Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/323830343a3733383a3a2f33322d3438203d3e203533313533.roa
File:                     323830343a3733383a3a2f33322d3438203d3e203533313533.roa (raw, json)
Hash identifier:          hT1nIDaqTESp/8Hi0xetY9psSFs9SJgYenXpWiaZrh4=
Subject key identifier:   E1:5B:34:9A:D8:FF:AB:08:5D:F5:C1:AB:A1:15:9E:6D:BB:58:91:F2
Certificate issuer:       /CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Certificate serial:       60D53026F5F87CB052E025067B94EF2D9DF80747
Authority key identifier: F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/323830343a3733383a3a2f33322d3438203d3e203533313533.roa
Signing time:             Thu 10 Nov 2022 14:04:16 +0000
ROA not before:           Thu 10 Nov 2022 13:59:16 +0000
ROA not after:            Thu 09 Nov 2023 14:04:16 +0000
asID:                     53153
IP address blocks:        2804:738::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d5:30:26:f5:f8:7c:b0:52:e0:25:06:7b:94:ef:2d:9d:f8:07:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
        Validity
            Not Before: Nov 10 13:59:16 2022 GMT
            Not After : Nov  9 14:04:16 2023 GMT
        Subject: CN=E15B349AD8FFAB085DF5C1ABA1159E6DBB5891F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b5:b4:12:b6:cc:fe:d1:3d:1e:26:8e:33:b9:
                    73:7e:a8:0f:2d:81:ce:e0:99:f0:ff:7e:ff:8e:a3:
                    92:4d:3d:50:5b:56:5d:30:58:66:1b:bc:8d:8c:44:
                    1c:aa:c7:8f:b9:37:3e:59:e8:47:29:6e:b4:da:e1:
                    c0:fd:db:71:49:47:07:ca:8d:95:93:88:aa:16:91:
                    bf:36:61:f7:2e:10:dc:08:6f:3c:b7:d6:02:bd:ce:
                    1d:a7:0b:4c:ae:be:c0:2b:3f:b9:9b:e1:6d:25:c7:
                    3e:25:f3:ac:9b:3e:b6:6d:97:e7:a5:a9:c5:6a:d8:
                    61:4a:16:3d:d8:28:0e:bc:4b:18:f9:e2:f8:83:4f:
                    c2:28:5f:be:9c:21:25:b0:a9:46:21:74:94:b6:28:
                    b2:2f:5b:d5:da:d3:1c:15:c2:aa:ea:91:46:0c:6a:
                    c8:a5:43:a9:4c:12:1e:89:27:73:92:5e:1e:c5:a2:
                    c7:06:16:ed:79:fa:57:b4:64:60:96:b6:50:f3:ae:
                    61:48:3f:4e:cb:fa:6a:01:86:c6:e2:48:c7:ec:b5:
                    01:d1:ac:9a:92:5c:03:86:f1:e9:9c:33:f7:47:a0:
                    64:ad:41:74:9e:9d:01:f9:e9:0f:9c:b7:66:e0:0c:
                    20:17:7c:b0:25:62:29:97:cf:d9:6d:e4:3c:f7:83:
                    89:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5B:34:9A:D8:FF:AB:08:5D:F5:C1:AB:A1:15:9E:6D:BB:58:91:F2
            X509v3 Authority Key Identifier:
                keyid:F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/323830343a3733383a3a2f33322d3438203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:738::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:65:b7:81:6b:d4:aa:55:ee:0e:fb:1d:c6:3e:5c:68:aa:d0:
         e5:87:aa:36:1d:8e:b7:66:10:a5:a9:e6:14:2a:77:c2:3f:32:
         9b:fc:24:79:0e:70:1f:91:b9:8e:33:ad:8f:d4:4a:0c:12:c5:
         1f:ca:89:12:4f:76:22:cd:15:65:4b:f9:c3:da:45:cd:c9:08:
         dc:c8:16:ff:0e:4d:b8:ff:67:29:08:63:4b:f6:f8:e1:0b:9e:
         69:97:3a:a5:2c:ed:23:c2:a4:55:7d:91:c0:70:e5:73:d6:68:
         1a:3c:df:a6:6b:76:3b:2d:f6:43:c3:bd:3e:73:83:cc:e4:b0:
         51:9f:c2:17:45:67:2c:2e:0f:19:06:c7:54:ec:79:e2:82:b2:
         0b:12:8f:00:1f:08:ff:5a:4f:75:6b:fb:7b:ac:a2:7c:86:ac:
         43:ea:62:38:5c:05:68:ad:72:94:e8:e2:b1:86:ee:b8:7f:6b:
         5a:10:89:32:c0:ee:7b:94:ad:7c:7a:56:fb:ac:28:85:ca:35:
         09:27:1b:93:0a:af:a0:de:32:45:9f:e7:3c:d2:96:89:be:a4:
         35:99:30:a8:29:b9:d5:74:25:29:21:7d:1d:3f:fb:79:06:b8:
         8b:31:6d:09:27:03:92:06:f1:02:c8:1f:d5:ec:f1:18:26:d2:
         63:be:bf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----