:50:95:9e:c2:93:0d:14:cd:86:71:f4:5f:8c:d5:
         d2:80:2e:27:c0:4c:f8:f7:37:35:7a:0e:c0:d1:af:3a:2a:d1:
         44:7e:b1:c0:92:20:cb:07:32:c3:f8:8b:51:de:04:2b:2e:a7:
         92:4c:ae:ad:49:c9:eb:36:05:0a:77:bf:99:0d:90:da:df:0b:
         09:a2:d6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----