Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/323830343a343063633a3a2f33322d3332203d3e20323635393832.roa
File:                     323830343a343063633a3a2f33322d3332203d3e20323635393832.roa (raw, json)
Hash identifier:          PCH/p2hoCBXKDINVqaY9uJSmEKa8ldUxK9JSj9NkS5w=
Subject key identifier:   42:EE:0C:DC:54:08:F8:DE:CB:05:BD:8C:3F:E6:C4:4D:29:A5:1A:9F
Certificate issuer:       /CN=BBAA988D47E837300BB1551B443A99CB6B4A8DDE
Certificate serial:       627EC50AFC982EC3F532060FA80A0B02FEABE40A
Authority key identifier: BB:AA:98:8D:47:E8:37:30:0B:B1:55:1B:44:3A:99:CB:6B:4A:8D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/323830343a343063633a3a2f33322d3332203d3e20323635393832.roa
Signing time:             Thu 25 Aug 2022 17:00:00 +0000
ROA not before:           Thu 25 Aug 2022 16:55:00 +0000
ROA not after:            Thu 24 Aug 2023 17:00:00 +0000
asID:                     265982
IP address blocks:        2804:40cc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7e:c5:0a:fc:98:2e:c3:f5:32:06:0f:a8:0a:0b:02:fe:ab:e4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBAA988D47E837300BB1551B443A99CB6B4A8DDE
        Validity
            Not Before: Aug 25 16:55:00 2022 GMT
            Not After : Aug 24 17:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:87:f8:db:3c:f6:7e:a8:b2:08:b1:fa:bd:
                    bd:be:34:20:32:b2:9f:f1:d1:fa:94:7f:0a:ad:91:
                    a2:1b:57:87:48:1c:f0:17:39:d3:9a:06:99:7d:8e:
                    20:d3:95:d7:b3:30:42:86:8f:a4:a2:4d:9f:f0:77:
                    4f:78:a9:fb:7f:54:d3:8c:1b:8f:7a:b9:a5:8e:3d:
                    f3:73:4c:f2:f0:f6:16:3d:46:d3:15:6b:61:b3:2d:
                    8f:a2:75:e5:a1:8d:6a:d2:f4:38:82:84:42:e9:13:
                    d1:16:e7:37:c6:e4:da:67:93:4c:96:14:8e:fa:d0:
                    6b:c7:a9:f8:00:61:3f:31:26:d9:51:79:ff:0b:7c:
                    9f:51:b8:68:5d:ec:79:ca:d4:65:27:b5:fc:90:85:
                    9b:c6:82:77:5d:cd:13:4f:06:9b:59:07:21:c1:ef:
                    da:52:63:fd:31:61:e6:ac:39:45:41:ac:ac:26:b6:
                    7a:2b:23:18:f7:19:21:db:85:14:82:f0:c5:e1:a2:
                    fc:19:28:31:3e:71:73:25:9f:30:d0:fb:38:ab:9b:
                    6d:a6:65:e7:62:d7:07:7f:be:9d:c6:85:f9:8c:55:
                    7b:2f:0d:2e:6c:15:f4:b5:a5:97:e5:25:12:bd:f7:
                    cc:39:73:d3:c8:c9:65:62:ae:f3:b5:03:4c:23:ae:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EE:0C:DC:54:08:F8:DE:CB:05:BD:8C:3F:E6:C4:4D:29:A5:1A:9F
            X509v3 Authority Key Identifier:
                keyid:BB:AA:98:8D:47:E8:37:30:0B:B1:55:1B:44:3A:99:CB:6B:4A:8D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/323830343a343063633a3a2f33322d3332203d3e20323635393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:a5:4a:ef:0c:65:f5:55:c1:11:e4:78:b6:b5:08:46:c1:6a:
         a1:c3:a0:99:a9:98:bf:c1:2c:58:1a:92:60:a6:00:20:9e:d6:
         72:ee:6c:ac:b5:31:73:c3:7e:76:b9:49:5a:d7:47:97:dc:1b:
         25:53:f6:ab:69:aa:7d:b8:18:e5:ee:2a:ef:4e:31:10:56:99:
         29:90:87:8c:e4:53:0d:78:01:e4:9e:4a:cc:7e:3c:d1:63:e1:
         e4:37:f4:15:70:1f:70:a1:35:c9:7b:00:39:fc:6f:2a:ed:52:
         51:35:c7:29:a3:c1:3c:89:e7:7d:5a:82:0b:24:66:4f:1f:42:
         fa:e0:01:cd:02:10:d9:4a:d5:46:c2:fb:f3:89:07:ee:2c:ad:
         05:8d:91:f1:3c:32:8a:dd:9c:d2:77:1e:6c:33:1d:95:9e:da:
         97:89:cf:3b:ea:de:f0:33:2c:b0:d5:a1:62:d1:50:93:7a:78:
         45:cc:f8:6f:d8:e0:1c:d4:de:ff:f5:85:ba:da:81:f2:7b:1b:
         a0:37:d3:3d:5c:11:5c:23:03:a0:1e:4d:8b:9b:7e:1d:cc:e4:
         de:7d:1f:63:9d:cd:71:ff:11:ae:eb:85:12:85:39:9a:37:93:
         b7:19:60:d7:72:ec:84:4f:0e:1a:6c:02:94:96:cd:60:66:ec:
         92:80:2f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----