Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a383030303a3a2f33362d3336203d3e20323639323534.roa
File:                     323830343a363163303a383030303a3a2f33362d3336203d3e20323639323534.roa (raw, json)
Hash identifier:          erOXEzUTQYikI4oVaoEmOfZP7mMD9Ur6e1ftHODgsLQ=
Subject key identifier:   EA:55:02:3E:80:AC:F9:E0:12:B7:D8:EC:F1:AE:E1:BF:DC:D1:61:5D
Certificate issuer:       /CN=BF0ACFD3E7E2E470DD0F662500BF9D019A38E9CD
Certificate serial:       4697493DFA344E9ABA182D6CE60C7989411E4BF5
Authority key identifier: BF:0A:CF:D3:E7:E2:E4:70:DD:0F:66:25:00:BF:9D:01:9A:38:E9:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF0ACFD3E7E2E470DD0F662500BF9D019A38E9CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a383030303a3a2f33362d3336203d3e20323639323534.roa
Signing time:             Mon 27 Sep 2021 15:45:58 +0000
ROA not before:           Mon 27 Sep 2021 15:40:58 +0000
ROA not after:            Mon 26 Sep 2022 15:45:58 +0000
asID:                     269254
IP address blocks:        2804:61c0:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:97:49:3d:fa:34:4e:9a:ba:18:2d:6c:e6:0c:79:89:41:1e:4b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF0ACFD3E7E2E470DD0F662500BF9D019A38E9CD
        Validity
            Not Before: Sep 27 15:40:58 2021 GMT
            Not After : Sep 26 15:45:58 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:f6:84:2e:ec:4f:fd:06:5a:ea:a3:7f:af:
                    84:a8:f0:2e:b3:64:9b:b5:e8:0a:a4:5d:1b:59:21:
                    a6:6f:27:a8:2c:b2:47:f5:65:2b:36:08:26:53:e8:
                    e0:7f:69:ce:27:b3:24:d0:0d:55:3f:8d:5b:85:df:
                    c7:ac:a0:46:12:38:08:b6:c1:fa:b0:cc:ee:c9:5b:
                    eb:c2:bd:8b:5a:12:ec:ac:86:1b:12:8f:b3:ba:44:
                    38:57:78:ba:f7:26:0c:3c:e1:72:c9:45:17:4f:ae:
                    18:2f:33:9c:4e:bd:41:b2:57:69:0f:84:d9:5d:bd:
                    95:b9:bd:4d:da:40:95:d9:4f:15:e1:01:d8:03:d9:
                    9d:f6:62:aa:ae:02:81:84:44:56:75:64:cb:10:a2:
                    89:54:01:ae:1f:83:10:8f:57:96:2f:49:39:ca:63:
                    5b:c3:12:d7:74:12:a6:64:8f:92:43:49:11:ed:e7:
                    f9:b1:f8:51:50:e6:05:36:19:b2:73:9e:9b:51:ea:
                    bc:0a:dd:84:c2:5d:ff:0b:08:02:a3:0c:27:52:5c:
                    85:b2:d5:a0:76:81:cf:88:13:6a:02:55:0e:a7:84:
                    00:a5:4b:0d:52:ce:ed:a2:09:37:72:fb:9f:80:1e:
                    f4:7c:ef:a3:79:bd:05:73:fc:61:ac:2b:8d:1b:81:
                    69:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:55:02:3E:80:AC:F9:E0:12:B7:D8:EC:F1:AE:E1:BF:DC:D1:61:5D
            X509v3 Authority Key Identifier:
                keyid:BF:0A:CF:D3:E7:E2:E4:70:DD:0F:66:25:00:BF:9D:01:9A:38:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/BF0ACFD3E7E2E470DD0F662500BF9D019A38E9CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF0ACFD3E7E2E470DD0F662500BF9D019A38E9CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a383030303a3a2f33362d3336203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61c0:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:ad:54:5e:18:84:65:63:9a:1f:b7:2c:1f:22:70:72:7f:ed:
         be:26:cc:18:0b:08:34:d9:44:2c:23:96:9c:bd:82:80:4d:4c:
         96:1b:cd:d3:dc:7d:dd:da:9b:18:1c:16:56:fd:cc:75:9e:23:
         a9:f2:dd:65:22:bf:74:5a:83:35:bd:f4:6b:d9:5d:ec:96:14:
         1c:2c:36:ae:75:9a:2b:1a:b8:be:fa:44:3f:4f:29:01:e3:75:
         79:22:35:c1:b4:b6:af:b6:8f:26:39:1b:d4:4d:7b:53:df:46:
         b4:7a:a2:b8:b6:ec:df:d4:09:a2:60:a7:7c:7f:4e:da:8f:18:
         a3:ce:e2:86:45:ce:1f:24:e7:98:3f:c5:88:ab:51:c3:aa:7c:
         7d:d5:5c:42:73:bd:55:11:73:31:6b:52:fd:f3:1e:29:54:bb:
         4f:6c:49:8b:4a:00:d5:45:32:26:ff:03:f5:c2:8d:8a:1f:3c:
         fc:b2:dd:c5:e5:eb:90:a2:eb:e9:e5:7c:ed:dc:2f:4b:e9:7c:
         ff:95:90:f9:c1:45:34:c9:fe:3f:78:54:3a:5a:81:86:a7:89:
         4c:8e:7b:a4:e3:16:bd:e4:33:88:bc:43:73:81:a1:3b:d1:d1:
         56:87:9d:27:9d:f9:00:e5:7c:52:0d:e7:fb:cd:ae:c6:51:5d:
         ce:69:72:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----