Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/323830343a313539303a383030303a3a2f33332d3333203d3e20323633333935.roa
File:                     323830343a313539303a383030303a3a2f33332d3333203d3e20323633333935.roa (raw, json)
Hash identifier:          ko0622niU77UJw0XQQ6ZcWSSebAQ5+ykhckaxoqRWu8=
Subject key identifier:   F4:1E:D3:4A:F6:B1:8D:49:73:12:27:3F:91:BE:B2:E7:3B:AA:E5:37
Certificate issuer:       /CN=67666492B102F21109D368673B2B20745692E1A8
Certificate serial:       30F768941EFA85EF21D83E0EB8C1C96D2A2270DD
Authority key identifier: 67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/323830343a313539303a383030303a3a2f33332d3333203d3e20323633333935.roa
Signing time:             Sun 25 Dec 2022 17:22:18 +0000
ROA not before:           Sun 25 Dec 2022 17:17:18 +0000
ROA not after:            Sun 24 Dec 2023 17:22:18 +0000
asID:                     263395
IP address blocks:        2804:1590:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f7:68:94:1e:fa:85:ef:21:d8:3e:0e:b8:c1:c9:6d:2a:22:70:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67666492B102F21109D368673B2B20745692E1A8
        Validity
            Not Before: Dec 25 17:17:18 2022 GMT
            Not After : Dec 24 17:22:18 2023 GMT
        Subject: CN=F41ED34AF6B18D497312273F91BEB2E73BAAE537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:8d:33:a7:0a:68:23:86:01:cf:70:02:cf:
                    6e:21:d1:2c:06:ef:ec:ba:c3:c7:93:1b:28:af:3a:
                    e8:0a:b5:8c:49:9d:a0:e1:77:98:41:61:05:c7:45:
                    88:ca:d3:e2:3e:c3:92:50:09:da:44:6e:aa:d5:00:
                    94:dc:9b:b2:13:16:d5:d8:dc:21:39:0b:a2:0c:ee:
                    46:95:fa:ba:2e:a0:b1:9e:30:3d:43:20:1b:c0:0b:
                    d4:c9:72:14:2c:a8:a5:00:e5:da:6c:f7:96:dc:fd:
                    77:18:d8:a0:1d:08:19:90:b2:1a:30:7e:10:72:5a:
                    61:f9:8b:84:7a:36:3b:30:45:31:f4:08:ad:19:f8:
                    12:8c:ba:0c:ae:35:34:84:7a:fc:46:d9:db:8c:fe:
                    8b:c5:93:42:9a:1c:7b:39:58:ef:f5:6c:6d:60:05:
                    bd:05:72:0b:64:d3:ea:a3:bd:5b:94:0d:54:d3:6b:
                    5a:87:32:cb:cb:5a:e3:ba:12:f8:e1:cc:bf:20:e9:
                    3b:cc:1f:23:68:1b:3e:09:0e:58:1c:d6:4c:4a:49:
                    79:28:33:04:59:72:97:b2:5e:a1:21:27:2a:83:16:
                    2f:66:d7:17:7d:0b:d5:04:07:e3:a0:2f:87:64:65:
                    d8:a9:5e:37:c8:f7:e7:72:b1:3b:1b:63:ae:d8:ca:
                    17:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1E:D3:4A:F6:B1:8D:49:73:12:27:3F:91:BE:B2:E7:3B:AA:E5:37
            X509v3 Authority Key Identifier:
                keyid:67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/67666492B102F21109D368673B2B20745692E1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/323830343a313539303a383030303a3a2f33332d3333203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1590:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5d:6b:06:f2:f7:4a:bb:04:ac:b0:d7:3a:c0:d1:b0:92:82:6d:
         1c:b5:a6:fe:bf:c1:35:fd:11:6c:18:f9:12:23:09:60:27:72:
         a2:65:e4:00:2c:fc:08:d4:31:cf:cc:af:77:89:58:9c:74:0e:
         e9:10:fb:62:df:59:a9:32:72:41:64:11:7a:8e:7a:a5:e3:b0:
         1c:2c:12:55:9b:e8:e2:e8:c2:5a:a6:6d:cf:64:ad:4f:e3:2a:
         31:35:7f:df:a9:e1:df:16:e7:ba:42:f5:31:d0:13:73:d1:f5:
         cf:25:ca:d5:51:ac:1b:0c:c2:b0:1d:8a:cf:a5:c7:ce:bd:b6:
         23:d9:92:8b:5d:15:f0:41:72:ea:0f:8f:6e:f9:04:79:68:47:
         58:8e:bd:9e:64:03:89:44:33:96:1c:59:cc:46:f6:85:1c:bc:
         f7:dc:0d:44:d8:4d:b1:05:31:4b:5d:bd:fa:d7:67:8c:e5:58:
         53:10:c9:74:21:74:a3:5d:65:13:9e:d1:13:11:dd:f1:3d:59:
         6f:05:8b:a1:49:89:77:eb:83:c6:26:91:fd:72:ae:bb:dd:06:
         4f:f2:f8:14:62:4c:56:a5:13:56:6e:51:55:6c:fb:d9:67:5e:
         af:26:11:05:c3:6d:58:ba:9f:95:da:a3:64:9a:37:e7:c9:7e:
         43:09:d5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----