Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/323830343a313331383a3a2f33322d3332203d3e20323633353135.roa
File:                     323830343a313331383a3a2f33322d3332203d3e20323633353135.roa (raw, json)
Hash identifier:          JRY34K95lFeIqsahpzogUZZx/LY6rfszwumv/2FZuRI=
Subject key identifier:   A1:FA:21:21:6F:CE:83:C6:C2:F0:DC:A4:1B:99:49:F8:C4:45:36:00
Certificate issuer:       /CN=0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE
Certificate serial:       3D8F7EA6D38A8BD031D5EDBC36617E888504131B
Authority key identifier: 0E:01:DD:DD:7B:8C:22:01:D6:20:7A:10:16:12:96:A8:AD:B7:A2:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/323830343a313331383a3a2f33322d3332203d3e20323633353135.roa
Signing time:             Thu 18 Aug 2022 01:14:02 +0000
ROA not before:           Thu 18 Aug 2022 01:09:02 +0000
ROA not after:            Thu 17 Aug 2023 01:14:02 +0000
asID:                     263515
IP address blocks:        2804:1318::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8f:7e:a6:d3:8a:8b:d0:31:d5:ed:bc:36:61:7e:88:85:04:13:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE
        Validity
            Not Before: Aug 18 01:09:02 2022 GMT
            Not After : Aug 17 01:14:02 2023 GMT
        Subject: CN=A1FA21216FCE83C6C2F0DCA41B9949F8C4453600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:63:71:7b:ae:f1:3a:de:7a:65:69:5c:18:
                    fc:21:2b:ff:8e:cb:c1:61:d5:3d:62:68:6b:12:db:
                    3e:1d:c7:21:33:37:b2:41:9a:92:88:d7:12:6d:cd:
                    1f:6b:f5:8b:87:b8:c1:e6:4b:43:50:1c:36:d2:5e:
                    d8:fb:b6:fc:f9:a1:2f:be:de:7f:b2:68:7d:33:08:
                    ca:a8:f1:18:79:f0:ad:7c:0b:46:c2:70:a6:af:c1:
                    45:04:58:93:da:6a:6d:56:92:b3:fb:18:d7:2c:58:
                    74:4f:ef:ce:6d:5d:a8:e3:17:58:be:c2:29:75:95:
                    65:a5:7c:5f:68:a5:03:37:99:31:f0:1a:47:46:8a:
                    1e:69:97:71:d0:91:27:83:06:d5:15:d0:57:97:84:
                    f0:f8:10:59:80:7b:41:0a:9b:4e:00:5c:f3:fc:e8:
                    42:76:6b:ac:50:8f:5e:1e:a6:78:3c:a9:10:35:5e:
                    5e:11:03:df:0a:4e:09:2a:63:fe:6e:5c:48:ec:6a:
                    f1:8e:a9:92:f4:d6:be:89:6f:af:e5:f6:ae:d7:e8:
                    78:83:83:78:f6:8c:ef:14:97:e9:cf:66:e4:82:79:
                    11:66:e3:08:e7:4d:0b:56:f6:ad:13:08:a1:53:45:
                    90:14:da:5b:b3:9f:8c:63:1f:fb:78:91:f8:f8:9a:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FA:21:21:6F:CE:83:C6:C2:F0:DC:A4:1B:99:49:F8:C4:45:36:00
            X509v3 Authority Key Identifier:
                keyid:0E:01:DD:DD:7B:8C:22:01:D6:20:7A:10:16:12:96:A8:AD:B7:A2:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/323830343a313331383a3a2f33322d3332203d3e20323633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1318::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:4a:b3:79:04:5d:d0:bd:54:14:e7:77:45:2e:4d:6e:11:06:
         ca:40:a0:c0:27:29:17:4e:88:6c:7f:11:42:4b:43:5e:72:a7:
         b5:e8:75:3c:63:02:9b:5f:0e:09:0c:7c:5f:54:30:e3:0e:02:
         83:53:05:a7:7e:e0:09:66:53:16:5a:7b:cd:29:ed:dc:a9:7a:
         94:c5:d0:9f:e2:67:85:5f:dd:09:65:3d:49:68:59:02:53:ff:
         77:16:4d:1b:2e:57:af:be:e0:fd:92:39:a6:40:52:d0:19:75:
         9c:a6:37:0c:7f:6d:c7:72:f3:1e:08:15:a0:48:85:76:bc:da:
         f1:15:cc:f2:cd:45:92:a4:71:e9:8b:1e:15:14:7c:6c:12:8b:
         7b:2b:fb:80:be:13:46:fd:fc:27:51:cd:78:93:f5:0f:f7:8f:
         52:c1:23:68:50:46:c5:dd:2a:02:ef:6d:e9:2b:68:33:45:73:
         9a:90:38:4b:1e:78:2e:98:e7:c7:72:08:91:30:d6:4d:8a:12:
         34:3f:c6:8b:1a:ee:68:79:ae:ea:04:28:e6:52:c8:01:a8:20:
         e7:dc:00:a9:dc:b5:92:eb:2e:47:4a:79:1d:9b:75:fa:a5:5c:
         8d:20:62:45:ae:d1:fb:a1:5b:0c:1a:f8:9c:d0:f8:1d:91:9b:
         80:10:7f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----