Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/323830343a313831343a3a2f33322d3334203d3e20323633323633.roa
File:                     323830343a313831343a3a2f33322d3334203d3e20323633323633.roa (raw, json)
Hash identifier:          j4XELxuBkmw+CWWaY1zkL7l49/Ms5wLijuDsw2IxXOA=
Subject key identifier:   18:E2:DB:11:CA:12:47:76:CD:9B:7B:79:4E:39:D1:22:A6:49:41:C9
Certificate issuer:       /CN=11CF1DAA865E94BF55A7973E9151246D838C3946
Certificate serial:       17988D098A468E893144AF5E5BA4F791B02993B8
Authority key identifier: 11:CF:1D:AA:86:5E:94:BF:55:A7:97:3E:91:51:24:6D:83:8C:39:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11CF1DAA865E94BF55A7973E9151246D838C3946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/323830343a313831343a3a2f33322d3334203d3e20323633323633.roa
Signing time:             Tue 02 Aug 2022 14:12:28 +0000
ROA not before:           Tue 02 Aug 2022 14:07:28 +0000
ROA not after:            Tue 01 Aug 2023 14:12:28 +0000
asID:                     263263
IP address blocks:        2804:1814::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:98:8d:09:8a:46:8e:89:31:44:af:5e:5b:a4:f7:91:b0:29:93:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CF1DAA865E94BF55A7973E9151246D838C3946
        Validity
            Not Before: Aug  2 14:07:28 2022 GMT
            Not After : Aug  1 14:12:28 2023 GMT
        Subject: CN=18E2DB11CA124776CD9B7B794E39D122A64941C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:d5:da:8c:49:3c:b7:d9:0b:82:53:aa:26:
                    6b:60:81:76:5f:f0:2c:44:37:33:be:1d:3b:90:c5:
                    60:d1:a9:b3:35:97:5a:9f:b9:5b:cc:25:3e:35:36:
                    3b:67:f9:66:17:b7:55:fd:b2:63:a9:39:18:35:d6:
                    13:39:ab:64:f2:2f:ca:2d:22:3e:aa:94:e1:d7:ed:
                    3a:8c:c5:b7:a0:b8:f1:ee:6d:82:87:8c:59:b2:a5:
                    be:7d:38:07:05:e2:56:6b:f2:42:ea:4e:61:2b:59:
                    f8:c3:d5:51:e9:d4:eb:d7:7f:7d:e5:58:23:fd:35:
                    82:d4:32:6d:3a:95:86:58:a7:ed:9e:0e:ed:77:3a:
                    e7:15:12:d0:fc:3d:27:01:0f:67:32:d6:9f:c4:27:
                    e6:41:86:73:98:2e:5c:57:13:de:93:09:0c:8b:6c:
                    c3:fb:ae:8b:8e:ab:a1:85:85:dd:d4:62:2d:60:5c:
                    7f:5f:90:d7:5b:1a:1f:d5:60:4d:8b:d1:61:7a:d0:
                    a6:ff:95:9f:07:e2:47:96:92:71:ef:c7:c3:cf:e3:
                    cb:12:38:b5:87:77:97:47:ab:b1:72:6f:5c:59:7c:
                    5e:7f:a6:9b:c8:55:03:08:fe:d8:d1:46:99:d6:74:
                    48:ec:4f:a8:c1:3f:22:7a:62:b3:2e:cc:85:53:cd:
                    10:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E2:DB:11:CA:12:47:76:CD:9B:7B:79:4E:39:D1:22:A6:49:41:C9
            X509v3 Authority Key Identifier:
                keyid:11:CF:1D:AA:86:5E:94:BF:55:A7:97:3E:91:51:24:6D:83:8C:39:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/11CF1DAA865E94BF55A7973E9151246D838C3946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11CF1DAA865E94BF55A7973E9151246D838C3946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/323830343a313831343a3a2f33322d3334203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1814::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:44:6e:02:b6:0a:b5:db:ed:3f:ad:fc:d4:13:bc:21:39:8f:
         54:ed:57:f4:8b:19:ca:86:79:e0:dd:d6:79:8b:8b:db:2e:80:
         f9:86:56:85:d3:37:2b:71:9e:d2:70:da:15:37:c6:e2:0c:03:
         3a:97:fa:46:53:93:0b:3f:b0:1c:12:1d:bd:a2:d4:55:43:a8:
         e6:12:42:c5:26:2a:37:e8:ee:90:97:b3:b2:65:05:40:c8:67:
         99:40:3f:74:0b:75:14:5c:cc:e5:d4:65:fb:08:b4:1f:8d:2e:
         d8:89:46:75:22:7f:97:cb:0a:e7:d5:a6:e3:31:13:e6:a6:4a:
         e6:c3:29:e6:04:7d:1f:2a:9b:51:73:82:41:a4:aa:19:18:de:
         52:54:02:36:ad:2e:14:af:5f:cf:3a:c0:70:6f:2a:bd:0d:17:
         e9:9f:db:28:02:e2:b0:a0:62:b9:ec:82:75:2d:c7:27:6f:13:
         b7:82:6e:13:c5:08:b8:2e:71:9b:bc:63:15:23:4b:29:94:b6:
         ec:0e:4f:0d:24:e8:68:80:6c:3c:d7:0d:df:59:22:7a:1b:48:
         53:00:ad:05:64:db:de:94:63:80:69:d2:d4:55:a5:ad:7a:3a:
         d9:a7:09:92:1b:c3:4a:6d:ea:15:a3:34:97:c7:d7:65:41:14:
         06:a7:b6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----