Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/323830343a346663343a3a2f33322d3438203d3e20323638333438.roa
File:                     323830343a346663343a3a2f33322d3438203d3e20323638333438.roa (raw, json)
Hash identifier:          8WWOn3VHqi+Qq+9Fgiq8xmkFfmrGy2cEOmUrx+p0uCk=
Subject key identifier:   1F:DA:19:8B:94:C2:8D:D8:C8:5A:66:B4:CD:75:22:6A:67:D7:7A:2C
Certificate issuer:       /CN=5AFA41A8592D32A94E9304A1B0987851355DDD12
Certificate serial:       3707BAFCED57F81525EF1BDD048FAD9D9E1C992E
Authority key identifier: 5A:FA:41:A8:59:2D:32:A9:4E:93:04:A1:B0:98:78:51:35:5D:DD:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AFA41A8592D32A94E9304A1B0987851355DDD12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/323830343a346663343a3a2f33322d3438203d3e20323638333438.roa
Signing time:             Mon 07 Feb 2022 12:09:13 +0000
ROA not before:           Mon 07 Feb 2022 12:04:13 +0000
ROA not after:            Mon 06 Feb 2023 12:09:13 +0000
asID:                     268348
IP address blocks:        2804:4fc4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:07:ba:fc:ed:57:f8:15:25:ef:1b:dd:04:8f:ad:9d:9e:1c:99:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AFA41A8592D32A94E9304A1B0987851355DDD12
        Validity
            Not Before: Feb  7 12:04:13 2022 GMT
            Not After : Feb  6 12:09:13 2023 GMT
        Subject: CN=1FDA198B94C28DD8C85A66B4CD75226A67D77A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:88:a9:24:fb:b2:ab:b6:b1:96:ba:df:32:d7:
                    40:c4:ab:80:e4:f2:15:3c:fe:c6:23:31:44:af:63:
                    d6:41:1d:ff:9c:9e:0e:52:1d:f0:71:c7:ec:97:88:
                    1b:5a:9c:29:b3:3b:c6:f2:6f:d7:2a:cd:af:6b:b0:
                    98:4e:c5:b6:82:f4:5f:d2:a7:a9:ac:e7:d9:e4:dc:
                    24:e0:27:2f:ac:66:7b:e0:e1:79:51:34:33:54:0d:
                    ee:42:6b:70:96:62:64:81:fc:df:fd:a0:25:50:0b:
                    5e:32:83:e0:ff:19:c4:4d:e9:fd:a2:17:d7:7e:3b:
                    32:5f:2d:04:c6:8c:f2:ec:cf:56:a0:9d:d3:5a:df:
                    41:b4:e1:ed:d7:dc:f5:93:19:5f:9e:1a:bc:3a:be:
                    eb:d6:7a:20:cf:2d:5a:e7:a0:89:32:cb:b8:e0:71:
                    32:b9:12:10:34:64:29:ef:de:b2:18:b2:14:81:8c:
                    44:e5:8c:51:80:58:68:6e:ee:39:a2:ab:49:4c:da:
                    67:c2:16:e4:57:c2:b7:5b:ea:bc:d9:1d:14:7f:21:
                    87:cb:8d:80:d8:dd:7b:bf:e3:98:eb:26:e8:f5:61:
                    69:37:1f:b1:4a:3a:b2:35:3b:55:52:4f:92:bf:72:
                    ab:ae:4b:8f:48:a9:84:7d:6b:ef:9b:4d:2e:85:19:
                    d4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DA:19:8B:94:C2:8D:D8:C8:5A:66:B4:CD:75:22:6A:67:D7:7A:2C
            X509v3 Authority Key Identifier:
                keyid:5A:FA:41:A8:59:2D:32:A9:4E:93:04:A1:B0:98:78:51:35:5D:DD:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/5AFA41A8592D32A94E9304A1B0987851355DDD12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AFA41A8592D32A94E9304A1B0987851355DDD12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/323830343a346663343a3a2f33322d3438203d3e20323638333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:ae:77:82:39:be:6a:58:1c:48:df:93:90:f1:55:65:cf:22:
         64:df:4d:fd:01:6b:fb:ec:f2:74:85:aa:c7:0b:30:1b:a1:fb:
         93:17:d4:ea:b9:cb:cd:5d:e4:0c:e4:14:74:62:3d:cb:68:5e:
         32:aa:bc:90:ee:c7:ae:0b:69:92:17:04:10:20:64:a4:45:6f:
         6c:a4:ae:80:cd:46:03:7f:1d:43:29:d6:10:1d:37:7c:d7:fb:
         69:6c:ad:52:3c:12:54:a2:fe:d6:69:40:27:8d:26:55:d2:b0:
         00:47:88:7e:cd:10:f2:3c:67:e8:33:53:dc:79:c5:8f:79:05:
         81:30:a8:1c:4f:40:fe:f3:b8:93:eb:5b:0c:98:d0:d0:e3:40:
         3e:eb:9e:e4:33:19:78:aa:64:9b:05:32:1f:93:42:ec:ca:7a:
         1b:29:40:7a:75:f2:da:a9:c9:b0:b0:68:0b:b4:18:30:8e:dd:
         c8:d7:bc:83:be:07:fe:84:d6:c7:97:11:75:79:c8:46:d5:1c:
         89:50:68:bb:61:3e:6c:6a:6c:1a:fa:0a:ce:ef:06:4b:14:c4:
         bf:13:ab:61:f4:8a:49:9f:d7:d0:c5:a4:5c:db:75:c4:52:b8:
         94:94:5d:36:49:bf:00:10:21:3e:17:ea:93:b7:ec:4c:3a:88:
         82:bc:7a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----