Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/323830343a6431343a3a2f33322d3332203d3e203532353936.roa
File:                     323830343a6431343a3a2f33322d3332203d3e203532353936.roa (raw, json)
Hash identifier:          fGlh7zC6nlehV0lsGt43R6VwpsiVRz7olcKO4TZyzr8=
Subject key identifier:   C9:8E:03:B0:0F:25:47:ED:4F:E2:F5:D6:A4:F3:3B:6E:7B:B5:49:15
Certificate issuer:       /CN=2040C1272A1F5F77630022CCB689577F699AE41B
Certificate serial:       64D8CCF7DEEE8BAFDE55BF9EF850D1F398F92DE4
Authority key identifier: 20:40:C1:27:2A:1F:5F:77:63:00:22:CC:B6:89:57:7F:69:9A:E4:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2040C1272A1F5F77630022CCB689577F699AE41B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/323830343a6431343a3a2f33322d3332203d3e203532353936.roa
Signing time:             Fri 06 May 2022 18:08:18 +0000
ROA not before:           Fri 06 May 2022 18:03:18 +0000
ROA not after:            Fri 05 May 2023 18:08:18 +0000
asID:                     52596
IP address blocks:        2804:d14::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d8:cc:f7:de:ee:8b:af:de:55:bf:9e:f8:50:d1:f3:98:f9:2d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2040C1272A1F5F77630022CCB689577F699AE41B
        Validity
            Not Before: May  6 18:03:18 2022 GMT
            Not After : May  5 18:08:18 2023 GMT
        Subject: CN=C98E03B00F2547ED4FE2F5D6A4F33B6E7BB54915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:9f:3c:4a:41:6c:89:78:ae:05:dd:5e:87:
                    3c:e8:66:cb:a6:e8:56:d9:ad:23:91:12:1c:d1:1b:
                    78:79:6c:ca:f6:e5:8e:c6:5e:f4:c8:15:80:db:1f:
                    fb:7c:ef:c8:ef:6b:ba:ed:ab:ff:06:6a:01:15:cb:
                    fc:4e:05:bc:7b:33:a8:06:30:fe:b5:84:e1:98:62:
                    82:b8:fd:0e:e5:58:60:07:c8:7e:e4:2e:73:c5:6b:
                    43:0d:c8:13:4c:16:d8:42:26:bd:2d:75:72:08:c7:
                    d9:9c:3f:cc:45:c3:9d:0e:6a:31:bc:51:e2:e2:70:
                    58:ea:eb:0f:b8:12:8a:66:dc:99:9b:33:be:88:7b:
                    a6:6c:8e:b7:25:95:3e:cc:e5:94:52:63:38:bf:82:
                    a1:2c:5a:a2:8d:18:6a:ed:c7:36:9e:17:1e:01:7b:
                    8a:a9:00:ee:6a:6f:7b:ac:3b:1b:a8:5b:be:ac:aa:
                    0e:04:51:d3:b5:99:86:6f:d4:0b:16:cb:6b:3e:f1:
                    d3:25:20:7d:6a:26:d6:e9:98:bb:f9:86:6e:bb:29:
                    2b:bb:26:ed:29:45:f7:89:ac:e2:b3:6a:c6:2f:38:
                    a1:4c:bf:08:ba:15:19:d0:03:a2:82:a5:81:16:86:
                    34:a8:b2:73:10:77:dc:47:ff:ec:ac:c5:f4:92:4a:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8E:03:B0:0F:25:47:ED:4F:E2:F5:D6:A4:F3:3B:6E:7B:B5:49:15
            X509v3 Authority Key Identifier:
                keyid:20:40:C1:27:2A:1F:5F:77:63:00:22:CC:B6:89:57:7F:69:9A:E4:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/2040C1272A1F5F77630022CCB689577F699AE41B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2040C1272A1F5F77630022CCB689577F699AE41B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/323830343a6431343a3a2f33322d3332203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d14::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:9c:93:87:30:aa:d1:73:35:cc:8c:99:34:9c:25:cb:32:d4:
         6b:d2:6f:81:88:4d:dc:dd:52:a8:a6:ca:ce:6f:5f:5a:5c:f1:
         95:d2:ca:a0:65:4d:42:e2:29:b6:70:86:55:b6:95:fb:b5:57:
         37:f7:91:e4:dc:54:ff:43:22:ed:54:cb:5f:02:c1:88:48:ea:
         55:ec:dd:fd:c4:eb:c1:7e:c7:b6:eb:12:fb:70:f9:ad:80:c4:
         5d:ca:0f:de:e2:3b:2d:32:b2:88:19:94:77:89:89:56:89:29:
         04:85:76:eb:ea:f7:99:e7:a9:73:3e:f8:b6:5b:fd:7a:4e:f7:
         13:d6:c9:56:48:29:28:d7:02:a0:7e:97:2a:6d:3d:0b:8f:57:
         a5:e4:59:5f:fe:33:31:7d:01:09:00:f0:d2:13:42:89:91:2d:
         36:97:7f:4f:64:98:4f:37:bb:3c:cc:3e:04:8c:d9:b4:f8:e3:
         c9:92:61:41:0c:1e:47:6f:d2:a0:13:7a:d7:d0:2f:08:7e:4a:
         b9:c7:1c:b8:31:a0:c2:ad:08:91:5a:4a:d7:73:d6:c7:eb:3b:
         73:91:fe:39:4a:50:97:5d:e2:0f:79:c8:9a:f8:3d:2b:ee:9f:
         45:21:c6:86:85:62:9d:6a:c2:6d:27:93:b5:86:36:9a:b0:bb:
         e1:d9:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----