Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a383030303a3a2f33332d3333203d3e203237363838.roa
File:                     323830343a353461303a383030303a3a2f33332d3333203d3e203237363838.roa (raw, json)
Hash identifier:          /8s13iwGpDgpUSyNaRHjMCkUQ8f5tNDH7meTh+QN4C4=
Subject key identifier:   66:2F:F5:C4:28:4D:C3:DA:13:AB:13:BD:40:3F:BC:D2:D7:75:BE:8E
Certificate issuer:       /CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
Certificate serial:       60F0E12D2B411013BBE19F31617D1FB09AF28C25
Authority key identifier: AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a383030303a3a2f33332d3333203d3e203237363838.roa
Signing time:             Fri 15 Jul 2022 21:08:13 +0000
ROA not before:           Fri 15 Jul 2022 21:03:13 +0000
ROA not after:            Fri 14 Jul 2023 21:08:13 +0000
asID:                     27688
IP address blocks:        2804:54a0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f0:e1:2d:2b:41:10:13:bb:e1:9f:31:61:7d:1f:b0:9a:f2:8c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
        Validity
            Not Before: Jul 15 21:03:13 2022 GMT
            Not After : Jul 14 21:08:13 2023 GMT
        Subject: CN=662FF5C4284DC3DA13AB13BD403FBCD2D775BE8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:08:bd:35:e9:ec:ac:f2:bd:d3:16:1b:c4:
                    34:5f:5c:df:58:ba:d4:64:ca:44:48:31:a1:fa:4d:
                    30:f3:bb:87:cd:00:9f:6f:da:1f:c9:f2:af:7b:8f:
                    87:8a:31:5e:2d:15:a4:bf:e0:5f:bb:26:9a:d4:25:
                    9b:6b:12:80:c1:9d:6e:ae:b2:8e:a2:9d:0b:e4:8e:
                    ca:cf:de:0a:89:da:b6:62:e8:e6:51:42:49:47:2d:
                    eb:ac:0b:d6:7c:62:90:7f:a9:a4:5a:b7:29:f0:a6:
                    45:ed:fb:b7:6a:87:e5:c2:6b:38:44:9b:1b:76:ea:
                    49:36:d2:28:42:70:77:e3:0f:36:c0:2f:a4:67:0b:
                    d8:66:81:49:75:5b:2b:62:24:5e:83:11:13:b0:f2:
                    55:9f:3d:05:e2:65:d3:4a:a6:5f:87:6d:77:0f:20:
                    30:dc:41:bc:8a:70:c5:cb:94:49:cb:f4:07:d7:88:
                    f9:e9:db:03:81:fb:10:cd:ae:cb:cb:07:b1:bd:81:
                    fd:45:72:36:b4:97:8a:f0:26:c8:ef:12:a2:69:f2:
                    d3:76:e3:eb:90:7a:51:c6:94:a0:d3:3a:bc:60:35:
                    6c:32:61:12:b4:b2:cb:4b:60:ab:61:45:7f:e1:34:
                    85:fa:1e:3e:cd:4a:47:36:97:b9:a7:fd:1f:96:93:
                    ca:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2F:F5:C4:28:4D:C3:DA:13:AB:13:BD:40:3F:BC:D2:D7:75:BE:8E
            X509v3 Authority Key Identifier:
                keyid:AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a383030303a3a2f33332d3333203d3e203237363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6b:74:b9:a7:74:16:26:b6:1a:9d:7e:5f:d7:55:4e:7b:fa:e6:
         d8:46:ab:ee:11:b9:0f:b0:58:1d:24:fd:0a:1e:29:91:58:9c:
         74:84:51:5e:d6:c0:25:98:7a:7f:6c:ab:d1:07:f4:5b:eb:80:
         bb:83:50:5f:4d:d0:d6:77:e2:62:bd:ec:a7:a7:bb:a1:69:c9:
         ba:f7:68:fd:e8:2e:d1:47:d4:f8:e0:99:14:d9:b8:84:d2:ad:
         6d:f6:94:9f:ea:38:0c:d0:34:52:20:da:1b:bc:64:90:b4:71:
         19:3f:29:bf:48:c8:c5:30:bf:a2:64:ea:06:c5:9c:a0:8f:29:
         ce:f9:1c:65:59:01:a4:18:b4:ef:8a:d0:52:8a:64:ec:63:f9:
         0c:79:4b:b7:47:d2:6e:7a:ee:65:76:6c:1d:1d:a5:bb:e3:0d:
         8c:97:17:25:73:0f:5c:5f:2e:ce:58:71:bf:f8:60:dc:d5:a8:
         07:df:21:e5:44:75:1d:a2:6d:c5:af:12:7f:bb:19:73:0d:2c:
         52:19:be:7c:b6:e7:d3:83:b7:f3:1a:0c:78:3c:19:c2:dc:c8:
         35:c8:a3:37:a4:45:76:e9:70:0b:3d:b4:d2:2b:4a:a6:50:b3:
         cd:e4:92:14:52:78:fa:cf:38:6b:65:3d:3f:12:dc:98:ae:a1:
         fa:d1:59:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----