Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/323830343a313737343a3a2f33322d3332203d3e20323633313435.roa
File:                     323830343a313737343a3a2f33322d3332203d3e20323633313435.roa (raw, json)
Hash identifier:          mObTJIb3mXEmh7dT4XMzgBoYE8+lnQaP1LfxIZfmhpg=
Subject key identifier:   97:63:7F:EA:4A:06:02:CE:ED:CC:56:81:3F:98:AF:89:38:B1:8C:D1
Certificate issuer:       /CN=57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE
Certificate serial:       1636FAFB12DCE3730C1190EBDC4DD7EE8C2FB523
Authority key identifier: 57:C4:F1:A5:DE:60:EF:A1:14:F6:4F:1D:EA:32:CF:29:8B:F9:BF:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/323830343a313737343a3a2f33322d3332203d3e20323633313435.roa
Signing time:             Tue 14 Jun 2022 02:14:50 +0000
ROA not before:           Tue 14 Jun 2022 02:09:50 +0000
ROA not after:            Tue 13 Jun 2023 02:14:50 +0000
asID:                     263145
IP address blocks:        2804:1774::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:36:fa:fb:12:dc:e3:73:0c:11:90:eb:dc:4d:d7:ee:8c:2f:b5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE
        Validity
            Not Before: Jun 14 02:09:50 2022 GMT
            Not After : Jun 13 02:14:50 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:b3:6b:ef:bc:4a:cd:7c:90:95:bc:d8:72:
                    48:ac:28:52:7e:d0:6f:1d:82:33:21:16:2b:df:e4:
                    c7:e4:90:51:46:47:7e:23:96:c5:3b:ce:6f:0a:b4:
                    0e:bf:8a:18:28:53:66:4b:e3:9d:ed:06:43:e7:7f:
                    9d:38:da:8c:2d:28:fe:dc:60:bd:80:b5:f3:d9:75:
                    16:88:62:e6:bf:52:3b:56:4c:49:79:86:85:b8:6f:
                    1c:db:76:0d:53:e1:6c:7c:03:bb:c9:68:4b:0d:74:
                    dc:5a:1e:3e:12:ca:48:5e:c8:67:19:40:8e:08:af:
                    97:5e:e5:e2:4a:48:c1:64:11:9d:e3:78:e8:7f:8f:
                    b4:3a:47:1e:b5:d3:33:28:54:40:98:5b:88:3b:dd:
                    2a:7e:84:4e:26:3f:89:74:55:74:90:bc:19:5a:1b:
                    85:c7:3c:28:87:87:1d:fc:89:1e:aa:84:ec:d5:74:
                    e9:41:19:a7:5a:5a:86:0e:06:d0:8c:57:a6:c3:fc:
                    fe:0f:e3:20:b3:98:93:d8:a4:f6:21:1e:28:8a:b3:
                    cd:5d:bc:a9:54:d0:58:4a:f4:03:3c:75:76:7a:df:
                    7b:6e:e6:eb:44:71:30:35:3a:c7:da:2f:c2:4d:8d:
                    da:ed:4d:5e:fe:a6:0b:8e:a3:6c:de:05:55:0d:12:
                    1c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:63:7F:EA:4A:06:02:CE:ED:CC:56:81:3F:98:AF:89:38:B1:8C:D1
            X509v3 Authority Key Identifier:
                keyid:57:C4:F1:A5:DE:60:EF:A1:14:F6:4F:1D:EA:32:CF:29:8B:F9:BF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/323830343a313737343a3a2f33322d3332203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1774::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:1d:44:a4:bb:45:b9:b8:16:ff:85:0f:42:4b:04:c4:46:70:
         fd:96:f0:86:34:e4:26:49:76:1f:17:87:9c:72:c8:01:32:90:
         b5:aa:2a:2d:2d:a9:1d:15:50:e8:30:d2:a3:64:0c:2f:b3:a1:
         2d:b1:4b:b1:60:37:5e:02:b3:90:fa:d3:4c:e4:fc:67:34:4e:
         12:85:4f:c0:ef:68:32:66:60:ac:0a:c7:73:35:4c:2a:f1:86:
         59:44:fd:3b:ef:7f:3e:3e:0e:cd:01:c4:c4:71:e5:3d:84:42:
         c3:0e:9f:23:6d:96:6d:33:b1:00:61:0d:47:85:16:5d:45:68:
         d0:d6:26:c2:3b:50:5e:22:68:98:04:a7:63:79:0a:ca:8f:42:
         13:29:a4:6b:11:fe:fc:d7:ff:05:8a:52:1f:66:27:2a:76:2c:
         1b:f4:cc:e6:e2:38:d3:82:05:8b:57:23:33:ef:9a:9d:bc:ad:
         9c:f0:5c:68:22:b7:9b:a6:79:2e:cf:81:19:d0:70:29:75:98:
         b9:f8:9c:3b:15:24:a5:0c:24:a3:40:39:ab:1c:08:6b:09:9f:
         83:ee:f2:fb:cd:1d:ce:b3:9a:cf:51:71:d4:ab:8b:11:5e:63:
         a3:bd:0b:c3:9b:5e:8b:ea:2d:01:ec:5b:fa:c1:d9:3a:45:2f:
         81:42:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----