Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/323830343a343339633a3a2f33322d3438203d3e20323637353739.roa
File:                     323830343a343339633a3a2f33322d3438203d3e20323637353739.roa (raw, json)
Hash identifier:          W39qz/6JlFkQnY0uE8I3j/Jk7EVvpr/6keez363zKkc=
Subject key identifier:   DC:BA:DE:6D:09:04:9B:BC:42:2C:12:6F:D8:4E:58:BC:CA:C5:52:F5
Certificate issuer:       /CN=1C354836A1948F6BB2E0BA22D666FE7C87E9DC92
Certificate serial:       29F78DBD16E02C978A09CC71BC842A7579204A5C
Authority key identifier: 1C:35:48:36:A1:94:8F:6B:B2:E0:BA:22:D6:66:FE:7C:87:E9:DC:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C354836A1948F6BB2E0BA22D666FE7C87E9DC92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/323830343a343339633a3a2f33322d3438203d3e20323637353739.roa
Signing time:             Wed 15 Jun 2022 15:51:51 +0000
ROA not before:           Wed 15 Jun 2022 15:46:51 +0000
ROA not after:            Wed 14 Jun 2023 15:51:51 +0000
asID:                     267579
IP address blocks:        2804:439c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f7:8d:bd:16:e0:2c:97:8a:09:cc:71:bc:84:2a:75:79:20:4a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C354836A1948F6BB2E0BA22D666FE7C87E9DC92
        Validity
            Not Before: Jun 15 15:46:51 2022 GMT
            Not After : Jun 14 15:51:51 2023 GMT
        Subject: CN=3082010A0282010100D0CFABD1A543ABCAA8E22A6D60532743C5B403349EEC0BF2F80FD3B14BD1ED3744F1839E62A7C2B4DB4A1223697C6285FECC2731FB16DEA7AAE7B712420185DACC38FB2FD35967DCA86E0F3600685CC080F072BA0C6B692F2DB8E721BFFC6B0A448F7462B94375051D01611549FA71D723D042294EB17CBC81944A66D86FC464E93EBBD9FF6D414D2B53623A84EC023340D2320DA4E2C88D53924DF304B4124248637C6E5619D4F808BC735DC50339654F5BBA80DB2439199CF859E2C0E87196474624312F015B035976167125AAA83D38B7F7280D5356149BBC2A2D38BEBD969E72289159FB27C166F806F97CB48F116CCD3DD650C02AE9CD373A5F400AAE690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:ab:d1:a5:43:ab:ca:a8:e2:2a:6d:60:53:
                    27:43:c5:b4:03:34:9e:ec:0b:f2:f8:0f:d3:b1:4b:
                    d1:ed:37:44:f1:83:9e:62:a7:c2:b4:db:4a:12:23:
                    69:7c:62:85:fe:cc:27:31:fb:16:de:a7:aa:e7:b7:
                    12:42:01:85:da:cc:38:fb:2f:d3:59:67:dc:a8:6e:
                    0f:36:00:68:5c:c0:80:f0:72:ba:0c:6b:69:2f:2d:
                    b8:e7:21:bf:fc:6b:0a:44:8f:74:62:b9:43:75:05:
                    1d:01:61:15:49:fa:71:d7:23:d0:42:29:4e:b1:7c:
                    bc:81:94:4a:66:d8:6f:c4:64:e9:3e:bb:d9:ff:6d:
                    41:4d:2b:53:62:3a:84:ec:02:33:40:d2:32:0d:a4:
                    e2:c8:8d:53:92:4d:f3:04:b4:12:42:48:63:7c:6e:
                    56:19:d4:f8:08:bc:73:5d:c5:03:39:65:4f:5b:ba:
                    80:db:24:39:19:9c:f8:59:e2:c0:e8:71:96:47:46:
                    24:31:2f:01:5b:03:59:76:16:71:25:aa:a8:3d:38:
                    b7:f7:28:0d:53:56:14:9b:bc:2a:2d:38:be:bd:96:
                    9e:72:28:91:59:fb:27:c1:66:f8:06:f9:7c:b4:8f:
                    11:6c:cd:3d:d6:50:c0:2a:e9:cd:37:3a:5f:40:0a:
                    ae:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BA:DE:6D:09:04:9B:BC:42:2C:12:6F:D8:4E:58:BC:CA:C5:52:F5
            X509v3 Authority Key Identifier:
                keyid:1C:35:48:36:A1:94:8F:6B:B2:E0:BA:22:D6:66:FE:7C:87:E9:DC:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/1C354836A1948F6BB2E0BA22D666FE7C87E9DC92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C354836A1948F6BB2E0BA22D666FE7C87E9DC92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/323830343a343339633a3a2f33322d3438203d3e20323637353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:439c::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:12:20:b9:c6:fe:36:d2:95:ea:1a:dd:b0:3c:b6:7e:1c:44:
         9b:af:a1:85:9a:5a:d8:3d:cd:2e:f6:4a:5c:98:89:d3:6c:5d:
         bb:2a:e1:13:0d:9d:a8:1a:ad:16:33:68:37:d0:04:a3:4c:d8:
         80:c6:d1:49:c5:67:4a:14:a6:65:1e:f0:0b:33:cf:0c:86:4d:
         82:c4:47:14:71:41:5f:49:2b:7b:bf:aa:7e:d9:56:ee:29:5d:
         8d:01:41:80:27:d6:b7:a2:08:b7:17:26:77:42:a4:a6:b2:3a:
         20:5d:80:18:29:02:3b:2a:1f:da:e8:c8:25:06:69:b7:9f:04:
         36:f2:69:aa:c3:04:01:ea:5f:8f:58:26:79:c6:04:77:6d:c1:
         ac:f9:3b:e8:66:ed:7c:84:ac:fc:38:3f:2e:92:05:c4:84:46:
         9b:b3:7a:34:d2:d6:f1:6d:61:73:f0:bc:7e:80:3e:3e:28:5a:
         aa:cb:72:8c:b0:8a:b3:92:5d:49:f4:6b:c0:e6:42:82:b6:31:
         ac:6d:fa:c2:9b:5f:ff:e1:71:58:c5:c8:f2:71:10:51:a7:19:
         4a:dc:e1:b9:de:bd:79:e4:97:0e:51:84:a4:77:8b:73:e3:8b:
         66:0e:71:20:21:5b:aa:91:9e:c8:a5:f9:84:56:39:88:60:31:
         a5:ca:62:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----