Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/323830343a6365303a3a2f33322d3438203d3e203532353732.roa
File:                     323830343a6365303a3a2f33322d3438203d3e203532353732.roa (raw, json)
Hash identifier:          Eg+J/YxGZa098sNrzlPkpQI+wQMez2368vkBaoSjjk8=
Subject key identifier:   83:F2:1D:E9:00:2A:89:69:CA:87:55:7B:63:E2:F9:A6:9F:72:3C:EA
Certificate issuer:       /CN=C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B
Certificate serial:       2E46B12FE28935C2F0ADAED78828F970A1D6ED4F
Authority key identifier: C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/323830343a6365303a3a2f33322d3438203d3e203532353732.roa
Signing time:             Thu 25 Aug 2022 15:00:00 +0000
ROA not before:           Thu 25 Aug 2022 14:55:00 +0000
ROA not after:            Thu 24 Aug 2023 15:00:00 +0000
asID:                     52572
IP address blocks:        2804:ce0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:46:b1:2f:e2:89:35:c2:f0:ad:ae:d7:88:28:f9:70:a1:d6:ed:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B
        Validity
            Not Before: Aug 25 14:55:00 2022 GMT
            Not After : Aug 24 15:00:00 2023 GMT
        Subject: CN=3082010A0282010100B0775CDEECB00EC60DB1B3F6B8A5EBDB041FDE4B424A470B379A94239F2CB02E73425FEC0C1C57A2D9FF72E1F3F02A28DF230A178982FCD922B4B2F60085EE66406F6480C2E44CCB00932F90447F19349FDF02C945D82D272359EE5E2FD2A103A4788F921E14CC5E5AFF65754B80393B8EF59D030E5D477DFE5390FED4D4FC67D0753D4AE67CB1EABAA181C4496E75E5951C9419F060B57859143B27393CB15B0C8446DDB82346FD337199B6D41B6387ADD2434D4BBC49535D0307602CF29ED88C7A17F5C344B956C3E8E3E03A947555F3AAFABC897C72BFEEAF4FAA780527E8D92495F7DA4A82A5B5EA6F4A4966C7267518AC436B5F64C1D5A3C5584B7980470203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:77:5c:de:ec:b0:0e:c6:0d:b1:b3:f6:b8:a5:
                    eb:db:04:1f:de:4b:42:4a:47:0b:37:9a:94:23:9f:
                    2c:b0:2e:73:42:5f:ec:0c:1c:57:a2:d9:ff:72:e1:
                    f3:f0:2a:28:df:23:0a:17:89:82:fc:d9:22:b4:b2:
                    f6:00:85:ee:66:40:6f:64:80:c2:e4:4c:cb:00:93:
                    2f:90:44:7f:19:34:9f:df:02:c9:45:d8:2d:27:23:
                    59:ee:5e:2f:d2:a1:03:a4:78:8f:92:1e:14:cc:5e:
                    5a:ff:65:75:4b:80:39:3b:8e:f5:9d:03:0e:5d:47:
                    7d:fe:53:90:fe:d4:d4:fc:67:d0:75:3d:4a:e6:7c:
                    b1:ea:ba:a1:81:c4:49:6e:75:e5:95:1c:94:19:f0:
                    60:b5:78:59:14:3b:27:39:3c:b1:5b:0c:84:46:dd:
                    b8:23:46:fd:33:71:99:b6:d4:1b:63:87:ad:d2:43:
                    4d:4b:bc:49:53:5d:03:07:60:2c:f2:9e:d8:8c:7a:
                    17:f5:c3:44:b9:56:c3:e8:e3:e0:3a:94:75:55:f3:
                    aa:fa:bc:89:7c:72:bf:ee:af:4f:aa:78:05:27:e8:
                    d9:24:95:f7:da:4a:82:a5:b5:ea:6f:4a:49:66:c7:
                    26:75:18:ac:43:6b:5f:64:c1:d5:a3:c5:58:4b:79:
                    80:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F2:1D:E9:00:2A:89:69:CA:87:55:7B:63:E2:F9:A6:9F:72:3C:EA
            X509v3 Authority Key Identifier:
                keyid:C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/323830343a6365303a3a2f33322d3438203d3e203532353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:57:d1:ea:40:79:0a:77:59:5f:0e:71:15:1c:a9:cd:64:5e:
         83:96:46:50:2b:9a:84:de:3d:4c:4a:e2:d8:9a:ba:2b:95:8e:
         a1:00:9b:05:b8:59:02:46:aa:73:60:e3:42:bf:48:45:47:73:
         4a:5d:38:b3:67:ce:04:b1:84:a3:a0:55:c8:2f:c3:9a:d0:c9:
         78:db:ec:1d:f8:38:4a:8b:e0:7f:5e:42:1a:93:3d:ec:42:16:
         94:26:0a:38:ca:16:8a:44:03:42:5e:7a:e7:8e:9a:8f:8d:ca:
         09:a9:cc:bb:82:98:bc:06:c3:bf:1f:80:9a:05:db:4f:34:b2:
         e1:7d:5b:8b:6d:a5:a3:85:de:92:bc:7a:9c:6c:d4:59:86:de:
         31:a3:33:59:57:96:37:ba:b9:28:9a:5b:fc:4f:15:e6:24:63:
         e3:0d:ea:41:75:c7:3b:3c:29:0d:01:bf:08:15:cf:67:4f:db:
         94:51:71:68:04:a7:08:5e:c3:5a:7d:26:e7:b6:b0:02:84:31:
         0f:b3:c9:ec:88:2b:7e:da:cb:d6:13:9c:03:b9:0c:53:70:66:
         0d:09:b1:29:d9:62:54:d6:c5:18:d6:15:ff:cd:c3:12:19:f2:
         19:8e:75:b0:45:10:52:d3:e1:b9:d1:b9:65:d8:0a:87:59:07:
         44:1a:27:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----