Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0/323830343a343138383a3a2f33322d3333203d3e20323637343339.roa
File:                     323830343a343138383a3a2f33322d3333203d3e20323637343339.roa (raw, json)
Hash identifier:          vVfqwxrZ1pa3CcZKsJxcRGwzvuQfg+HXWvG6drADyhg=
Subject key identifier:   DD:80:04:B1:7D:56:2E:61:C8:7B:BD:3B:69:C8:97:61:F7:75:C9:E3
Certificate issuer:       /CN=43F654E25706FCC2EFE6604E797E21855D4A890A
Certificate serial:       5DC6CA240F81FBAE0F52E40ABE70EF8BEF43240E
Authority key identifier: 43:F6:54:E2:57:06:FC:C2:EF:E6:60:4E:79:7E:21:85:5D:4A:89:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F654E25706FCC2EFE6604E797E21855D4A890A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0/323830343a343138383a3a2f33322d3333203d3e20323637343339.roa
Signing time:             Tue 02 Aug 2022 13:58:40 +0000
ROA not before:           Tue 02 Aug 2022 13:53:40 +0000
ROA not after:            Tue 01 Aug 2023 13:58:40 +0000
asID:                     267439
IP address blocks:        2804:4188::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c6:ca:24:0f:81:fb:ae:0f:52:e4:0a:be:70:ef:8b:ef:43:24:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F654E25706FCC2EFE6604E797E21855D4A890A
        Validity
            Not Before: Aug  2 13:53:40 2022 GMT
            Not After : Aug  1 13:58:40 2023 GMT
        Subject: CN=DD8004B17D562E61C87BBD3B69C89761F775C9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:38:5c:66:46:8e:68:e6:07:49:80:f7:b3:
                    b4:b6:03:86:c9:cf:bc:f6:74:f2:0b:01:0b:10:47:
                    1c:f6:45:78:47:cb:9a:62:08:6f:07:51:d0:7f:37:
                    d1:00:9a:65:ea:15:8a:26:a4:19:17:94:f9:d7:35:
                    77:08:b3:eb:f5:41:03:ad:8c:c2:2c:be:1e:c4:a9:
                    2f:b8:0d:51:1e:3b:e6:60:24:9f:2a:4f:c6:cf:e9:
                    b3:dd:de:49:5f:23:0d:50:52:09:73:92:23:c5:e5:
                    d6:ea:51:d4:e8:d2:4a:b2:b7:11:18:01:93:82:bd:
                    3d:b6:2c:8d:d2:6b:e4:55:b6:90:62:33:05:1b:54:
                    58:95:9c:c5:ac:5f:74:c4:71:0a:ae:97:7c:0b:a5:
                    06:23:b2:ce:d4:a5:f9:9c:2e:f5:80:a8:e9:e2:5c:
                    54:48:6f:5e:a0:8c:93:1f:0f:d3:76:ea:3c:ff:71:
                    07:33:04:83:55:b9:17:ce:92:03:bd:7d:8d:99:0c:
                    37:c3:c0:96:07:66:ec:b9:a0:3c:bc:e2:c0:48:ba:
                    33:26:c8:56:65:6d:ad:c2:2e:f5:55:c8:cd:fe:0c:
                    f4:c4:4b:c3:60:7d:01:6f:d2:99:1a:cf:cc:41:02:
                    72:8a:fc:f3:e4:ae:05:3e:5f:67:f6:01:88:56:80:
                    8c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:80:04:B1:7D:56:2E:61:C8:7B:BD:3B:69:C8:97:61:F7:75:C9:E3
            X509v3 Authority Key Identifier:
                keyid:43:F6:54:E2:57:06:FC:C2:EF:E6:60:4E:79:7E:21:85:5D:4A:89:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0/43F654E25706FCC2EFE6604E797E21855D4A890A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F654E25706FCC2EFE6604E797E21855D4A890A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0/323830343a343138383a3a2f33322d3333203d3e20323637343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4188::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:ba:b0:3a:87:ba:af:9e:cf:1e:32:09:28:08:7f:fa:9a:29:
         7f:f6:66:7b:e1:c2:81:bb:45:0f:f2:1a:0d:20:02:b7:2c:9c:
         1b:a7:ec:23:d1:c4:a0:ec:28:56:cc:70:ed:5e:09:8e:6f:a9:
         5f:68:09:ec:1e:af:b6:7a:94:0d:08:83:d3:e6:f1:14:b4:ab:
         e0:84:14:11:bb:4a:01:28:3a:37:3d:7e:6a:51:8e:3a:13:0d:
         b1:ea:11:39:5e:45:dc:28:62:c9:03:72:b7:51:8c:62:1c:75:
         8d:b4:6c:e6:d8:8b:05:be:18:32:1b:94:b8:18:e2:b1:16:de:
         32:7e:c3:58:57:65:e7:96:77:74:66:ee:cb:b8:b2:51:2a:c7:
         88:52:02:78:91:69:51:79:7c:8d:db:33:dc:6a:eb:94:e7:a8:
         c9:cd:d6:7b:9e:62:09:22:f2:46:60:b0:e6:89:74:9f:fa:59:
         cb:c8:13:b7:d8:f1:2c:43:0e:62:80:7d:bd:f8:5e:01:3a:f6:
         f7:8d:d0:85:b8:84:7a:19:7e:89:c3:ca:b7:26:b8:3e:f4:5b:
         b4:e3:ca:c7:1a:ff:bf:d0:59:10:8d:af:b1:18:60:2a:0a:73:
         ac:48:6d:e6:14:3f:bc:37:91:48:c0:f0:c6:fc:7a:df:5a:c4:
         5d:21:d4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----