Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3a2f33332d3333203d3e20323639323334.roa
File:                     323830343a363137303a3a2f33332d3333203d3e20323639323334.roa (raw, json)
Hash identifier:          eHlrpVO3dS+nWducy2Qh1XDGdbioon70mqt76NoGaLo=
Subject key identifier:   57:27:9D:82:F5:6F:B5:09:F9:45:AC:F5:61:0E:BF:A6:2B:B7:97:A3
Certificate issuer:       /CN=5AD163E3334A2AF515A739140ED43D8500612D54
Certificate serial:       2DF15C888EA7E2F56730D34E920D1B318216A47B
Authority key identifier: 5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3a2f33332d3333203d3e20323639323334.roa
Signing time:             Fri 29 Jul 2022 20:47:58 +0000
ROA not before:           Fri 29 Jul 2022 20:42:58 +0000
ROA not after:            Fri 28 Jul 2023 20:47:58 +0000
asID:                     269234
IP address blocks:        2804:6170::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f1:5c:88:8e:a7:e2:f5:67:30:d3:4e:92:0d:1b:31:82:16:a4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AD163E3334A2AF515A739140ED43D8500612D54
        Validity
            Not Before: Jul 29 20:42:58 2022 GMT
            Not After : Jul 28 20:47:58 2023 GMT
        Subject: CN=57279D82F56FB509F945ACF5610EBFA62BB797A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:67:10:b7:6d:49:22:fb:0c:34:50:68:e1:fe:
                    45:1f:34:8d:c0:96:77:85:d9:fc:dd:05:66:97:a4:
                    f7:d8:61:14:0f:18:46:7e:32:35:44:d2:c1:8c:9e:
                    83:60:39:10:77:f1:e9:b3:80:b2:82:25:12:0e:10:
                    ac:14:a2:75:82:f3:01:20:e4:0f:84:8f:e8:1e:61:
                    f4:1c:93:0e:34:43:92:81:8e:ba:34:90:e8:4f:ab:
                    7d:cf:c4:c2:aa:7f:7c:ac:3a:db:31:07:3c:22:31:
                    ce:f0:55:bf:0e:fe:52:56:de:93:69:4e:cb:4e:88:
                    28:4a:2c:9f:9d:55:36:89:63:bf:d9:5e:ad:2a:70:
                    b4:99:a7:c9:e0:46:4f:3b:01:3d:2f:61:65:1d:04:
                    dd:a5:a6:27:29:d7:27:96:82:30:e6:79:42:1a:53:
                    14:a2:9c:d9:00:e0:1b:e9:01:15:88:8d:49:d8:69:
                    6b:75:d3:1c:06:2d:d3:6f:69:4b:76:0d:77:37:b4:
                    8c:31:d9:f8:13:b8:4f:30:f2:b5:6e:bc:7f:f0:15:
                    04:44:73:35:45:fd:04:93:76:8b:b4:fe:b3:3c:76:
                    34:ba:74:90:20:c1:75:90:c3:50:5a:06:37:e0:b4:
                    ff:f8:47:0b:fa:03:5f:48:70:d7:91:56:3c:17:4a:
                    88:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:27:9D:82:F5:6F:B5:09:F9:45:AC:F5:61:0E:BF:A6:2B:B7:97:A3
            X509v3 Authority Key Identifier:
                keyid:5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/5AD163E3334A2AF515A739140ED43D8500612D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3a2f33332d3333203d3e20323639323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6170::/33

    Signature Algorithm: sha256WithRSAEncryption
         05:97:1a:26:d6:6f:d7:fc:70:25:9d:a0:3b:ce:a0:d1:04:9c:
         64:d5:3e:3e:b1:07:44:ab:41:33:08:e1:44:7a:58:c5:55:87:
         cd:23:66:e1:4e:ff:14:82:25:91:c1:4a:93:97:20:98:fd:d7:
         e5:b7:7f:cf:6b:39:4f:18:51:8e:87:0e:ed:e6:9d:83:a1:59:
         34:f8:03:ff:4b:38:b2:38:77:d4:5f:7e:76:54:89:f4:7e:82:
         30:64:fe:d7:3a:1a:97:2f:0e:41:15:3f:fc:78:a1:4c:c7:fe:
         3b:00:87:b5:fd:78:d6:94:af:16:2c:e0:a1:21:44:07:87:bd:
         fd:54:6d:30:ea:72:5a:8d:36:4c:91:33:13:bb:e0:63:b4:ad:
         4d:83:74:d2:fd:3c:8c:77:cd:01:d8:83:a1:ed:85:da:83:97:
         c3:f3:5d:7b:49:75:0e:77:3c:1a:3f:10:d4:46:63:c6:e3:f0:
         69:4a:bc:1b:37:c1:75:c6:e1:39:5a:45:8e:b0:d9:7b:85:02:
         c9:42:48:c0:cd:d5:ca:7b:5d:bc:46:9e:ea:dd:ad:9b:95:1b:
         3c:4f:e0:50:06:e3:b7:a0:5e:11:01:57:e7:31:95:34:c1:a8:
         ee:b9:5d:7d:a1:0b:0f:6a:6e:3b:b6:29:0d:bb:55:b1:7e:1d:
         91:64:87:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----