Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rUZdV47RdQzCTaaGAKpnBdpQoQsJFdydhhqgU4CkoMX/0/323830343a313537633a3a2f33322d3336203d3e20323633333930.roa
File:                     323830343a313537633a3a2f33322d3336203d3e20323633333930.roa (raw, json)
Hash identifier:          1BJJI2vptiMVVWXpHYzKuJC6afgCi2LVcxsY8njPtXY=
Subject key identifier:   6C:E0:4C:04:65:ED:C9:1E:95:FE:9B:9D:E5:FC:2A:4B:4B:8B:44:E2
Certificate issuer:       /CN=49CF38E1A116647E610408E31A3BE3362B0958DE
Certificate serial:       4710518BBADC697CA473E0B872ED0ACEABEEED5C
Authority key identifier: 49:CF:38:E1:A1:16:64:7E:61:04:08:E3:1A:3B:E3:36:2B:09:58:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49CF38E1A116647E610408E31A3BE3362B0958DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rUZdV47RdQzCTaaGAKpnBdpQoQsJFdydhhqgU4CkoMX/0/323830343a313537633a3a2f33322d3336203d3e20323633333930.roa
Signing time:             Thu 19 May 2022 16:00:00 +0000
ROA not before:           Thu 19 May 2022 15:55:00 +0000
ROA not after:            Thu 18 May 2023 16:00:00 +0000
asID:                     263390
IP address blocks:        2804:157c::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:10:51:8b:ba:dc:69:7c:a4:73:e0:b8:72:ed:0a:ce:ab:ee:ed:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CF38E1A116647E610408E31A3BE3362B0958DE
        Validity
            Not Before: May 19 15:55:00 2022 GMT
            Not After : May 18 16:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:6a:ca:ca:e3:eb:00:a4:5a:ad:98:35:2a:
                    fa:0e:00:0e:b4:e3:58:9a:d9:7b:dd:b3:33:23:32:
                    b7:f1:fb:e7:1c:da:1e:8b:30:d2:a9:59:f3:7e:cb:
                    ef:d9:4c:3a:a9:29:49:af:5a:0a:fe:37:a3:66:d9:
                    70:7b:90:4e:19:a9:56:59:bd:05:0b:35:47:f1:70:
                    b8:51:38:4a:41:bc:e3:5c:fa:8d:77:ca:bb:f3:ce:
                    b9:f1:6d:cb:b3:6e:1e:62:87:6f:5b:b1:d6:4b:9d:
                    48:27:87:71:44:dd:ae:53:bc:f0:a0:f9:5b:e5:cb:
                    53:d7:56:85:37:b1:8a:fd:b0:5b:6e:f8:6d:e8:c6:
                    90:cf:00:29:b8:ab:ab:b1:e7:2a:e0:78:aa:fe:0f:
                    19:80:4d:c5:dc:3a:e7:dd:f3:90:82:d5:9e:f2:17:
                    91:10:73:67:c9:40:7a:42:da:3c:f9:99:7e:f1:1e:
                    18:26:e4:2e:4f:1d:de:70:21:bc:e4:44:37:ba:58:
                    61:e3:86:2c:e5:39:99:64:f9:a7:29:d0:3f:bf:19:
                    39:0b:5f:29:82:5e:6b:76:dd:f2:39:c2:be:20:91:
                    01:c7:ab:93:bf:83:49:e4:d3:12:c5:04:c3:bd:ec:
                    57:3e:1e:8b:6d:56:48:c5:5d:98:c7:bf:bf:ed:4a:
                    db:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E0:4C:04:65:ED:C9:1E:95:FE:9B:9D:E5:FC:2A:4B:4B:8B:44:E2
            X509v3 Authority Key Identifier:
                keyid:49:CF:38:E1:A1:16:64:7E:61:04:08:E3:1A:3B:E3:36:2B:09:58:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rUZdV47RdQzCTaaGAKpnBdpQoQsJFdydhhqgU4CkoMX/0/49CF38E1A116647E610408E31A3BE3362B0958DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49CF38E1A116647E610408E31A3BE3362B0958DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rUZdV47RdQzCTaaGAKpnBdpQoQsJFdydhhqgU4CkoMX/0/323830343a313537633a3a2f33322d3336203d3e20323633333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:157c::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:96:94:6e:ac:aa:cd:11:1f:e9:68:18:06:1a:74:9c:7b:fc:
         69:00:d7:87:36:d8:ae:3d:47:99:1a:16:0c:d0:d2:47:9c:aa:
         8f:3a:1a:b6:89:99:11:a3:c5:96:34:b6:ae:60:9f:1a:4f:c5:
         0d:75:b4:6c:c4:d4:49:de:0e:d0:26:7f:01:4f:6e:f3:3a:bd:
         b2:b6:23:35:4b:48:e5:c1:b8:b2:31:d8:75:89:dc:b9:81:4b:
         b3:71:36:f3:79:9b:16:70:dd:48:2f:88:88:98:20:51:58:46:
         6e:ed:ef:66:ab:4f:46:41:e3:7f:6a:47:cf:51:68:95:ca:6c:
         d3:c5:d3:77:54:4f:01:62:f1:e0:0d:a1:e9:f6:39:32:ae:e8:
         8c:c0:60:1f:7b:26:34:73:45:be:ef:64:20:fd:d9:b4:42:3d:
         be:6b:de:df:01:10:59:d6:89:38:71:17:b2:5c:53:27:c8:1b:
         73:46:f7:05:5f:22:ca:6b:f8:bc:56:0b:cc:ef:b1:88:af:d4:
         82:52:2e:7e:89:0d:2f:e4:fb:1d:d1:c1:29:5a:e3:5f:3c:12:
         2a:cb:e2:b6:47:30:b6:38:e1:94:d3:fb:35:a6:29:f2:51:9d:
         41:99:12:f6:12:a2:86:7f:7d:30:9f:83:7a:7e:73:e5:ff:ba:
         60:a7:1d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----