Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/323830343a343938383a3a2f33322d3332203d3e20323637313839.roa
File:                     323830343a343938383a3a2f33322d3332203d3e20323637313839.roa (raw, json)
Hash identifier:          86o82PXcfADd90hf8UnTUiScpug/jY5yTSZKp+AAEjw=
Subject key identifier:   DD:2D:3E:59:EC:1F:83:F1:5C:62:BE:54:A3:40:C5:16:BC:E4:57:E4
Certificate issuer:       /CN=C6D220159E081BD89DCE356728E04C7EC1441DFB
Certificate serial:       37C369A77023191C17C4BF81F59AFB168711E31A
Authority key identifier: C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/323830343a343938383a3a2f33322d3332203d3e20323637313839.roa
Signing time:             Mon 07 Feb 2022 12:09:24 +0000
ROA not before:           Mon 07 Feb 2022 12:04:24 +0000
ROA not after:            Mon 06 Feb 2023 12:09:24 +0000
asID:                     267189
IP address blocks:        2804:4988::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c3:69:a7:70:23:19:1c:17:c4:bf:81:f5:9a:fb:16:87:11:e3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6D220159E081BD89DCE356728E04C7EC1441DFB
        Validity
            Not Before: Feb  7 12:04:24 2022 GMT
            Not After : Feb  6 12:09:24 2023 GMT
        Subject: CN=DD2D3E59EC1F83F15C62BE54A340C516BCE457E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d9:f5:17:80:e4:a2:fc:df:de:ea:eb:c8:5e:
                    5d:80:33:b0:9a:c8:78:2b:bb:86:de:5d:c5:2c:eb:
                    a0:2b:ae:8c:77:6c:53:41:86:f7:7e:20:5f:8c:57:
                    c3:ea:f3:7b:b0:32:96:36:16:fe:b1:30:e5:d9:d5:
                    f3:c5:66:98:29:10:26:49:a8:6e:8f:f8:60:b6:6f:
                    1a:6f:44:64:24:0d:4c:3c:8a:e3:cf:ee:48:72:bb:
                    8f:e6:df:15:46:26:bf:07:19:9c:16:a8:a0:05:bb:
                    f8:a0:c4:ea:0d:3b:bb:5d:ef:66:ef:9b:0f:20:88:
                    7a:fc:b6:af:79:c4:e1:9a:af:d9:6b:1b:f2:92:f0:
                    aa:71:df:89:ec:31:f9:1b:10:cf:e0:de:66:b7:68:
                    13:3b:6c:62:0f:d7:49:65:e8:40:9b:bc:65:13:eb:
                    26:10:84:8b:d5:d4:12:65:bb:1d:8f:63:76:48:b8:
                    6d:a6:f8:f8:2c:91:3b:d4:62:7f:c7:0e:74:cb:43:
                    51:a3:aa:5f:98:9a:4f:1d:1a:85:53:03:2d:3c:44:
                    93:79:aa:dc:d0:0d:fb:e9:5d:ca:39:1f:c4:ff:8c:
                    99:18:1a:86:41:07:99:8c:af:af:a9:54:77:94:3f:
                    30:ef:71:be:6b:89:d7:86:08:a8:cd:f8:1e:59:40:
                    22:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2D:3E:59:EC:1F:83:F1:5C:62:BE:54:A3:40:C5:16:BC:E4:57:E4
            X509v3 Authority Key Identifier:
                keyid:C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/323830343a343938383a3a2f33322d3332203d3e20323637313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4988::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:d2:3d:24:50:5e:0f:fe:ff:7d:13:1a:da:de:be:1e:3a:47:
         ee:82:07:d1:dc:db:53:b4:3f:fd:24:12:a6:f0:9d:d6:d6:d9:
         97:81:bc:6a:a7:06:fd:a4:83:ee:cf:e2:a0:8d:dc:ff:7b:ee:
         85:95:5e:60:bb:95:7f:fb:cc:eb:0d:3f:cd:58:98:ab:4c:13:
         61:d6:32:23:a2:c9:2d:31:68:57:fa:3d:d5:b6:21:bd:39:fe:
         fd:ef:86:f4:53:9c:64:d1:9e:6b:a3:4e:f4:8d:49:2f:b6:e3:
         f7:9b:b8:87:7b:16:46:19:b2:ef:88:25:36:54:00:a3:a1:80:
         0c:8d:ec:af:1e:ff:68:72:16:98:33:57:64:8a:1f:4c:b4:0d:
         00:19:62:1d:fc:7d:51:62:a1:7c:ba:ae:22:04:77:12:1c:e5:
         21:23:03:90:b3:80:a8:44:25:1e:f9:24:21:49:71:37:af:e9:
         6e:ae:92:f8:ee:4b:5b:21:12:7a:31:79:a1:a7:17:9e:67:33:
         2f:6d:51:17:24:22:bb:f8:a4:d9:6f:c2:c1:23:8d:78:2e:3b:
         c5:b0:37:57:1d:78:9b:99:fb:14:5e:1c:63:97:9d:b6:e5:b9:
         c4:87:fb:ca:68:38:8a:99:21:9a:9a:ec:1a:45:14:58:8e:f9:
         fd:96:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----