Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/323830343a313331383a3a2f33322d3438203d3e20323633353135.roa
File:                     323830343a313331383a3a2f33322d3438203d3e20323633353135.roa (raw, json)
Hash identifier:          DMW6CsDrzJESpbMYsg5SUYzAHMgs93I6R557kTPssdc=
Subject key identifier:   00:ED:7C:67:17:2E:F9:9A:D1:F5:CD:06:1B:58:CD:20:E1:E9:5A:7C
Certificate issuer:       /CN=0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE
Certificate serial:       6F98AD1182108956F34DA9C92358414942FECD03
Authority key identifier: 0E:01:DD:DD:7B:8C:22:01:D6:20:7A:10:16:12:96:A8:AD:B7:A2:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/323830343a313331383a3a2f33322d3438203d3e20323633353135.roa
Signing time:             Mon 12 Sep 2022 23:09:42 +0000
ROA not before:           Mon 12 Sep 2022 23:04:42 +0000
ROA not after:            Mon 11 Sep 2023 23:09:42 +0000
asID:                     263515
IP address blocks:        2804:1318::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:98:ad:11:82:10:89:56:f3:4d:a9:c9:23:58:41:49:42:fe:cd:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE
        Validity
            Not Before: Sep 12 23:04:42 2022 GMT
            Not After : Sep 11 23:09:42 2023 GMT
        Subject: CN=00ED7C67172EF99AD1F5CD061B58CD20E1E95A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cd:6b:73:5b:ba:7d:36:a3:57:55:74:ff:7a:
                    eb:85:bc:65:a4:ef:5c:33:1f:cc:db:e8:74:bf:38:
                    04:43:6a:a5:ac:bd:84:63:24:a5:b5:07:7b:d1:e5:
                    1e:b5:97:3e:42:97:33:64:c2:19:f0:31:e0:07:28:
                    85:1c:10:9d:77:74:a6:47:33:af:09:2a:db:ca:5d:
                    e6:fb:8f:87:19:4d:94:55:22:fa:4f:fd:0f:b0:78:
                    ce:6a:c7:6f:c6:be:67:dd:5c:ea:c0:ea:24:b4:e2:
                    29:82:2c:fb:b1:a7:1c:79:2b:1f:dc:41:4f:09:6f:
                    fd:99:16:ae:fe:1a:94:fb:44:63:54:40:d5:17:fe:
                    b0:64:b6:c5:a7:7e:91:6d:4e:62:46:c8:df:5a:8a:
                    62:db:28:46:2a:3e:b0:e9:06:4a:cb:ab:e3:8d:c0:
                    94:e1:a5:bc:5f:51:c4:e3:12:b7:75:eb:cd:c9:ad:
                    a4:66:ab:52:d3:c2:a4:ff:a4:4c:c9:28:3b:69:c0:
                    10:4c:27:bb:e4:1d:c4:63:74:38:f8:8f:20:d1:b7:
                    9d:20:f5:03:7d:af:b9:fa:ea:7d:56:c5:c0:8c:30:
                    8d:52:f4:00:6d:06:0b:95:17:55:0d:34:11:ca:d8:
                    2b:5d:68:a8:77:2f:34:1f:f9:57:6b:24:2e:ef:54:
                    79:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:ED:7C:67:17:2E:F9:9A:D1:F5:CD:06:1B:58:CD:20:E1:E9:5A:7C
            X509v3 Authority Key Identifier:
                keyid:0E:01:DD:DD:7B:8C:22:01:D6:20:7A:10:16:12:96:A8:AD:B7:A2:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/323830343a313331383a3a2f33322d3438203d3e20323633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1318::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:97:82:7d:73:f7:52:42:e1:d4:e7:08:2b:18:6f:8a:8a:e6:
         99:43:ed:52:cd:fa:50:05:7f:b6:b1:d8:c3:7a:83:0e:2c:d7:
         a3:e1:63:38:86:76:06:f4:f5:95:eb:03:75:22:9d:83:df:2f:
         8d:0f:f6:a0:63:83:41:a9:14:91:75:81:6a:34:bc:4b:d2:25:
         d9:4d:04:05:b1:d9:8f:a1:6d:04:2b:ac:97:ed:b5:a7:cf:5d:
         3f:19:c6:32:b3:6f:d0:f0:11:6c:0c:1d:8d:34:ae:49:5b:07:
         de:a7:b1:8c:08:bd:12:64:3f:0b:a4:6b:75:93:f6:55:93:e9:
         17:6b:cd:19:c2:fe:f5:ca:5c:13:28:08:8a:6f:2f:65:94:3a:
         e1:5e:7f:02:3e:5f:a1:74:38:c5:18:95:44:df:7d:89:43:5c:
         e6:c9:2f:4d:10:1c:86:7a:9d:a2:c1:5b:9f:b1:cb:8c:0b:f2:
         21:b0:4a:0a:25:86:24:5a:81:c9:47:5f:4a:6c:cb:8e:38:99:
         c4:a3:f6:d0:a2:2a:e8:32:a8:ad:bc:dd:67:a6:8f:5e:35:4e:
         57:68:62:6f:b6:54:77:9b:e5:0d:72:cb:13:a7:7e:e7:d8:91:
         9f:73:e9:08:f3:c8:4b:c9:d9:a2:4c:a5:2e:3d:72:0a:ce:31:
         a0:18:d7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----