Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/323830343a383030343a3a2f33322d3332203d3e203238323230.roa
File:                     323830343a383030343a3a2f33322d3332203d3e203238323230.roa (raw, json)
Hash identifier:          Io7QkBwn5nh+rA0V5sYqEerqrmYO6A0SQLKs0HkeT0E=
Subject key identifier:   92:AA:80:4A:F1:1E:73:A2:4D:87:81:90:3D:FB:16:FA:E0:53:05:9A
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       4D25683F32DB81506D8316FCC83F0282FE67E1AF
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/323830343a383030343a3a2f33322d3332203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:58:01 +0000
ROA not before:           Thu 06 Oct 2022 17:53:01 +0000
ROA not after:            Thu 05 Oct 2023 17:58:01 +0000
asID:                     28220
IP address blocks:        2804:8004::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:25:68:3f:32:db:81:50:6d:83:16:fc:c8:3f:02:82:fe:67:e1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:53:01 2022 GMT
            Not After : Oct  5 17:58:01 2023 GMT
        Subject: CN=92AA804AF11E73A24D8781903DFB16FAE053059A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:ac:34:df:dc:f5:ea:51:5a:f9:3c:3f:4c:
                    f2:a6:e8:28:4d:75:d8:e4:6b:bd:94:67:62:b6:ae:
                    79:c8:db:3b:06:f4:8c:b7:39:36:40:6d:59:9e:8f:
                    52:4d:ff:bf:13:4e:a5:ad:10:07:6e:b7:9a:f6:a0:
                    8b:02:cc:1c:b9:7b:d9:6a:86:5b:dc:3c:20:07:8d:
                    3d:9a:74:61:de:11:fd:71:be:a0:cc:dd:cb:a5:e9:
                    66:80:32:ca:ce:6c:1f:b6:90:60:e4:b1:a5:f6:f1:
                    9e:48:ee:b7:67:d7:7c:95:cc:26:00:fe:b3:35:64:
                    de:16:df:41:57:b2:30:50:4f:04:4e:f9:c5:04:4d:
                    cd:7e:ff:54:5e:5b:3c:40:d2:07:f9:ae:14:ef:6e:
                    5f:1c:34:30:cb:a9:2f:19:20:8a:bb:99:e8:1b:8c:
                    7a:a1:a8:c9:a1:82:4f:3e:68:09:07:81:e5:32:84:
                    1a:37:c8:22:02:c7:40:65:dd:e6:77:41:bf:21:96:
                    10:1c:ed:c2:23:62:65:d0:27:3c:4b:1f:4a:f4:62:
                    4f:a1:0f:3f:98:07:c8:70:34:26:2a:f1:a6:f5:2d:
                    f7:ad:92:e2:e9:4f:32:ca:89:d4:b2:ed:c3:fa:86:
                    2b:2a:a8:8b:e2:b4:7d:26:b6:95:85:6c:26:3f:fc:
                    d9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AA:80:4A:F1:1E:73:A2:4D:87:81:90:3D:FB:16:FA:E0:53:05:9A
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/323830343a383030343a3a2f33322d3332203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8004::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:69:2e:2b:19:62:04:56:6e:c6:1c:31:8a:89:cd:e1:7f:97:
         5a:0a:bc:c3:93:39:97:08:b8:16:c2:a3:41:e3:7a:b7:a4:fd:
         9a:60:31:68:36:1f:f5:4e:c5:ad:bc:34:7f:9c:1d:e4:b3:8a:
         12:0d:fb:05:85:d3:2b:92:ee:1d:6b:b1:ce:43:bd:22:4f:c3:
         57:d5:c1:cb:9c:32:8a:96:e3:2f:10:99:68:71:ff:ce:8f:70:
         9b:a5:59:d1:18:2d:b1:e3:f3:b8:d4:52:86:23:d5:4b:56:ee:
         d7:67:74:c7:81:42:8e:53:87:22:31:a2:4f:09:b3:10:b1:5b:
         10:35:12:9e:c5:5d:72:50:98:13:3a:20:01:0a:c7:91:f2:88:
         c6:48:24:e8:d2:46:df:29:2b:8f:c6:41:06:f4:47:4d:d6:03:
         bb:41:fc:60:bc:84:e8:dc:11:cd:81:c7:7f:a8:c9:69:76:4b:
         7a:73:5a:4d:cf:a8:d8:bf:8b:81:93:7c:ba:d5:5f:d1:12:ef:
         dc:50:09:ca:b3:f8:1a:09:6c:ed:c1:a9:8c:09:99:df:f7:99:
         90:15:4b:2c:d6:ec:97:f4:b2:f6:5f:7e:b7:5f:92:b8:48:fc:
         88:e5:fb:5e:53:89:5c:0b:76:02:e1:b8:8d:f9:52:46:68:b7:
         af:4f:a0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----