Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/323830343a323665303a3a2f33322d3438203d3e203238313436.roa
File:                     323830343a323665303a3a2f33322d3438203d3e203238313436.roa (raw, json)
Hash identifier:          VB0C+5qqnHBrATVnEIPQXcssC7HYvY0IjHqsgKOb6rE=
Subject key identifier:   8C:35:D3:AE:49:E1:27:6D:99:43:D8:0E:94:9D:E8:D5:A8:76:AE:FB
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       5D8D648CC4F884916C667980A21B375A2C31AAC9
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/323830343a323665303a3a2f33322d3438203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:47 +0000
ROA not before:           Wed 21 Dec 2022 17:11:47 +0000
ROA not after:            Wed 20 Dec 2023 17:16:47 +0000
asID:                     28146
IP address blocks:        2804:26e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8d:64:8c:c4:f8:84:91:6c:66:79:80:a2:1b:37:5a:2c:31:aa:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:47 2022 GMT
            Not After : Dec 20 17:16:47 2023 GMT
        Subject: CN=8C35D3AE49E1276D9943D80E949DE8D5A876AEFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:59:d1:07:fa:f0:0e:96:b6:9c:fa:75:f9:
                    75:f6:c0:31:f8:d8:2b:8b:9e:e5:e7:79:64:15:ee:
                    bb:a6:c0:f4:be:f0:f8:4e:2c:a2:07:b8:65:31:1c:
                    b6:70:b1:de:39:3e:5c:41:37:22:0b:7c:90:95:43:
                    e6:85:eb:06:75:8a:30:41:7b:65:d9:9f:a8:8f:78:
                    c4:fd:17:6b:43:3c:e4:68:03:e6:47:ae:3b:06:09:
                    6d:82:c0:88:87:1a:cd:84:0a:5d:0b:42:5b:2d:b7:
                    58:a5:81:01:ad:9d:cc:6c:af:90:ab:86:53:b2:c9:
                    f2:2c:5f:1d:95:a8:bc:2b:b4:bd:22:da:ca:3b:10:
                    f1:6a:23:f0:b5:0f:ab:52:5e:81:84:f2:fd:b3:ad:
                    a9:a1:9c:b3:ab:d4:28:a7:1c:46:e1:16:cb:b6:7c:
                    f6:27:a8:6b:c9:40:fe:3e:e9:b4:49:b9:08:0a:f8:
                    c4:bc:64:8e:4c:07:29:ac:5a:5e:4c:b4:9d:af:8d:
                    f9:a4:e2:0e:10:2d:cb:be:e3:77:b5:39:c4:6d:1f:
                    a5:1c:19:a5:02:9d:4f:95:fd:13:af:df:dc:61:e9:
                    ca:bf:b7:d7:9a:3b:6e:70:3a:71:78:91:3b:5a:35:
                    ff:af:15:5f:92:cc:46:84:91:81:0c:e4:68:0f:9e:
                    67:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:35:D3:AE:49:E1:27:6D:99:43:D8:0E:94:9D:E8:D5:A8:76:AE:FB
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/323830343a323665303a3a2f33322d3438203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:50:d6:0d:e2:f2:a3:72:5c:ea:67:9b:41:76:68:2f:2a:71:
         21:47:2c:55:61:db:4d:8a:16:60:e5:f3:9c:fe:d7:d9:3a:55:
         90:ad:f7:4c:27:43:52:0d:08:7e:56:c4:af:e5:6d:eb:7d:51:
         0b:1e:d7:14:a7:b8:b6:ee:9f:73:1d:b6:b1:cf:58:63:21:13:
         5c:71:48:68:d4:1c:9c:6f:42:e5:6c:e2:d4:81:77:f6:52:78:
         c6:8c:d9:3f:3b:ce:78:fd:bd:8c:df:2b:55:e6:79:9b:49:b1:
         9e:33:99:20:f3:03:79:19:c4:ab:5d:c4:95:1a:d7:87:97:5e:
         d1:d1:f7:db:7f:a5:53:f8:88:4b:ec:a9:40:03:6a:06:85:17:
         64:7f:f0:00:92:83:10:01:0f:31:2d:ec:38:97:68:49:9b:6b:
         e0:9b:4c:d8:f9:bf:4b:6a:94:25:0c:24:35:8d:55:eb:c9:c0:
         90:37:26:f2:82:a4:b4:62:31:45:bc:22:69:fe:dd:6a:b1:61:
         ad:bb:af:96:fc:f5:d9:90:5f:e3:87:5d:51:13:c6:46:91:3e:
         b3:ad:f3:83:11:09:d1:a9:fe:ac:d5:d1:e1:47:97:70:3c:1e:
         cc:f2:94:a3:f9:68:83:db:97:b0:96:e1:2f:36:2c:e2:01:c9:
         ff:84:a1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----