Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/323830343a3964343a3a2f33322d3438203d3e20323632393936.roa
File:                     323830343a3964343a3a2f33322d3438203d3e20323632393936.roa (raw, json)
Hash identifier:          ZKuVRdYYDFwNwVScGmgodUh7L/bwXmErPVSSYybXiQY=
Subject key identifier:   70:AC:C6:0A:24:BF:40:F6:3B:E3:09:20:5E:F4:EE:E5:30:90:98:6A
Certificate issuer:       /CN=0A0E1035A424A928603BB73BF73FD98C8EAAE900
Certificate serial:       76122D125DF07159288640817E0BC11796B1C7F8
Authority key identifier: 0A:0E:10:35:A4:24:A9:28:60:3B:B7:3B:F7:3F:D9:8C:8E:AA:E9:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A0E1035A424A928603BB73BF73FD98C8EAAE900.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/323830343a3964343a3a2f33322d3438203d3e20323632393936.roa
Signing time:             Tue 26 Jul 2022 14:00:00 +0000
ROA not before:           Tue 26 Jul 2022 13:55:00 +0000
ROA not after:            Wed 26 Jul 2023 14:00:00 +0000
asID:                     262996
IP address blocks:        2804:9d4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:12:2d:12:5d:f0:71:59:28:86:40:81:7e:0b:c1:17:96:b1:c7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0E1035A424A928603BB73BF73FD98C8EAAE900
        Validity
            Not Before: Jul 26 13:55:00 2022 GMT
            Not After : Jul 26 14:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:42:c7:b6:70:c1:a7:d6:67:a5:f2:f1:61:
                    f7:f9:a7:3a:e6:0d:b4:f8:63:33:c9:cb:46:5f:fa:
                    d5:b3:b4:7a:d3:8f:7e:56:8e:da:10:8b:6a:5c:4d:
                    4e:44:22:9a:44:40:d8:9c:94:fc:8f:59:09:95:1a:
                    e2:8c:4e:a7:79:d2:62:f8:70:3f:9d:f1:b9:aa:cd:
                    1d:4d:03:8c:30:17:65:df:51:7f:a8:90:c9:8f:aa:
                    95:5d:f1:9f:90:47:01:44:54:cd:fc:0c:61:f0:e7:
                    65:7e:ad:0f:4e:2a:e1:2b:a9:a2:25:68:51:f4:f6:
                    49:68:ca:0a:d2:d1:c7:5f:48:ca:53:c4:6d:89:82:
                    c0:81:83:20:f5:4a:a3:e1:fd:0a:e7:d0:6c:24:fe:
                    3d:a2:aa:e9:48:d5:41:c1:23:61:e0:43:ab:1f:a6:
                    43:90:d0:2a:56:cf:dd:3a:25:a5:75:9d:75:ae:03:
                    cc:53:18:db:33:79:a5:21:33:1b:55:22:2b:10:55:
                    60:84:7d:ac:a6:6d:20:1d:72:29:10:73:0f:d6:b1:
                    f0:fe:8e:21:82:e2:38:6d:fe:4a:a8:72:9b:b0:31:
                    47:64:cc:ec:7e:7b:cd:0f:56:b1:60:06:c2:c1:a7:
                    f9:4b:75:4b:ee:3e:9b:82:45:1c:29:bc:4a:73:fa:
                    74:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AC:C6:0A:24:BF:40:F6:3B:E3:09:20:5E:F4:EE:E5:30:90:98:6A
            X509v3 Authority Key Identifier:
                keyid:0A:0E:10:35:A4:24:A9:28:60:3B:B7:3B:F7:3F:D9:8C:8E:AA:E9:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/0A0E1035A424A928603BB73BF73FD98C8EAAE900.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A0E1035A424A928603BB73BF73FD98C8EAAE900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/323830343a3964343a3a2f33322d3438203d3e20323632393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:99:50:56:dd:f1:a2:86:68:dd:e1:c6:c7:86:98:a4:24:e1:
         58:5e:78:29:b7:e4:4b:a9:5f:39:15:b5:b8:7c:46:b5:d7:64:
         d6:f0:7e:93:91:47:d8:68:ba:6c:7c:97:a5:dd:f5:d9:fd:b6:
         7b:18:f0:2c:c6:5d:79:72:b7:94:05:9b:5f:ee:b7:4f:8a:0f:
         74:96:e9:00:1b:05:7c:75:9b:f1:b9:1b:e9:01:b3:a0:95:58:
         f9:8a:7c:cd:f9:0e:c3:39:10:5e:3f:be:4f:14:f8:97:34:e6:
         b8:53:a4:8f:15:85:07:a5:3b:40:6e:2c:2d:84:45:fe:d7:64:
         16:17:19:05:99:de:34:e0:4c:cb:69:86:ac:ed:58:e2:16:eb:
         18:f4:18:d9:49:d9:0d:05:38:1f:a8:c8:e6:15:6f:81:c4:c9:
         35:99:c6:e3:21:fe:a9:c0:ac:78:28:44:a2:6f:8d:8d:0d:72:
         dc:80:b7:b3:f6:7f:ea:c8:e1:4c:1d:71:ff:8c:9a:be:a6:84:
         a9:1d:62:1c:69:a2:aa:b8:dc:e0:02:42:ac:ab:a2:eb:e7:03:
         c0:d9:77:5e:1a:9b:51:04:8f:7b:ba:82:25:62:53:7c:dc:10:
         da:5b:d2:06:b5:8d:c0:07:81:05:1b:8a:ce:5e:40:79:a2:64:
         54:3d:05:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----