Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3332203d3e20323032.roa
File:                     323830343a6439303a3a2f33322d3332203d3e20323032.roa (raw, json)
Hash identifier:          +rjqqS1Kgeu2vCWk0QGK1gStZbczenhdsgTWsYxxuAk=
Subject key identifier:   18:1D:1B:C9:1F:1D:6C:4D:46:9A:AC:79:97:BA:74:17:48:B7:7D:F0
Certificate issuer:       /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial:       556737DDB426A25D7254024D64558D1F9FB21F66
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3332203d3e20323032.roa
Signing time:             Mon 19 Dec 2022 16:49:24 +0000
ROA not before:           Mon 19 Dec 2022 16:44:24 +0000
ROA not after:            Mon 18 Dec 2023 16:49:24 +0000
asID:                     202
IP address blocks:        2804:d90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:67:37:dd:b4:26:a2:5d:72:54:02:4d:64:55:8d:1f:9f:b2:1f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
        Validity
            Not Before: Dec 19 16:44:24 2022 GMT
            Not After : Dec 18 16:49:24 2023 GMT
        Subject: CN=181D1BC91F1D6C4D469AAC7997BA741748B77DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:c4:01:fa:f7:70:bd:8a:55:eb:50:2b:bf:
                    dc:f7:b2:6c:13:01:27:73:fc:c3:58:4e:ee:5c:0e:
                    7e:85:a3:97:4d:23:b2:b6:31:0b:d0:bb:5c:f7:a6:
                    02:3d:fe:f0:d7:99:81:d7:2b:94:6b:9c:12:66:ea:
                    f2:7a:8b:d7:88:e7:e8:66:8a:83:92:cf:9e:20:04:
                    18:be:fe:09:86:f4:95:74:3f:2e:c6:ad:ee:1c:45:
                    d2:d6:31:69:65:44:77:74:19:14:4a:66:e6:d1:c7:
                    8f:24:2a:ef:a8:b8:19:2a:20:63:ef:5d:6c:96:5f:
                    82:d0:0a:5e:5e:16:6c:9f:a4:e7:98:b9:08:ee:bb:
                    74:4e:13:2d:de:95:70:97:4e:e4:e0:2e:1a:54:20:
                    15:b5:69:0b:8a:3b:3d:4b:60:b7:6e:fe:28:43:98:
                    88:5f:34:d9:53:d6:ed:32:5e:03:92:75:ab:69:98:
                    be:74:ac:ac:44:96:51:ce:88:54:1a:f9:33:31:07:
                    03:da:b0:f3:a6:2a:2a:8d:d7:4c:8c:0f:7d:ad:74:
                    ad:61:1f:74:a8:b4:d3:d1:7a:3a:9f:39:c2:ad:2f:
                    b2:ee:ed:02:cc:e9:19:94:b7:b2:2b:32:5a:c6:ef:
                    c7:0c:4b:7a:f2:95:c6:bc:0a:8d:68:d2:8d:da:47:
                    11:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1D:1B:C9:1F:1D:6C:4D:46:9A:AC:79:97:BA:74:17:48:B7:7D:F0
            X509v3 Authority Key Identifier:
                keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3332203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:bb:8a:94:e6:fe:a9:55:ba:d5:33:82:dd:bc:1e:6c:8b:ad:
         a9:fb:f7:df:73:3b:3b:51:65:05:66:34:38:4f:63:91:89:db:
         b3:19:a7:7c:f9:70:b6:30:d6:e7:3a:5f:32:29:aa:98:c6:6d:
         97:27:c7:b5:3d:6e:04:aa:8f:87:e4:48:1e:49:ed:16:ae:60:
         74:28:e2:e4:72:c6:18:bf:7e:b6:c3:0d:bb:36:61:2d:8b:39:
         bc:e1:cf:a0:0e:99:8d:3c:50:a9:ee:c7:7c:1f:c9:6e:12:2d:
         d8:b4:a4:50:75:79:91:ce:4d:b3:a6:40:96:da:14:fe:f6:49:
         66:78:ab:38:df:8a:9f:9f:2c:1c:ab:b8:06:6c:d0:eb:d0:11:
         42:a9:40:42:03:82:e8:f2:c4:79:17:c7:94:29:cb:f1:c8:57:
         6b:25:bb:ad:1c:89:09:c6:aa:f3:cc:9b:8e:ae:2d:b8:34:52:
         3b:6c:99:ee:67:7f:d9:9c:f0:95:82:6c:49:a1:c4:0a:21:a8:
         59:e3:79:33:59:e8:e0:00:26:cc:81:4f:02:cb:8d:6e:13:21:
         0a:00:17:d3:d6:8d:3a:0f:d5:98:0c:20:4e:25:09:d5:53:1e:
         8f:8e:48:b9:bb:8b:e9:3d:0e:a4:81:e3:03:85:19:dc:ed:a1:
         aa:0a:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----