Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/323830343a376231383a3a2f33322d3334203d3e20323731343130.roa
File:                     323830343a376231383a3a2f33322d3334203d3e20323731343130.roa (raw, json)
Hash identifier:          da+VlxIE1xV1OYl9cckYrK+Ia8qLVhC2ov1W04OdNHE=
Subject key identifier:   20:CB:09:8B:6B:D7:8C:2A:5C:2A:67:90:B3:4D:25:8F:C1:92:1A:AF
Certificate issuer:       /CN=A4D065082CFCE77B01F30B7C1138412F6131A20D
Certificate serial:       170920AC6AEB1BEC4738EF8E71C69FB382462398
Authority key identifier: A4:D0:65:08:2C:FC:E7:7B:01:F3:0B:7C:11:38:41:2F:61:31:A2:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D065082CFCE77B01F30B7C1138412F6131A20D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/323830343a376231383a3a2f33322d3334203d3e20323731343130.roa
Signing time:             Mon 07 Feb 2022 12:09:26 +0000
ROA not before:           Mon 07 Feb 2022 12:04:26 +0000
ROA not after:            Mon 06 Feb 2023 12:09:26 +0000
asID:                     271410
IP address blocks:        2804:7b18::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:09:20:ac:6a:eb:1b:ec:47:38:ef:8e:71:c6:9f:b3:82:46:23:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D065082CFCE77B01F30B7C1138412F6131A20D
        Validity
            Not Before: Feb  7 12:04:26 2022 GMT
            Not After : Feb  6 12:09:26 2023 GMT
        Subject: CN=20CB098B6BD78C2A5C2A6790B34D258FC1921AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0d:c1:b2:bf:3e:c1:94:ad:9c:1e:15:1c:32:
                    db:63:36:09:0e:b8:50:36:78:62:dd:2f:b7:4c:f0:
                    26:74:de:df:15:cf:b8:3b:3e:06:37:68:03:91:ca:
                    c2:dc:50:48:1e:44:a2:eb:2a:4d:c9:86:8a:67:37:
                    40:38:65:31:d4:7f:69:8e:d5:9a:fc:03:49:8a:c2:
                    fc:f7:ff:15:be:a2:49:f7:cb:de:e8:d4:c0:ed:55:
                    e0:b9:c3:b8:3c:a6:00:fd:fd:d1:09:f7:d5:a9:bb:
                    e8:69:d2:a2:97:51:14:57:fd:fb:fa:4f:2b:3a:8e:
                    84:e7:07:cb:12:13:ea:38:39:74:eb:d0:7e:be:29:
                    67:1e:03:73:ff:e5:b1:8b:3b:90:bb:29:ec:e0:4b:
                    cc:0d:b9:6b:16:f3:9a:f6:1c:ce:b7:11:be:fe:f6:
                    68:b3:5d:cc:0b:12:82:38:93:6f:f0:91:21:4b:06:
                    dc:0b:03:61:8d:26:ed:53:a7:1e:c7:1e:fb:d7:0c:
                    72:85:bd:a9:d2:14:c1:93:bb:d7:d7:9b:94:d8:55:
                    a2:44:e3:36:34:fc:67:73:a6:ed:a2:d2:62:e3:47:
                    47:aa:cc:15:29:83:08:6a:e9:91:60:d2:da:bb:32:
                    6e:8b:3e:f6:99:0e:09:5b:ce:dd:44:35:d6:33:48:
                    cb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CB:09:8B:6B:D7:8C:2A:5C:2A:67:90:B3:4D:25:8F:C1:92:1A:AF
            X509v3 Authority Key Identifier:
                keyid:A4:D0:65:08:2C:FC:E7:7B:01:F3:0B:7C:11:38:41:2F:61:31:A2:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/A4D065082CFCE77B01F30B7C1138412F6131A20D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D065082CFCE77B01F30B7C1138412F6131A20D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/323830343a376231383a3a2f33322d3334203d3e20323731343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b18::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:36:32:ac:31:8b:cf:01:07:aa:b6:25:12:21:54:40:79:11:
         b7:59:ec:9d:99:66:ef:9b:f0:b2:c9:17:ff:58:2c:f4:1f:dd:
         54:ac:3f:20:28:0b:bb:ca:48:c5:10:f5:7f:04:31:25:34:fa:
         bd:ef:de:d6:8f:47:1c:65:c9:19:86:52:38:05:60:c7:da:91:
         3b:36:15:ed:00:b4:16:34:17:22:56:cd:a5:d2:06:3f:5f:30:
         99:59:6d:be:99:b1:25:bd:47:4f:09:50:3f:20:3b:de:bd:a9:
         83:ea:b0:59:79:33:94:d9:ba:9b:2a:01:5a:59:9a:cf:5c:3e:
         4e:54:05:dc:07:0f:f7:96:0d:50:e5:80:60:06:68:88:19:79:
         bc:31:ce:4f:43:55:83:6f:37:38:e4:41:08:d2:54:01:0a:a5:
         6d:b9:58:d4:65:27:ba:18:f9:65:c6:33:15:b2:90:5e:a4:02:
         1d:41:b5:c2:6c:86:a0:37:8b:05:2e:08:b3:cb:10:c1:ab:36:
         66:d6:dd:07:0b:4f:87:f4:37:3f:84:2e:f7:d3:54:0a:d5:c5:
         da:f8:d1:38:60:d3:65:11:06:3c:b7:29:9d:bc:70:ae:82:0a:
         e4:e3:b5:53:21:7b:5e:92:24:96:de:03:30:2b:e7:c3:f4:66:
         60:0c:df:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----