Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/323830343a356665383a3a2f33322d3332203d3e20323639313331.roa
File:                     323830343a356665383a3a2f33322d3332203d3e20323639313331.roa (raw, json)
Hash identifier:          dGMHyYM2Bg9nMIGZaCcLfAhzNGMwPklo+aEACcwNVdY=
Subject key identifier:   BA:20:22:DC:AF:42:C2:6D:B4:C2:D9:57:EE:FC:76:B1:29:2B:61:CD
Certificate issuer:       /CN=C780C4FA3618AD430F8B12C2DAEE3F405CFF757B
Certificate serial:       211B7EEC598D18D8DF3665BD54B1C3FDB0E65F5D
Authority key identifier: C7:80:C4:FA:36:18:AD:43:0F:8B:12:C2:DA:EE:3F:40:5C:FF:75:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C780C4FA3618AD430F8B12C2DAEE3F405CFF757B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/323830343a356665383a3a2f33322d3332203d3e20323639313331.roa
Signing time:             Tue 24 May 2022 18:42:52 +0000
ROA not before:           Tue 24 May 2022 18:37:52 +0000
ROA not after:            Tue 23 May 2023 18:42:52 +0000
asID:                     269131
IP address blocks:        2804:5fe8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1b:7e:ec:59:8d:18:d8:df:36:65:bd:54:b1:c3:fd:b0:e6:5f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C780C4FA3618AD430F8B12C2DAEE3F405CFF757B
        Validity
            Not Before: May 24 18:37:52 2022 GMT
            Not After : May 23 18:42:52 2023 GMT
        Subject: CN=BA2022DCAF42C26DB4C2D957EEFC76B1292B61CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:1c:ad:78:36:b1:6f:a4:f0:77:eb:39:95:
                    a0:c2:50:fc:73:f8:19:76:92:a9:77:e4:9c:06:aa:
                    09:73:4d:dd:d9:59:d3:46:35:5b:f1:d3:e6:00:34:
                    ff:f9:cc:23:2e:33:04:09:43:e5:bc:f3:60:32:00:
                    47:05:57:5c:93:0c:1e:9a:37:5d:73:56:f9:30:21:
                    66:c7:5b:92:73:79:1a:06:4a:a2:6b:ff:8c:d5:fc:
                    2e:89:b4:d1:3f:5c:7c:12:69:14:6d:9c:4f:57:73:
                    b2:e2:1e:1a:dc:40:51:63:ff:e1:25:17:33:a1:be:
                    d2:04:30:76:2d:94:9f:2c:27:25:94:1c:28:de:78:
                    cb:fa:28:aa:a0:5e:dc:8f:15:59:94:04:03:e3:bf:
                    09:1c:ce:11:82:98:8a:44:b0:2c:db:07:d4:65:d5:
                    7f:8d:c9:f5:21:a0:e8:16:ad:e2:07:92:45:aa:84:
                    79:15:67:63:38:b9:94:b6:c4:b2:e9:ea:61:47:10:
                    d1:be:0a:87:75:bd:32:58:21:06:68:ff:cf:1e:4d:
                    42:12:ff:c6:fe:54:7b:00:69:fe:59:82:8e:e9:83:
                    ee:86:3c:54:65:7b:a6:08:40:8d:9b:e6:2c:1d:1d:
                    95:e9:7a:ee:5e:8d:c5:cd:27:a4:97:8e:7d:f1:37:
                    a3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:20:22:DC:AF:42:C2:6D:B4:C2:D9:57:EE:FC:76:B1:29:2B:61:CD
            X509v3 Authority Key Identifier:
                keyid:C7:80:C4:FA:36:18:AD:43:0F:8B:12:C2:DA:EE:3F:40:5C:FF:75:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/C780C4FA3618AD430F8B12C2DAEE3F405CFF757B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C780C4FA3618AD430F8B12C2DAEE3F405CFF757B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/323830343a356665383a3a2f33322d3332203d3e20323639313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fe8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:3d:d8:ed:ad:4e:b3:2c:93:ea:97:ce:2b:ee:b8:fe:62:71:
         45:9f:06:b8:12:b2:05:10:34:ca:54:6b:ac:67:48:8e:8e:27:
         9b:e5:e2:84:2c:8b:86:a0:fb:f4:bf:2f:62:c6:b5:2b:70:24:
         83:04:f4:60:6f:33:7d:f5:5c:8c:9f:32:f5:c5:cd:e6:69:bd:
         13:c9:36:c2:66:b2:b5:bb:ce:08:40:bc:48:56:f4:f0:f1:34:
         b3:c1:9b:bd:0d:47:84:76:52:de:05:74:bd:13:d9:1a:ae:e2:
         d0:3e:14:6f:dc:98:b1:47:e5:d2:7b:41:48:45:29:43:b3:91:
         db:8a:d8:74:40:b3:1c:66:e7:2c:85:ca:59:78:12:29:a9:b8:
         3d:17:4f:9d:f6:dd:70:9c:c1:3c:d4:fb:46:aa:37:97:63:10:
         1c:77:34:c0:df:1b:fa:c8:9d:8b:fd:79:1a:61:09:7a:b1:74:
         92:0d:ac:46:e0:0f:19:5b:b3:64:78:3d:9d:43:01:51:a0:39:
         44:17:8a:e3:8e:78:78:94:ed:e8:f9:93:e1:a0:ae:fc:d1:b0:
         8f:74:f3:97:22:33:70:d6:dc:7b:2f:dd:43:7e:2f:cd:f8:80:
         92:3c:2f:a9:68:df:3a:0a:25:7d:6b:33:f4:99:89:fb:3d:bc:
         3c:83:a4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----