Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/323830343a3536383a3a2f33322d3332203d3e20323632353134.roa
File:                     323830343a3536383a3a2f33322d3332203d3e20323632353134.roa (raw, json)
Hash identifier:          NXfIFGi0YUVv2Hl3KGTGqfHYAW8BAHejHGNyZW1UJOo=
Subject key identifier:   35:68:FB:5F:B6:61:07:C4:13:28:CA:F2:16:B5:A1:1B:A4:70:8D:1A
Certificate issuer:       /CN=E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D
Certificate serial:       27C26D603DA60AB57FF4A237F0240FE9DA9A2A47
Authority key identifier: E6:03:E9:E9:CB:A4:E1:8A:F6:D5:A9:48:9E:1A:92:2E:C2:BC:A3:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/323830343a3536383a3a2f33322d3332203d3e20323632353134.roa
Signing time:             Mon 17 Oct 2022 20:40:18 +0000
ROA not before:           Mon 17 Oct 2022 20:35:18 +0000
ROA not after:            Mon 16 Oct 2023 20:40:18 +0000
asID:                     262514
IP address blocks:        2804:568::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c2:6d:60:3d:a6:0a:b5:7f:f4:a2:37:f0:24:0f:e9:da:9a:2a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D
        Validity
            Not Before: Oct 17 20:35:18 2022 GMT
            Not After : Oct 16 20:40:18 2023 GMT
        Subject: CN=3568FB5FB66107C41328CAF216B5A11BA4708D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:26:d6:ac:cb:98:0b:94:e0:7e:57:c7:39:
                    22:53:6f:df:fb:b9:4f:b4:ae:e6:c8:89:c9:50:64:
                    94:fd:be:4d:61:9b:ae:a8:81:2d:fa:71:7e:1a:da:
                    a4:94:41:7d:75:82:50:37:7c:86:9e:93:f7:a2:7f:
                    dd:bc:dc:96:58:82:b4:62:4d:69:47:c4:64:1e:df:
                    c7:90:3b:74:1e:5c:87:21:bd:ec:18:3f:74:59:99:
                    7b:75:01:d3:09:f3:56:e5:ee:3c:5d:e8:73:10:00:
                    50:75:b9:32:18:5f:fc:b8:7a:da:0f:2d:1c:78:66:
                    72:12:96:ce:ec:49:e7:1f:2b:3c:fb:00:78:68:a8:
                    1d:f3:69:71:1f:10:1a:e1:7c:e5:ca:45:97:f6:cc:
                    71:41:f4:ff:55:79:7e:46:be:fe:b5:69:d3:2f:21:
                    96:92:8c:f2:30:34:9e:d1:92:48:b2:70:a3:0a:9a:
                    e3:8c:72:18:23:61:a0:1e:c8:db:e7:87:9e:c7:ef:
                    b5:1e:dd:b1:fb:41:cc:e7:14:94:75:0b:db:0e:ac:
                    0a:08:91:c3:a5:52:67:0a:d3:e6:a9:ac:8f:fc:96:
                    7b:3c:ef:7b:50:e9:a4:52:f3:81:2a:31:13:6b:f6:
                    a5:2f:46:9f:72:7e:68:1c:ae:c9:d8:49:93:b2:2c:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:68:FB:5F:B6:61:07:C4:13:28:CA:F2:16:B5:A1:1B:A4:70:8D:1A
            X509v3 Authority Key Identifier:
                keyid:E6:03:E9:E9:CB:A4:E1:8A:F6:D5:A9:48:9E:1A:92:2E:C2:BC:A3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/323830343a3536383a3a2f33322d3332203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:568::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:d9:f5:d2:9c:84:91:28:2a:f3:20:1d:79:e0:13:03:2e:c8:
         f6:f9:74:aa:ca:d4:cb:5f:e2:4d:e9:d4:ff:b1:c9:3e:d6:17:
         f2:b3:af:4e:ea:85:f2:eb:c2:94:67:9a:da:99:92:e3:f8:bf:
         f5:ab:fb:0c:29:86:e5:02:0d:e1:f5:0e:4f:77:a8:ad:54:13:
         a8:e4:25:22:ea:f9:44:ce:99:d7:d4:c2:ff:ee:38:a8:3c:18:
         65:43:b2:bc:99:30:52:e3:0e:ef:b3:78:94:aa:50:13:31:20:
         fc:fb:95:5e:13:f0:dc:50:e6:90:9b:b6:9b:0c:bb:9c:33:e9:
         34:fc:5e:81:f4:27:5c:85:38:52:ca:3d:2d:68:3b:17:c0:84:
         71:e7:09:a5:6d:38:78:94:36:ea:11:0e:b8:51:a6:86:be:3e:
         b9:ad:cc:7a:72:c0:7d:d6:4e:40:5d:ea:65:50:a7:41:cd:dd:
         37:c2:b0:3f:e7:cf:ab:c4:07:45:02:8a:48:e6:19:d2:c6:7c:
         57:91:51:8f:7c:61:b1:1b:aa:30:2a:41:e8:7f:60:ce:30:77:
         51:5d:e5:3e:4b:ab:81:0f:2c:49:0c:f1:72:23:5f:6c:a5:ff:
         36:33:12:c5:d1:4b:94:b4:0f:6d:18:16:50:58:6a:30:6c:ea:
         79:a9:39:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----