Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/323830343a366533383a3a2f33322d3332203d3e20323730353833.roa
File:                     323830343a366533383a3a2f33322d3332203d3e20323730353833.roa (raw, json)
Hash identifier:          QRygfzHyWKzd+IVu9vG18HC0UAmC+uNdnVi+23960/Y=
Subject key identifier:   62:BA:AD:0A:B2:D9:AE:4C:E1:41:E7:9F:22:6B:25:82:4D:D1:5D:D1
Certificate issuer:       /CN=B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C
Certificate serial:       2DB1F6102F8636CFBFA2D246987B4D478074469D
Authority key identifier: B0:27:01:FD:E7:DA:52:FF:0E:32:05:FC:14:4C:9F:C7:A4:4F:6C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/323830343a366533383a3a2f33322d3332203d3e20323730353833.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 11:55:00 +0000
ROA not after:            Wed 11 Oct 2023 12:00:00 +0000
asID:                     270583
IP address blocks:        2804:6e38::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b1:f6:10:2f:86:36:cf:bf:a2:d2:46:98:7b:4d:47:80:74:46:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C
        Validity
            Not Before: Oct 12 11:55:00 2022 GMT
            Not After : Oct 11 12:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c9:e3:2b:9f:1a:8e:7b:3b:41:95:49:d3:b8:
                    82:55:81:fd:e0:48:51:96:08:2a:b5:ef:b4:00:2c:
                    33:89:ba:eb:13:86:ab:54:3d:bf:33:07:66:fc:51:
                    28:93:04:fa:09:90:e5:8c:ba:04:bb:3a:44:ae:e6:
                    32:6f:15:01:90:1b:d9:d4:9a:cf:bb:53:96:e8:9c:
                    ca:44:87:e9:9f:de:64:93:85:d1:40:09:ba:2e:58:
                    8d:51:26:89:90:4d:76:73:a3:8b:34:3c:b6:67:9c:
                    97:8d:98:b4:e5:eb:2e:26:9a:cc:70:aa:cb:06:24:
                    fe:4a:f0:c7:be:4c:23:27:8c:cf:02:6e:7c:da:2e:
                    f4:be:6d:c3:45:d0:d8:7e:31:c7:76:9a:d4:5d:2a:
                    0b:01:5f:47:f0:08:86:50:7e:a8:b8:8a:62:3b:25:
                    3e:74:78:2e:ff:5a:24:e4:e0:37:af:34:34:94:d5:
                    76:69:7b:c0:cc:b9:0c:9a:b6:14:60:3f:6a:04:67:
                    e4:9e:dc:4e:e3:3f:37:d7:2c:31:c7:03:ba:b7:8c:
                    58:fa:fd:a5:b5:5e:5b:be:c4:b3:62:16:b7:d7:47:
                    5f:c3:c7:56:2d:dc:0d:a3:df:7c:76:c3:b7:95:c0:
                    1e:6d:e3:6f:d7:b5:44:a1:50:10:d7:9d:e5:2d:3a:
                    eb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BA:AD:0A:B2:D9:AE:4C:E1:41:E7:9F:22:6B:25:82:4D:D1:5D:D1
            X509v3 Authority Key Identifier:
                keyid:B0:27:01:FD:E7:DA:52:FF:0E:32:05:FC:14:4C:9F:C7:A4:4F:6C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/323830343a366533383a3a2f33322d3332203d3e20323730353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e38::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:cd:5d:77:e5:a1:0a:fd:78:6d:82:ca:4b:19:a5:1a:6f:b6:
         db:03:1d:a2:55:c4:8e:f9:50:d7:fa:cc:db:4b:ba:42:e1:56:
         1b:43:ce:81:2b:53:ac:1d:10:8b:56:91:80:26:fd:d3:0f:0c:
         da:7b:76:a4:f2:74:ae:44:1b:24:2a:f4:20:de:1d:f5:64:c6:
         4c:35:af:73:5f:fb:48:b1:fa:44:05:68:8b:d5:a7:68:f5:00:
         ce:b3:d2:11:d3:89:f3:a9:8a:d7:da:3f:2a:29:bd:9e:29:40:
         ba:94:50:5c:2d:a0:ad:08:ab:a2:fb:ad:f0:6f:87:39:93:e6:
         8f:4c:07:43:64:0c:25:28:95:33:4b:ab:38:59:5c:27:eb:7e:
         89:82:2f:ac:c5:64:1a:3b:a6:5e:de:c3:b3:8e:2b:26:33:39:
         44:8f:ec:c5:00:a8:77:9f:0e:b1:88:e7:3e:ab:64:b6:9d:c7:
         02:e2:cb:a6:89:ce:ca:10:61:a1:f0:69:ad:9d:da:c9:1f:40:
         48:ca:63:f4:0f:8a:bc:ec:0b:ac:71:65:4c:79:61:22:62:17:
         8f:e4:ea:7a:c2:ef:bc:ab:c8:18:9b:82:9f:8c:c5:f4:33:32:
         d6:a8:d3:c1:a2:cf:fc:07:6c:2d:0b:7b:f8:e2:4d:8b:11:5c:
         2e:f2:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----