Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/323830343a383333633a343030303a3a2f33352d3335203d3e20323732313835.roa
File:                     323830343a383333633a343030303a3a2f33352d3335203d3e20323732313835.roa (raw, json)
Hash identifier:          QixoG7nz6/xRu4NuEYjAHUlJ/Wb0Es111k/hV6LFjG4=
Subject key identifier:   8F:B0:CB:DC:A4:0A:25:07:5D:3D:1B:84:DC:31:7E:88:CC:23:C5:73
Certificate issuer:       /CN=C6BD52DC079825A702D874B54502AD138171621D
Certificate serial:       01BCA250EC10C5B3D4972A1C0D3F3181CF876240
Authority key identifier: C6:BD:52:DC:07:98:25:A7:02:D8:74:B5:45:02:AD:13:81:71:62:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6BD52DC079825A702D874B54502AD138171621D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/323830343a383333633a343030303a3a2f33352d3335203d3e20323732313835.roa
Signing time:             Wed 16 Mar 2022 09:56:31 +0000
ROA not before:           Wed 16 Mar 2022 09:51:31 +0000
ROA not after:            Wed 15 Mar 2023 09:56:31 +0000
asID:                     272185
IP address blocks:        2804:833c:4000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bc:a2:50:ec:10:c5:b3:d4:97:2a:1c:0d:3f:31:81:cf:87:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6BD52DC079825A702D874B54502AD138171621D
        Validity
            Not Before: Mar 16 09:51:31 2022 GMT
            Not After : Mar 15 09:56:31 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fd:cb:f1:4e:60:7e:e1:42:11:98:12:c5:4f:
                    8e:cb:8b:10:fe:3c:73:ed:5a:9e:a2:0f:a9:71:1b:
                    ec:0b:5a:47:63:b0:b7:df:c1:45:bd:8d:10:56:6a:
                    59:fa:6d:ab:f7:e1:67:31:dd:f9:1d:7a:a7:46:af:
                    d6:15:96:58:58:21:8d:04:e4:fe:a2:cd:cf:5c:57:
                    4e:8c:95:56:3e:4e:28:38:ee:e8:43:5b:57:00:d3:
                    23:6d:e2:c8:cf:4c:9a:1b:1c:f4:75:da:37:cd:72:
                    a7:dd:06:ef:ff:fa:95:b8:18:7c:76:d3:a2:1d:d4:
                    ca:e7:14:f9:10:5f:cb:a3:ae:70:52:cb:ba:ae:f8:
                    c5:9b:98:e1:07:cf:9d:e9:ce:32:af:58:15:44:88:
                    b7:6f:35:d5:0a:be:1f:61:0c:bc:f9:47:ae:41:53:
                    2b:65:e1:33:f7:ee:b0:8d:d0:10:fc:57:3e:ab:a4:
                    a1:34:3b:28:47:d8:e9:b0:8e:ec:9a:95:9a:87:f1:
                    63:d8:70:4c:c6:41:56:68:1a:d3:ff:13:d2:5e:9c:
                    3d:60:36:d1:6a:25:4e:66:95:0e:f2:b8:eb:b5:96:
                    b3:a2:84:8f:46:68:59:45:be:e7:b1:c2:8b:a3:dd:
                    10:2a:9d:38:97:aa:6d:9c:5d:4b:c0:b4:df:8b:0b:
                    bc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B0:CB:DC:A4:0A:25:07:5D:3D:1B:84:DC:31:7E:88:CC:23:C5:73
            X509v3 Authority Key Identifier:
                keyid:C6:BD:52:DC:07:98:25:A7:02:D8:74:B5:45:02:AD:13:81:71:62:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/C6BD52DC079825A702D874B54502AD138171621D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6BD52DC079825A702D874B54502AD138171621D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/323830343a383333633a343030303a3a2f33352d3335203d3e20323732313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:833c:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         69:25:f5:db:e1:3d:7b:b5:88:27:0c:23:48:dd:0a:b9:d8:6d:
         8c:74:00:af:0e:af:c0:3a:b0:bc:af:a4:ff:9a:7a:c8:49:26:
         70:cc:b4:c1:bd:b6:7b:8d:42:11:db:82:e4:a7:fc:81:5b:a0:
         de:e7:90:90:93:34:4e:29:64:8d:1c:5a:11:87:5c:8f:7f:79:
         fd:8c:e7:d4:c3:bb:e5:79:ca:21:1f:30:74:e3:0f:93:3a:dc:
         ed:8f:ef:75:56:d0:f0:2e:cc:8c:26:9e:ff:43:a8:c3:37:61:
         b3:0b:d1:e7:97:b1:98:0e:52:9d:55:e9:c7:48:74:b9:5a:3f:
         f1:03:c9:1a:25:0a:38:1e:cc:45:47:36:67:99:b2:2f:92:1e:
         57:d3:f6:cb:43:22:6f:0d:99:f2:dd:1c:9f:df:23:e0:db:96:
         b4:b2:8b:40:44:1f:ad:37:d6:63:7f:3d:11:3c:9e:5e:7e:07:
         d2:c1:4e:40:4e:0c:6d:f0:8d:44:a3:67:dc:77:c7:ba:bc:00:
         c0:fc:b4:15:1f:55:bf:93:b8:8f:54:1a:12:97:3c:1e:d4:80:
         7a:83:c0:7c:7a:46:76:cd:52:c6:18:3b:5e:d3:0f:f4:27:c6:
         64:ec:fe:2e:b5:5a:d7:87:5d:0a:74:66:76:6d:c7:cf:27:69:
         4e:d8:d3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----