Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/323830343a6464303a3a2f33322d3430203d3e203238363339.roa
File:                     323830343a6464303a3a2f33322d3430203d3e203238363339.roa (raw, json)
Hash identifier:          7dWe3bVPckIskTKD7E5u7d7iDbDoadCt/jr0htiz5Hc=
Subject key identifier:   82:19:6F:FB:88:67:C3:D4:25:86:2A:91:24:B7:FE:8A:06:B3:F4:6A
Certificate issuer:       /CN=3EBC3FE2232091904C043FBCE9FE1663C1E92CBB
Certificate serial:       3D69481D2E0B3957A138CB614B7B56AA2E7D08B4
Authority key identifier: 3E:BC:3F:E2:23:20:91:90:4C:04:3F:BC:E9:FE:16:63:C1:E9:2C:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/323830343a6464303a3a2f33322d3430203d3e203238363339.roa
Signing time:             Fri 02 Sep 2022 18:55:27 +0000
ROA not before:           Fri 02 Sep 2022 18:50:27 +0000
ROA not after:            Fri 01 Sep 2023 18:55:27 +0000
asID:                     28639
IP address blocks:        2804:dd0::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:69:48:1d:2e:0b:39:57:a1:38:cb:61:4b:7b:56:aa:2e:7d:08:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EBC3FE2232091904C043FBCE9FE1663C1E92CBB
        Validity
            Not Before: Sep  2 18:50:27 2022 GMT
            Not After : Sep  1 18:55:27 2023 GMT
        Subject: CN=82196FFB8867C3D425862A9124B7FE8A06B3F46A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:43:d4:8d:cc:d5:c7:21:44:96:77:ea:b8:
                    fe:b3:49:d0:b9:21:2d:c8:f4:56:3d:0f:59:77:e0:
                    05:1a:2a:04:73:e1:fe:1d:61:f8:53:03:0a:c8:79:
                    eb:44:aa:7c:c2:fc:6c:55:97:b4:04:d5:f1:e0:49:
                    27:0d:9d:9a:6e:28:09:9d:0f:5a:ee:54:ee:91:f8:
                    37:c9:f5:31:94:41:a9:af:66:ef:dd:a8:2e:70:f4:
                    50:b4:82:3d:1a:ac:f2:ed:bc:86:82:0a:f8:70:cb:
                    73:24:9b:38:54:63:e5:49:02:9f:30:ef:70:6e:5d:
                    80:9c:d7:84:a8:3d:c9:6a:d6:f1:89:80:84:32:38:
                    a7:e9:c6:f1:52:1d:e3:cd:c6:ea:d9:ea:e1:73:f6:
                    c6:83:20:b7:0b:9e:4c:68:f3:0a:43:bf:f0:74:78:
                    69:8c:24:18:c1:da:e8:8a:8d:6c:c7:4b:2a:25:8f:
                    35:18:f8:28:ce:2b:9e:ed:21:78:97:4d:4b:09:d7:
                    bc:ac:50:e7:d0:59:47:89:ab:22:4c:ee:c7:26:dd:
                    20:24:ae:f7:a4:b6:08:72:f4:77:7e:8e:01:4b:97:
                    0a:ef:fc:e7:12:eb:da:f4:05:91:7f:72:72:93:e2:
                    07:36:e0:2b:96:f6:f7:cc:69:41:51:2b:a7:5e:e4:
                    7f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:19:6F:FB:88:67:C3:D4:25:86:2A:91:24:B7:FE:8A:06:B3:F4:6A
            X509v3 Authority Key Identifier:
                keyid:3E:BC:3F:E2:23:20:91:90:4C:04:3F:BC:E9:FE:16:63:C1:E9:2C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/323830343a6464303a3a2f33322d3430203d3e203238363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:25:67:4a:05:6b:50:d4:32:0f:ac:cf:f4:1c:8f:4a:05:54:
         51:48:ec:90:2b:59:3f:98:28:24:ea:d0:44:37:42:a6:bd:d9:
         66:c6:9d:d3:2b:af:b9:b7:32:03:51:f4:c1:64:95:dc:e6:30:
         36:a8:a5:94:e0:fd:b8:b3:66:ea:96:ca:8a:e4:03:e7:a9:7b:
         d8:a3:22:64:7c:02:bd:1f:ff:b2:13:8f:ca:10:1a:75:91:44:
         b0:61:40:bd:09:36:ff:0b:f8:59:45:2d:9f:91:2b:99:8b:b2:
         ae:1c:9a:43:48:c2:1f:99:3f:c1:76:25:99:be:ce:93:73:49:
         ce:6d:53:60:23:1e:0f:3d:bd:14:72:3c:a2:ba:93:50:56:f0:
         d8:d2:7e:16:70:d6:cc:1f:66:65:cf:10:83:3c:09:97:9f:90:
         dd:37:8c:67:66:2e:5c:39:7e:ab:4e:89:5e:83:75:c1:5e:66:
         90:15:ee:51:d3:15:02:74:74:3e:f1:e8:be:85:ca:1e:dc:4b:
         89:a1:21:08:79:b2:ec:48:20:52:87:c7:45:d9:db:f2:a6:8e:
         d2:fc:1c:6c:b2:12:88:5b:42:4c:4f:79:ec:99:8b:58:87:36:
         ea:33:30:81:5e:07:89:7f:c1:d9:4d:0a:4f:d4:4c:ba:11:b0:
         83:4b:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----