Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/323830343a3232633a3a2f33322d3634203d3e203232363839.roa
File:                     323830343a3232633a3a2f33322d3634203d3e203232363839.roa (raw, json)
Hash identifier:          9yFOUzJrjjuqxkAxfvKP/Xrd6UDTTANWluPA6N3CQ+4=
Subject key identifier:   D2:FB:48:95:E9:B2:B7:B8:95:07:55:70:16:2C:2F:46:26:65:8C:BB
Certificate issuer:       /CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
Certificate serial:       7A6E11D14B33441A1147F21232DE199743998333
Authority key identifier: FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/323830343a3232633a3a2f33322d3634203d3e203232363839.roa
Signing time:             Fri 27 Aug 2021 14:26:00 +0000
ROA not before:           Fri 27 Aug 2021 14:21:00 +0000
ROA not after:            Fri 26 Aug 2022 14:26:00 +0000
asID:                     22689
IP address blocks:        2804:22c::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6e:11:d1:4b:33:44:1a:11:47:f2:12:32:de:19:97:43:99:83:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
        Validity
            Not Before: Aug 27 14:21:00 2021 GMT
            Not After : Aug 26 14:26:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:e4:96:54:8c:2b:3b:0b:8d:69:86:ba:e8:
                    2a:6a:de:9d:da:c9:ec:cb:47:20:15:d2:72:c9:60:
                    8b:1b:81:9e:e2:c3:b8:12:53:99:52:cc:6d:ee:68:
                    23:1a:24:d0:d7:5d:46:cb:44:70:38:52:c7:25:71:
                    67:d7:49:ab:3b:e8:5c:62:88:fa:31:20:fa:fa:9a:
                    dc:58:85:6a:b3:1b:ee:c4:4b:c3:2f:aa:5c:77:ee:
                    33:a3:e3:1b:e9:10:dc:cc:d7:0d:2e:1d:cf:98:6d:
                    30:4f:c7:c6:0b:6e:6b:c4:6e:cc:54:8b:a7:77:dd:
                    c2:6d:ef:1a:ca:47:90:d9:f4:15:fb:46:75:81:98:
                    ae:8a:10:98:66:f4:b7:e7:be:83:5b:2d:6e:09:99:
                    ff:8d:92:7f:d9:6e:76:35:ce:89:64:80:d9:3d:44:
                    b4:c2:97:65:b3:65:3b:aa:1d:2d:22:71:5f:b8:26:
                    79:3b:56:e5:bc:d7:a6:f3:1f:47:3d:b5:98:4a:35:
                    7d:b9:e5:85:34:67:d2:07:01:e2:4f:ff:79:15:68:
                    91:43:a0:e4:43:04:5d:3a:b0:b7:4a:e8:18:e0:6c:
                    c2:22:01:ba:e1:0e:b8:35:ad:57:33:d3:b2:c8:d9:
                    e9:aa:21:67:87:f9:7c:f5:c7:30:0a:69:ea:b0:fa:
                    a0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FB:48:95:E9:B2:B7:B8:95:07:55:70:16:2C:2F:46:26:65:8C:BB
            X509v3 Authority Key Identifier:
                keyid:FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/323830343a3232633a3a2f33322d3634203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:e3:ac:08:06:8f:76:f8:ff:b7:b8:e8:db:db:fa:2e:3f:ba:
         d0:fc:5a:ec:9c:3c:02:e4:ed:76:aa:cb:6a:b6:c3:dc:37:d2:
         24:0c:09:58:15:75:15:7f:9b:d9:a6:f3:26:27:4d:9a:39:d0:
         f7:1e:10:b3:13:fe:1c:43:f2:84:a7:29:8d:bb:a7:14:3e:6d:
         bb:1e:49:0f:a8:ac:1d:8d:d5:2d:a0:12:3b:5c:1d:44:24:44:
         e2:fb:96:ec:38:60:2e:12:60:b1:d2:8a:7d:0d:dd:7d:d2:43:
         e4:3f:d8:9c:e7:d3:08:8b:6e:97:ba:ad:09:6a:a6:50:5c:b4:
         1d:e7:8e:4c:43:cd:bc:3b:e1:8a:49:b8:29:98:48:5f:8a:21:
         4d:06:da:15:d2:bb:1b:70:ac:80:9b:28:b3:93:19:47:5e:21:
         7d:e9:a6:11:e9:32:33:da:bf:ec:da:af:85:bb:b0:d3:e7:28:
         1e:12:63:bd:07:cd:6f:8b:0b:29:4b:9b:75:b5:23:7a:6c:66:
         5b:0a:37:02:62:4d:fb:40:b4:97:50:62:6f:e6:ba:16:17:ef:
         42:76:04:ed:c8:2c:62:70:47:d6:22:11:b5:d9:84:80:bc:cd:
         42:f5:f0:53:b6:0f:56:b7:92:3b:56:2a:62:e6:c1:42:79:50:
         d9:95:71:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----