Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/323830343a333734383a3a2f33322d3438203d3e20323636343031.roa
File:                     323830343a333734383a3a2f33322d3438203d3e20323636343031.roa (raw, json)
Hash identifier:          O41weuqSKEze29xMrwoGQSt1w2Ak2I3XragftIKpKro=
Subject key identifier:   4B:89:73:B1:21:C7:9E:9B:4B:B2:0A:18:74:DD:DE:97:45:BC:CD:A5
Certificate issuer:       /CN=B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074
Certificate serial:       2290F88A07647D7C17A6CCA35D7966D8001C557F
Authority key identifier: B3:AE:9A:F8:A6:2B:19:1B:D3:3C:A0:7A:2F:0F:E9:85:F1:BD:10:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/323830343a333734383a3a2f33322d3438203d3e20323636343031.roa
Signing time:             Fri 02 Sep 2022 01:20:34 +0000
ROA not before:           Fri 02 Sep 2022 01:15:34 +0000
ROA not after:            Fri 01 Sep 2023 01:20:34 +0000
asID:                     266401
IP address blocks:        2804:3748::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:90:f8:8a:07:64:7d:7c:17:a6:cc:a3:5d:79:66:d8:00:1c:55:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074
        Validity
            Not Before: Sep  2 01:15:34 2022 GMT
            Not After : Sep  1 01:20:34 2023 GMT
        Subject: CN=4B8973B121C79E9B4BB20A1874DDDE9745BCCDA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:17:c0:d8:75:a5:82:0f:a4:4a:75:b2:a2:
                    77:83:c8:fd:d3:9c:a1:ca:14:79:a9:63:84:1a:6a:
                    35:ac:07:38:01:57:18:43:5c:8f:87:43:e9:b4:c4:
                    64:a1:7d:4a:fa:7a:c6:04:ad:00:43:02:5e:e3:18:
                    d0:3f:91:0c:71:c2:a8:cd:25:e8:0a:44:fe:91:dc:
                    d3:a5:68:7f:5d:94:5c:b2:c0:d8:3d:3c:89:51:07:
                    3e:81:a8:f8:05:63:15:2e:2b:ba:7a:57:1c:cc:ae:
                    8b:74:a9:3d:28:74:21:cf:19:e0:a9:d1:d4:99:80:
                    7e:5a:66:1e:89:c8:4b:aa:46:5b:83:d9:aa:c2:92:
                    9d:72:ec:82:af:e0:54:28:1b:34:c7:65:cf:d6:ef:
                    9f:af:1b:79:80:a2:b5:de:c6:e3:2e:ad:64:66:11:
                    6b:c7:42:1c:82:aa:32:13:ca:47:2b:73:8c:3d:80:
                    b9:e7:f5:85:24:8e:fd:2f:30:cc:5b:4f:4c:3c:2b:
                    7b:5b:b7:47:3f:d2:c9:3a:72:41:29:58:f4:e2:86:
                    b5:83:1c:19:90:69:0a:83:2d:33:37:5f:00:13:e0:
                    b5:9e:44:dd:f2:f4:93:83:0b:9f:8f:3b:69:91:ea:
                    91:78:42:78:e4:33:d5:06:ad:9e:c2:51:f6:be:d9:
                    3a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:89:73:B1:21:C7:9E:9B:4B:B2:0A:18:74:DD:DE:97:45:BC:CD:A5
            X509v3 Authority Key Identifier:
                keyid:B3:AE:9A:F8:A6:2B:19:1B:D3:3C:A0:7A:2F:0F:E9:85:F1:BD:10:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/323830343a333734383a3a2f33322d3438203d3e20323636343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3748::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:5d:2b:a6:c4:4f:98:6a:1f:5e:6e:39:6c:d7:ae:1d:a6:9b:
         4b:df:d2:c1:61:7a:94:7a:7c:bb:8a:24:93:48:85:0c:cc:75:
         d2:82:e6:6b:fe:c0:32:b7:fa:f2:2e:6e:6f:d9:7a:c7:5c:10:
         87:95:9f:c7:b4:69:40:45:f9:ed:ae:12:07:d1:09:a8:f7:37:
         d0:bd:6d:23:ad:f0:97:3c:d0:f8:8c:28:d4:21:ac:06:53:1c:
         91:b3:cf:44:25:8b:8d:8e:01:bd:43:20:c7:1a:2d:76:fe:32:
         8e:23:46:a6:78:e7:ff:0b:e9:f4:5f:70:48:5d:94:33:55:0c:
         2d:02:7d:04:42:e3:34:10:ac:f5:67:99:dd:8b:23:10:4d:ad:
         2e:7a:4a:17:e2:46:7a:0e:b8:03:76:9a:43:bb:30:c3:51:f2:
         ef:12:71:f9:b2:37:5f:9c:41:c9:2f:81:30:79:2e:e0:ca:bc:
         32:5f:d7:6c:1d:ef:05:76:18:31:75:ca:1c:a4:2a:a3:06:c6:
         e6:79:e9:c2:ff:44:34:39:bd:6f:0c:fa:b3:b9:1a:aa:b8:27:
         9d:16:75:84:9a:9c:13:26:f4:1a:cf:02:58:76:80:d8:5a:5a:
         05:cf:a1:06:16:a0:4e:4b:f9:fe:7f:b1:2a:2e:76:5f:40:e1:
         b0:c6:5e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----