Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/323830343a353064343a3a2f33322d313238203d3e20323638343133.roa
File:                     323830343a353064343a3a2f33322d313238203d3e20323638343133.roa (raw, json)
Hash identifier:          xx3XQM+t35UJ+iKvm1wZjVFAGHTf6EPp7NipVu7f5lk=
Subject key identifier:   7E:3A:49:24:D4:5D:57:AB:89:6B:0E:46:1A:20:E6:0A:0F:50:60:76
Certificate issuer:       /CN=1EC5B0C153629EE217F98299EE68DC1F955EA3AE
Certificate serial:       776B8D3ED4CE9C5C18E92CEA98729EF33F60007B
Authority key identifier: 1E:C5:B0:C1:53:62:9E:E2:17:F9:82:99:EE:68:DC:1F:95:5E:A3:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EC5B0C153629EE217F98299EE68DC1F955EA3AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/323830343a353064343a3a2f33322d313238203d3e20323638343133.roa
Signing time:             Wed 23 Nov 2022 21:13:58 +0000
ROA not before:           Wed 23 Nov 2022 21:08:58 +0000
ROA not after:            Wed 22 Nov 2023 21:13:58 +0000
asID:                     268413
IP address blocks:        2804:50d4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6b:8d:3e:d4:ce:9c:5c:18:e9:2c:ea:98:72:9e:f3:3f:60:00:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EC5B0C153629EE217F98299EE68DC1F955EA3AE
        Validity
            Not Before: Nov 23 21:08:58 2022 GMT
            Not After : Nov 22 21:13:58 2023 GMT
        Subject: CN=7E3A4924D45D57AB896B0E461A20E60A0F506076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:ec:f8:ab:4b:bb:d8:cb:7a:d1:c1:ba:87:
                    a5:00:23:26:61:6c:17:3a:82:a0:2b:4a:22:e4:a4:
                    f8:06:fd:43:1a:80:19:08:37:13:37:d3:56:37:3a:
                    cf:28:c9:53:b1:53:3e:4b:28:07:34:fc:d4:5e:f5:
                    3a:d4:f2:2d:dd:d8:08:ff:c3:58:4f:c5:16:b0:73:
                    8f:14:64:19:59:df:eb:a2:90:57:92:0e:3d:4f:60:
                    61:e7:99:96:9a:db:e6:15:f1:60:c6:35:dc:ef:30:
                    4d:55:de:55:f9:9c:e7:51:1e:7c:93:a1:70:d6:2c:
                    b6:a2:46:f9:2b:12:bb:45:21:a3:c6:eb:4c:d2:11:
                    d3:f9:41:74:5e:2b:67:95:6c:ca:fe:9d:6f:d9:25:
                    31:ca:61:bb:bb:4c:b9:9e:cd:29:b5:45:6d:6e:cb:
                    e0:d1:0f:fd:9b:0c:10:6b:f8:97:cc:3e:53:68:ef:
                    18:0b:1a:8b:54:11:df:1b:3d:33:6f:10:70:3c:23:
                    98:8f:a8:37:d5:8d:7c:43:28:d2:6e:c4:ea:c0:1b:
                    dc:56:81:63:4e:ed:9e:f4:6e:e0:22:af:71:8d:20:
                    04:3a:8a:86:76:75:eb:9b:d7:90:e4:da:d0:2d:3b:
                    6f:1e:e8:6e:1c:31:37:00:20:3b:f7:40:3c:1a:40:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3A:49:24:D4:5D:57:AB:89:6B:0E:46:1A:20:E6:0A:0F:50:60:76
            X509v3 Authority Key Identifier:
                keyid:1E:C5:B0:C1:53:62:9E:E2:17:F9:82:99:EE:68:DC:1F:95:5E:A3:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/1EC5B0C153629EE217F98299EE68DC1F955EA3AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EC5B0C153629EE217F98299EE68DC1F955EA3AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/323830343a353064343a3a2f33322d313238203d3e20323638343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:50d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:61:74:53:d9:82:3e:8f:1a:43:89:94:04:34:6c:54:e1:5d:
         82:3c:20:97:5f:4f:31:0a:02:29:78:66:8c:a5:5e:4d:94:49:
         b4:3a:b6:b2:f3:87:01:dd:ec:6a:8c:e7:f8:55:84:89:24:06:
         66:dc:b0:ec:9e:88:ef:84:8e:18:91:66:63:6a:cc:02:40:30:
         92:58:ca:b2:c6:e6:c0:9f:f7:0a:0e:15:8d:5f:16:3a:eb:b1:
         17:0e:30:14:56:56:a1:20:67:1b:21:9b:b9:52:fc:9a:b7:ec:
         24:fd:ec:55:a2:51:e8:18:d9:ad:a3:5d:25:75:31:21:9e:39:
         db:07:fe:2e:74:31:72:98:61:12:2e:85:c2:40:18:4d:d3:b5:
         d7:ae:0e:b8:58:3c:3d:a2:2d:cd:3e:34:e0:fe:f8:b3:87:71:
         44:0b:ad:85:f5:05:41:62:e1:15:12:a6:49:86:23:40:cb:9d:
         d5:40:9d:3f:28:8f:9c:98:f9:40:e6:60:70:24:30:ee:9e:84:
         50:3f:02:33:6f:84:8d:0d:4e:7c:6c:0e:24:92:4b:8a:dc:21:
         f0:5f:8e:0a:1e:99:d7:55:83:00:5a:8c:57:1a:a4:d8:0c:f6:
         02:f1:f9:9f:9e:89:f4:a5:08:e3:8b:c4:a2:17:0a:27:10:51:
         65:4f:9f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----