Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/323830343a356338343a3a2f33322d3332203d3e20323638393133.roa
File:                     323830343a356338343a3a2f33322d3332203d3e20323638393133.roa (raw, json)
Hash identifier:          t1MdnBQcDPRi9SLwQXkk/+AutwAHFB95WutKbJRRi2I=
Subject key identifier:   14:CD:09:7F:CC:86:89:27:9B:DD:92:0C:13:2B:CF:78:22:51:64:A7
Certificate issuer:       /CN=DDC8BAD7F967E4A52C00D4ED056D1BA3AF71935C
Certificate serial:       1BD70E4DD66C72CD35CDC4A997ED7CDF328595EA
Authority key identifier: DD:C8:BA:D7:F9:67:E4:A5:2C:00:D4:ED:05:6D:1B:A3:AF:71:93:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDC8BAD7F967E4A52C00D4ED056D1BA3AF71935C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/323830343a356338343a3a2f33322d3332203d3e20323638393133.roa
Signing time:             Tue 28 Jun 2022 13:59:59 +0000
ROA not before:           Tue 28 Jun 2022 13:54:59 +0000
ROA not after:            Tue 27 Jun 2023 13:59:59 +0000
asID:                     268913
IP address blocks:        2804:5c84::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d7:0e:4d:d6:6c:72:cd:35:cd:c4:a9:97:ed:7c:df:32:85:95:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDC8BAD7F967E4A52C00D4ED056D1BA3AF71935C
        Validity
            Not Before: Jun 28 13:54:59 2022 GMT
            Not After : Jun 27 13:59:59 2023 GMT
        Subject: CN=14CD097FCC8689279BDD920C132BCF78225164A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:b4:fa:f8:63:85:ca:13:a8:9e:01:34:3a:
                    64:3b:4b:35:86:84:b1:91:7b:b8:14:e0:42:cc:3b:
                    71:cb:51:e4:c7:40:27:40:80:05:c6:a6:70:96:4b:
                    86:7c:b3:36:74:ab:aa:2f:23:44:e9:84:06:b2:25:
                    b7:65:25:c5:b7:fc:dd:a1:27:de:50:8e:b8:42:a0:
                    47:51:74:ae:b7:dc:ce:d6:74:02:ea:d1:7b:93:de:
                    73:bf:d1:6a:b0:1b:cb:31:7c:cc:0a:a1:b6:49:c6:
                    cf:2c:7b:c2:4c:a0:ee:55:3a:37:46:eb:08:d7:72:
                    19:ba:70:a3:9b:32:72:8a:71:11:3a:be:ed:ad:cf:
                    00:9a:f7:39:12:16:12:a3:14:64:44:b5:21:64:39:
                    1d:45:d1:28:a0:94:b4:a0:8a:d6:c6:f8:7d:24:5c:
                    ec:f8:6c:66:6f:a7:05:b6:fb:76:ca:5c:f2:41:d0:
                    c9:39:66:3f:31:04:54:b7:94:0c:0d:85:7d:8b:b8:
                    48:8d:6a:25:45:82:8f:39:11:3b:7c:e8:c1:4a:be:
                    4b:3b:51:2f:8d:b4:9b:f6:1c:1f:e4:bb:ce:a4:7c:
                    a4:92:60:b4:59:cf:b9:22:4d:17:1b:7c:8c:ee:dd:
                    28:18:96:76:b6:5f:d1:b7:8b:59:61:77:5a:f2:fa:
                    92:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CD:09:7F:CC:86:89:27:9B:DD:92:0C:13:2B:CF:78:22:51:64:A7
            X509v3 Authority Key Identifier:
                keyid:DD:C8:BA:D7:F9:67:E4:A5:2C:00:D4:ED:05:6D:1B:A3:AF:71:93:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/DDC8BAD7F967E4A52C00D4ED056D1BA3AF71935C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDC8BAD7F967E4A52C00D4ED056D1BA3AF71935C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/323830343a356338343a3a2f33322d3332203d3e20323638393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c84::/32

    Signature Algorithm: sha256WithRSAEncryption
         d4:9d:d0:78:0e:ae:d6:a5:43:93:41:43:8f:f3:6e:84:c6:4f:
         6b:b1:d0:5c:e3:ec:78:2b:d2:d5:c4:a3:29:56:47:9c:5d:cf:
         58:2a:4c:0a:94:90:7b:5b:8f:42:7a:83:1f:27:39:13:16:c7:
         85:28:8f:1a:3f:cb:c0:72:9f:00:a2:65:ef:f7:84:78:86:39:
         73:93:83:07:86:6a:c1:14:a6:8b:39:0f:a7:32:3b:07:44:eb:
         8d:ac:20:75:dc:2b:5b:e8:8f:91:94:0c:c6:45:db:ff:8c:be:
         a0:c4:e5:8c:67:eb:30:06:40:de:21:2d:37:9b:df:bf:51:12:
         ad:de:e1:95:65:d2:4c:d8:07:38:e6:68:28:6c:d9:6a:56:91:
         14:7d:76:19:4c:38:8c:20:91:f6:3d:35:7b:0e:13:c4:83:09:
         1e:b2:b4:f4:1f:ed:a9:68:ca:24:46:f3:fe:22:45:6d:49:55:
         f0:30:de:b0:24:97:86:dc:54:2e:49:66:a9:35:6f:54:b2:89:
         e5:ce:1d:fe:59:f2:25:d2:31:2c:f7:d4:28:cd:3b:9e:75:66:
         1b:4b:50:ea:c1:53:9f:31:3e:3a:21:7b:fb:ea:84:59:af:d8:
         9d:4e:d9:64:47:a1:b0:4e:79:32:e6:c0:5c:7e:8a:f9:6a:f2:
         ef:22:4d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----