Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33322d3438203d3e20323639323534.roa
File:                     323830343a363163303a3a2f33322d3438203d3e20323639323534.roa (raw, json)
Hash identifier:          tAEka9PxJhwp+v5B2P1vokUp2ssaOXDrUoDpKvfBEH4=
Subject key identifier:   80:2B:BF:63:38:EF:58:80:31:75:75:9D:52:51:91:6A:47:7B:C4:A1
Certificate issuer:       /CN=098DAAD28D701A1A8D8EC215199A0296A9C1EE1B
Certificate serial:       4556B9757A4241D8B4BD455534C4FEF049FFF2B5
Authority key identifier: 09:8D:AA:D2:8D:70:1A:1A:8D:8E:C2:15:19:9A:02:96:A9:C1:EE:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/098DAAD28D701A1A8D8EC215199A0296A9C1EE1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33322d3438203d3e20323639323534.roa
Signing time:             Tue 10 May 2022 12:52:18 +0000
ROA not before:           Tue 10 May 2022 12:47:18 +0000
ROA not after:            Tue 09 May 2023 12:52:18 +0000
asID:                     269254
IP address blocks:        2804:61c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:56:b9:75:7a:42:41:d8:b4:bd:45:55:34:c4:fe:f0:49:ff:f2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098DAAD28D701A1A8D8EC215199A0296A9C1EE1B
        Validity
            Not Before: May 10 12:47:18 2022 GMT
            Not After : May  9 12:52:18 2023 GMT
        Subject: CN=802BBF6338EF58803175759D5251916A477BC4A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:83:60:f7:37:d8:a8:01:2f:8b:45:35:31:
                    bd:db:06:e9:f2:9f:a4:45:41:51:1d:a6:d2:9d:06:
                    bd:8f:18:82:4b:37:09:1e:89:e2:6f:08:86:5b:5d:
                    c0:0c:cf:1f:a2:70:4f:9b:64:6e:70:13:31:28:f4:
                    ba:64:8d:44:79:e0:9a:b6:5c:43:14:49:26:86:6a:
                    59:77:d9:9f:7a:71:9a:ec:5d:85:75:ba:f1:31:f8:
                    c5:6e:38:7d:3d:9e:ec:37:c9:24:26:72:38:c9:c1:
                    57:e5:3d:44:f8:65:08:02:e6:48:32:77:6f:cb:0c:
                    fe:44:6f:e2:15:08:da:49:32:fa:00:c3:84:c7:c5:
                    1e:9b:72:a3:59:7c:da:55:86:47:1e:ea:20:0a:bc:
                    f8:21:b4:e8:31:f8:83:9a:90:f3:3c:a9:aa:39:64:
                    c7:bf:9b:9f:0b:65:14:d4:f7:b9:2d:94:02:b0:15:
                    f9:a1:0e:d8:25:1c:ef:da:e9:a9:81:2c:e5:25:e2:
                    b4:51:1f:0b:ac:63:d8:53:a7:36:35:61:f0:c2:09:
                    88:23:99:b6:12:e1:e0:46:b3:b7:06:62:11:2b:de:
                    34:c7:ac:17:b8:b6:38:39:bd:02:3d:f7:74:27:3f:
                    25:ae:e9:b6:00:e9:32:8a:47:4a:04:25:c6:36:a1:
                    ab:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2B:BF:63:38:EF:58:80:31:75:75:9D:52:51:91:6A:47:7B:C4:A1
            X509v3 Authority Key Identifier:
                keyid:09:8D:AA:D2:8D:70:1A:1A:8D:8E:C2:15:19:9A:02:96:A9:C1:EE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/098DAAD28D701A1A8D8EC215199A0296A9C1EE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/098DAAD28D701A1A8D8EC215199A0296A9C1EE1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33322d3438203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:c9:13:34:60:08:4a:3f:5c:66:14:df:6c:5a:b1:f0:a4:37:
         26:58:c2:7c:8b:14:55:a7:4a:8d:3d:95:33:13:88:1c:ae:b4:
         d6:a1:4c:f1:01:af:58:28:f8:40:29:cf:6f:dc:fa:82:00:b2:
         bd:39:5b:c6:21:ef:8e:e0:12:b7:7a:3e:bc:c8:02:8f:84:2a:
         2e:8e:fb:41:a5:ef:a9:49:54:13:5f:09:43:69:e8:b7:2a:ef:
         cc:84:78:6e:03:8f:1e:14:4a:29:35:12:c1:b7:7a:e7:32:2b:
         63:59:cc:4d:5b:32:8c:c8:64:3c:83:3c:c5:63:20:3e:98:d4:
         51:6a:d5:1e:46:52:b6:38:b4:a3:7b:41:3d:10:a1:49:2b:7e:
         9d:f5:5d:0e:98:42:ab:30:ff:2e:b5:f0:b4:af:25:1c:b4:ef:
         60:55:2b:e3:37:59:60:5a:0b:fe:2f:c7:44:35:e2:87:79:c2:
         7b:b6:d4:ca:c2:f6:ad:d1:16:5f:4f:5a:1c:f4:4c:cc:f0:ca:
         e0:c2:0f:6e:b5:c5:ce:ae:60:6e:4d:33:c7:e3:6e:c8:a4:a6:
         d5:ad:6b:62:a9:99:32:e9:ce:17:72:b6:f9:06:77:07:de:81:
         fb:f9:db:81:fd:e6:1e:2d:38:d3:c3:45:2d:83:75:16:bf:5a:
         9a:6c:72:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----