Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/323830343a323363343a3a2f33322d3332203d3e20323634313831.roa
File:                     323830343a323363343a3a2f33322d3332203d3e20323634313831.roa (raw, json)
Hash identifier:          80v9JqGCBLXOgnXLGU0M3E9YJqXWxQG34XvST0qfLhE=
Subject key identifier:   C0:BF:52:90:C5:89:79:44:12:BD:96:2E:E1:84:8A:CF:48:2D:D2:55
Certificate issuer:       /CN=D4E46057588C9F820FD3FB9C6E42B274D67E7041
Certificate serial:       629BE04CCFE51F2DEAA74B5D807BFBD2E2A43370
Authority key identifier: D4:E4:60:57:58:8C:9F:82:0F:D3:FB:9C:6E:42:B2:74:D6:7E:70:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/323830343a323363343a3a2f33322d3332203d3e20323634313831.roa
Signing time:             Fri 19 Aug 2022 18:26:57 +0000
ROA not before:           Fri 19 Aug 2022 18:21:57 +0000
ROA not after:            Fri 18 Aug 2023 18:26:57 +0000
asID:                     264181
IP address blocks:        2804:23c4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9b:e0:4c:cf:e5:1f:2d:ea:a7:4b:5d:80:7b:fb:d2:e2:a4:33:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4E46057588C9F820FD3FB9C6E42B274D67E7041
        Validity
            Not Before: Aug 19 18:21:57 2022 GMT
            Not After : Aug 18 18:26:57 2023 GMT
        Subject: CN=C0BF5290C589794412BD962EE1848ACF482DD255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d4:20:f1:89:83:1c:b1:f5:a1:2a:9d:d7:c6:
                    af:0d:b6:63:a2:2e:84:a9:26:b9:6f:37:0c:d9:d1:
                    1b:e3:27:fe:9c:ca:d2:90:ca:c8:98:29:ce:1b:33:
                    51:bb:f1:35:53:8f:26:3b:0a:34:d3:18:62:48:ac:
                    4c:b4:83:cb:1a:72:ee:ad:6c:27:2c:45:45:68:bd:
                    a4:c9:f1:b5:66:57:63:02:aa:87:94:6a:92:1a:e7:
                    f8:25:c3:e3:99:ff:2a:ee:5a:3f:0d:ef:4d:79:5d:
                    72:96:fa:af:a9:5b:4c:b8:01:e2:96:d3:26:19:8a:
                    48:62:54:02:fe:fc:23:d4:b3:df:92:51:fc:6d:56:
                    90:03:8a:67:cf:fb:36:5a:0a:c8:65:d2:2b:32:ce:
                    0c:31:0f:a6:58:79:01:da:ce:a4:f7:de:84:83:df:
                    d7:e6:09:e8:0b:24:00:f6:17:4c:07:02:d4:c8:70:
                    89:7c:11:f7:8a:79:3b:5a:09:68:a6:57:21:6d:cb:
                    52:ff:c6:f6:99:7d:0e:82:e1:95:64:b1:20:c7:64:
                    47:7d:04:e4:0e:ac:ae:9f:74:5d:83:2c:6b:8f:f8:
                    90:f7:8e:d2:18:1a:59:3f:89:5c:7c:7f:df:4a:be:
                    90:bc:77:48:2c:57:94:82:13:b2:46:25:f5:45:1c:
                    a3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BF:52:90:C5:89:79:44:12:BD:96:2E:E1:84:8A:CF:48:2D:D2:55
            X509v3 Authority Key Identifier:
                keyid:D4:E4:60:57:58:8C:9F:82:0F:D3:FB:9C:6E:42:B2:74:D6:7E:70:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/323830343a323363343a3a2f33322d3332203d3e20323634313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:c1:6b:bc:df:35:86:68:d5:a3:58:78:8a:70:2f:e3:2d:1c:
         18:21:fb:5d:3e:c5:78:ef:1f:e3:0d:aa:a6:78:9e:1e:c0:32:
         9a:4f:6d:53:43:6d:79:a8:4c:92:45:e8:52:a5:f5:aa:ab:90:
         24:1a:5a:0b:4c:1c:c3:c6:4f:15:77:d4:89:b1:7a:b0:ad:a7:
         f4:f5:19:83:c7:08:af:8c:33:ec:01:8b:69:f0:88:be:49:59:
         65:06:4d:a4:68:22:ae:8c:02:ce:0a:83:55:86:2e:14:da:98:
         2b:6f:d7:f6:e6:1f:8e:0f:82:9f:f3:ad:72:56:d2:d4:c4:a8:
         a6:62:94:c9:0f:49:89:81:0f:ec:6d:b8:f5:31:d0:e7:c8:19:
         76:fe:d6:7e:47:79:fc:74:c6:67:13:ba:e0:99:62:74:be:05:
         e7:7d:3a:7b:fa:9c:96:36:ec:d6:29:86:df:44:46:31:3a:1b:
         09:95:a3:1c:e7:69:41:66:8a:19:1c:b2:c7:15:35:d4:96:79:
         a6:28:0a:77:e2:a9:ae:1e:02:73:97:52:2d:8f:86:6f:36:71:
         ed:12:1e:72:2a:06:1e:35:26:da:38:ec:ae:5c:54:ee:2e:38:
         b8:2b:3f:64:5d:46:71:09:fe:b6:2b:ba:b2:ae:25:03:0f:fd:
         30:f9:a6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----