Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/323830343a356236633a343030303a3a2f33352d3335203d3e20323638383432.roa
File:                     323830343a356236633a343030303a3a2f33352d3335203d3e20323638383432.roa (raw, json)
Hash identifier:          BeLh/U8VgqMTn+cHo5Hyq2+xjy9bQ+h+k/whRr6b1Qk=
Subject key identifier:   F3:EA:81:99:20:DE:32:34:37:F0:BE:0F:50:82:78:EE:0D:28:B6:A0
Certificate issuer:       /CN=B1DC8A4583119FD74615E8A11D8796C0EFFD183E
Certificate serial:       4A29A88C3068B38A920F252759B6D32B955AD044
Authority key identifier: B1:DC:8A:45:83:11:9F:D7:46:15:E8:A1:1D:87:96:C0:EF:FD:18:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DC8A4583119FD74615E8A11D8796C0EFFD183E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/323830343a356236633a343030303a3a2f33352d3335203d3e20323638383432.roa
Signing time:             Wed 20 Jul 2022 15:51:16 +0000
ROA not before:           Wed 20 Jul 2022 15:46:16 +0000
ROA not after:            Wed 19 Jul 2023 15:51:16 +0000
asID:                     268842
IP address blocks:        2804:5b6c:4000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:29:a8:8c:30:68:b3:8a:92:0f:25:27:59:b6:d3:2b:95:5a:d0:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1DC8A4583119FD74615E8A11D8796C0EFFD183E
        Validity
            Not Before: Jul 20 15:46:16 2022 GMT
            Not After : Jul 19 15:51:16 2023 GMT
        Subject: CN=F3EA819920DE323437F0BE0F508278EE0D28B6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:d7:36:fa:a4:72:dd:26:1a:40:a6:4f:80:
                    3d:c4:96:68:4c:87:e9:a2:6f:07:92:47:2e:d3:21:
                    20:20:ef:81:df:02:b5:66:f8:fd:f1:bf:d5:15:5a:
                    cc:8d:14:b9:f7:82:6f:8a:6a:f6:5c:76:c6:f9:c8:
                    6b:a9:32:d1:05:74:f0:6d:87:f6:7f:22:5b:a8:8d:
                    7f:05:bb:7c:0e:3b:92:be:07:08:81:50:f8:d3:71:
                    cd:f7:93:fc:d2:41:13:36:83:50:2f:14:ba:1d:d3:
                    f0:2e:d5:93:be:e7:b7:d7:df:e8:51:f6:a7:5c:27:
                    75:38:61:68:36:94:a7:34:b9:a4:7d:47:bd:1d:88:
                    33:63:08:79:7c:42:b3:af:8a:26:07:90:af:70:27:
                    97:b4:92:98:ac:ed:65:58:d8:ff:b6:1e:27:78:5a:
                    be:58:2c:a3:47:1a:e0:77:b6:48:50:67:7d:0a:5e:
                    28:ae:c0:28:cb:de:cd:00:47:f9:42:32:17:fe:3b:
                    72:d4:aa:c8:2b:79:23:06:e4:88:93:33:de:6a:4f:
                    21:75:82:6b:6b:65:49:2f:13:e2:97:5f:45:2c:9c:
                    5e:85:bb:ee:ac:79:24:01:26:67:6d:61:1e:df:61:
                    ef:7c:24:b6:cd:b8:c2:98:4a:c1:b4:e2:b0:96:57:
                    24:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EA:81:99:20:DE:32:34:37:F0:BE:0F:50:82:78:EE:0D:28:B6:A0
            X509v3 Authority Key Identifier:
                keyid:B1:DC:8A:45:83:11:9F:D7:46:15:E8:A1:1D:87:96:C0:EF:FD:18:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/B1DC8A4583119FD74615E8A11D8796C0EFFD183E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DC8A4583119FD74615E8A11D8796C0EFFD183E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/323830343a356236633a343030303a3a2f33352d3335203d3e20323638383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b6c:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         9f:d3:60:52:9b:54:89:cc:f2:a0:1c:38:98:b3:35:d8:bd:cd:
         90:27:fc:5a:b1:5c:48:ce:3e:b2:a1:ed:8b:16:be:0c:cb:e8:
         be:74:52:7e:3a:03:04:d6:f9:23:29:90:1a:f5:33:5c:ee:45:
         f5:83:5b:11:f7:28:10:ad:2d:8e:4b:fb:b2:31:48:00:f4:e3:
         b8:29:c5:82:a2:3e:75:9a:8d:2e:18:5e:24:26:2b:fd:a6:51:
         08:e2:bd:c1:56:9c:e7:62:b1:d7:54:f9:69:10:29:34:14:63:
         10:66:38:fc:24:97:21:08:bc:da:0d:f0:15:54:25:65:39:73:
         69:4b:a7:ed:1d:e9:ec:23:cf:6e:ec:5d:2b:d3:3b:0e:a8:03:
         79:48:95:1f:4a:a9:5c:ef:d2:6b:bc:c5:f0:03:20:11:a1:80:
         e0:44:57:d6:fc:18:78:28:6b:fb:19:75:20:e4:1d:b8:ac:3c:
         6e:8b:8e:0c:5b:5d:88:27:e7:09:3f:c7:14:90:31:60:93:06:
         ef:3c:df:d2:23:fe:dd:e4:48:72:8d:a6:19:83:6f:c4:28:dd:
         90:66:e1:94:66:a9:3a:22:76:97:a9:bf:63:2a:36:ee:2c:86:
         3a:7c:13:3d:97:e9:5b:df:73:aa:a1:c1:25:74:d9:01:b8:fe:
         17:42:41:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----