Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/323830343a313632343a3a2f33322d3332203d3e20323633323730.roa
File:                     323830343a313632343a3a2f33322d3332203d3e20323633323730.roa (raw, json)
Hash identifier:          MYgassLGiauZFkJ+WU+Z2llX4Wn+vSmnWBTtehOi3v8=
Subject key identifier:   60:CC:D0:2A:04:A2:AB:79:56:67:29:1E:4F:19:43:F5:3F:57:5A:33
Certificate issuer:       /CN=CA9BA39C8B1F4F521B3E305AB3FAF5445187E3E7
Certificate serial:       39829262529149688FF9EA6A372C47BFFCF4D2EC
Authority key identifier: CA:9B:A3:9C:8B:1F:4F:52:1B:3E:30:5A:B3:FA:F5:44:51:87:E3:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA9BA39C8B1F4F521B3E305AB3FAF5445187E3E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/323830343a313632343a3a2f33322d3332203d3e20323633323730.roa
Signing time:             Fri 16 Sep 2022 17:23:42 +0000
ROA not before:           Fri 16 Sep 2022 17:18:42 +0000
ROA not after:            Fri 15 Sep 2023 17:23:42 +0000
asID:                     263270
IP address blocks:        2804:1624::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:82:92:62:52:91:49:68:8f:f9:ea:6a:37:2c:47:bf:fc:f4:d2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9BA39C8B1F4F521B3E305AB3FAF5445187E3E7
        Validity
            Not Before: Sep 16 17:18:42 2022 GMT
            Not After : Sep 15 17:23:42 2023 GMT
        Subject: CN=60CCD02A04A2AB795667291E4F1943F53F575A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:a7:fc:c6:10:52:35:4f:b5:52:0b:01:b3:
                    38:a1:b7:4d:95:81:13:f6:02:34:b4:85:ed:30:a7:
                    b6:a3:80:15:3d:31:a2:88:07:37:92:67:87:3b:fa:
                    1d:71:f8:7a:a7:9a:82:af:78:7d:1a:15:48:e8:05:
                    af:21:1e:a1:eb:c7:84:db:13:24:a3:18:c3:5b:29:
                    69:b1:aa:f0:95:ed:22:db:95:36:df:87:37:6e:e1:
                    c0:0b:1a:f1:7c:03:d3:1e:2a:a6:5f:a3:2d:8f:5d:
                    70:cc:32:45:f1:2d:47:37:73:92:6d:76:eb:be:a6:
                    a7:e1:d7:e3:82:c0:e2:b0:72:a8:39:10:e8:e4:30:
                    17:3f:db:f9:d2:96:03:93:17:aa:38:d8:21:39:79:
                    48:ba:03:31:17:82:5d:f7:19:df:4d:57:47:a6:19:
                    bf:b4:cf:a1:dd:ed:87:25:c8:f5:ea:a7:e3:d7:53:
                    f8:d0:1c:f7:f9:21:93:20:af:9f:a1:b3:a3:f6:fb:
                    a2:31:81:5a:16:2c:80:d3:d8:ec:74:ed:b1:1a:74:
                    c3:6f:eb:06:92:d9:5e:05:40:7d:d3:06:d0:93:41:
                    cc:9b:10:4f:e3:3e:e4:30:81:e8:f6:63:ed:77:9b:
                    f3:57:6a:3f:f7:c0:ef:8b:0c:e4:d6:bb:f6:0a:08:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CC:D0:2A:04:A2:AB:79:56:67:29:1E:4F:19:43:F5:3F:57:5A:33
            X509v3 Authority Key Identifier:
                keyid:CA:9B:A3:9C:8B:1F:4F:52:1B:3E:30:5A:B3:FA:F5:44:51:87:E3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/CA9BA39C8B1F4F521B3E305AB3FAF5445187E3E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA9BA39C8B1F4F521B3E305AB3FAF5445187E3E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/323830343a313632343a3a2f33322d3332203d3e20323633323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1624::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:32:4e:19:78:c0:84:2c:66:9d:20:af:47:f6:64:78:67:5c:
         ff:8a:82:8a:f4:3a:0c:5c:5b:8b:48:63:1c:4e:98:45:ab:91:
         bb:64:e6:23:09:e4:c1:0d:4e:3a:1e:b3:3e:1f:56:63:43:bf:
         0c:bf:8b:2a:4f:77:13:45:30:d7:a9:43:72:09:c3:35:53:ca:
         a8:47:8a:ab:1e:40:60:22:e5:b4:fb:ba:5d:51:3a:93:4c:08:
         a5:94:8e:47:fe:4d:7b:e3:27:c4:be:53:4b:90:1b:1b:fa:ec:
         d0:27:a8:2a:0d:b0:08:8f:92:f3:81:51:52:d3:3d:a0:37:08:
         df:55:4b:06:27:3b:67:65:40:59:71:a7:8e:99:9e:fa:cc:a0:
         54:1c:2f:c3:00:f1:f6:1a:e1:d9:32:63:66:a5:13:55:ce:cf:
         54:97:54:67:6c:28:df:13:13:3b:2a:32:ac:d3:bd:9f:a3:95:
         c4:f9:4d:a8:0e:f5:9b:16:f0:cc:77:f3:92:15:1b:3d:84:d8:
         0a:75:8c:30:32:d0:21:9b:cc:e1:32:a0:dd:44:2a:f7:f2:40:
         57:cf:dc:61:b3:a5:bd:eb:7f:15:d6:99:06:ff:af:7e:42:2b:
         34:24:ac:ec:b1:a4:61:f5:f4:ce:bb:1a:2f:63:82:cb:cc:3c:
         03:33:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----