Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/323830343a376332303a3a2f33322d3332203d3e20323731343737.roa
File:                     323830343a376332303a3a2f33322d3332203d3e20323731343737.roa (raw, json)
Hash identifier:          F4w+yLwiIbY42ExHHEjfbIBvyR59vu02ac4gQDjA90c=
Subject key identifier:   1F:DC:BD:AD:B8:A3:61:FD:F3:F7:0C:33:24:F1:EA:31:8B:BA:1C:14
Certificate issuer:       /CN=26056C956885892C37981A0B195690E96DE49AE7
Certificate serial:       1286168EA4BBA20021F79B247E9674860FE6B3F3
Authority key identifier: 26:05:6C:95:68:85:89:2C:37:98:1A:0B:19:56:90:E9:6D:E4:9A:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26056C956885892C37981A0B195690E96DE49AE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/323830343a376332303a3a2f33322d3332203d3e20323731343737.roa
Signing time:             Wed 05 Oct 2022 20:18:18 +0000
ROA not before:           Wed 05 Oct 2022 20:13:18 +0000
ROA not after:            Wed 04 Oct 2023 20:18:18 +0000
asID:                     271477
IP address blocks:        2804:7c20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:86:16:8e:a4:bb:a2:00:21:f7:9b:24:7e:96:74:86:0f:e6:b3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26056C956885892C37981A0B195690E96DE49AE7
        Validity
            Not Before: Oct  5 20:13:18 2022 GMT
            Not After : Oct  4 20:18:18 2023 GMT
        Subject: CN=1FDCBDADB8A361FDF3F70C3324F1EA318BBA1C14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:41:b7:0f:94:e3:9e:4e:04:3f:bc:f6:8f:
                    6d:28:ce:52:1d:c4:47:de:07:a6:02:a1:60:ae:20:
                    e8:d2:d8:9e:8b:96:80:d4:13:c6:b0:84:fd:2b:0b:
                    96:1d:f0:8f:f5:ce:d0:d1:38:70:d9:82:48:83:cc:
                    95:19:cf:a7:2c:48:3c:06:48:1e:65:bd:94:72:4a:
                    49:e1:07:7e:fb:68:97:bf:3e:ba:e5:35:4b:d1:43:
                    a0:bc:17:4b:3c:a9:e5:56:70:65:98:c1:4d:43:06:
                    e3:e8:17:18:76:79:e6:12:13:c5:d4:a0:90:12:49:
                    d0:b7:4e:32:4c:cc:8f:cf:e8:f9:f6:1a:3f:7c:38:
                    66:f3:c0:d5:07:66:c5:73:cc:60:8a:92:af:b8:d8:
                    6d:c4:18:b7:de:8b:0b:93:62:69:3a:f3:6a:3c:67:
                    b2:e4:6a:35:44:63:8f:98:06:27:65:29:95:39:c5:
                    68:dc:ce:09:ef:e6:9b:df:a6:76:30:c9:93:1a:50:
                    0d:03:32:0f:57:9c:7e:be:5d:c9:d6:01:b4:55:11:
                    32:fd:8c:d2:62:73:09:bc:bd:46:70:52:3b:19:91:
                    43:1c:ab:0f:05:27:16:7a:59:32:66:fb:89:c1:b4:
                    37:ab:82:c3:12:56:aa:5b:3e:3a:4a:87:5c:d4:6e:
                    78:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DC:BD:AD:B8:A3:61:FD:F3:F7:0C:33:24:F1:EA:31:8B:BA:1C:14
            X509v3 Authority Key Identifier:
                keyid:26:05:6C:95:68:85:89:2C:37:98:1A:0B:19:56:90:E9:6D:E4:9A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/26056C956885892C37981A0B195690E96DE49AE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26056C956885892C37981A0B195690E96DE49AE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/323830343a376332303a3a2f33322d3332203d3e20323731343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:b1:2c:e4:1e:fa:14:dc:0a:36:d0:6e:7a:53:44:f6:9b:e3:
         e0:6a:79:7f:65:18:b5:14:db:f9:cd:ed:5b:16:f5:40:87:be:
         4e:17:34:29:de:0a:82:84:bc:fe:ed:a3:ad:a3:46:c3:29:53:
         97:c3:85:3f:ae:05:33:e0:80:ee:b7:48:0a:d8:0b:9e:3b:6e:
         9a:ca:61:d7:8d:4d:95:cb:cc:cb:a8:be:b1:79:0f:bb:bd:31:
         a3:f6:03:86:f5:f9:7f:66:e6:95:16:60:e2:56:70:a1:89:b6:
         ee:ac:ca:be:9a:05:88:bd:54:08:b0:95:53:5a:86:10:f1:55:
         09:ed:ca:7b:a9:0f:f2:61:bc:93:59:a3:e4:58:5d:01:a3:6c:
         49:fe:d3:96:6f:d6:a5:01:a6:12:e2:61:e8:cb:fd:35:42:55:
         c1:93:c2:73:db:ba:d7:8a:6f:b7:c4:65:ae:a8:70:5b:67:0e:
         8d:27:74:6e:2d:53:6c:79:f6:55:6e:18:15:68:a2:eb:d6:92:
         96:c7:97:3f:1d:08:c8:68:4f:92:49:1d:30:41:d5:cc:f6:ad:
         12:f5:7c:17:7a:a9:73:31:23:c1:b7:ee:ee:f9:5b:48:6c:12:
         62:1a:7c:00:fe:d2:05:a2:7b:02:0a:bc:a5:46:72:db:f7:ab:
         aa:7d:7d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----