Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/323830343a363733633a3a2f33322d3438203d3e20323639363135.roa
File:                     323830343a363733633a3a2f33322d3438203d3e20323639363135.roa (raw, json)
Hash identifier:          QLnQGuPY4Toj4BV+ajR+QDt82jktrOg1DuDqbRAJu5E=
Subject key identifier:   34:C0:FA:F1:30:E8:0A:9F:86:CA:03:72:3E:E0:B5:0F:9D:6A:AC:2C
Certificate issuer:       /CN=9020B26E317C7624CEDC7BF0EA9E3E168A4F968A
Certificate serial:       11DF2DB9C21C804A4898D0ED402690BAF544C570
Authority key identifier: 90:20:B2:6E:31:7C:76:24:CE:DC:7B:F0:EA:9E:3E:16:8A:4F:96:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9020B26E317C7624CEDC7BF0EA9E3E168A4F968A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/323830343a363733633a3a2f33322d3438203d3e20323639363135.roa
Signing time:             Thu 25 Aug 2022 19:18:20 +0000
ROA not before:           Thu 25 Aug 2022 19:13:20 +0000
ROA not after:            Thu 24 Aug 2023 19:18:20 +0000
asID:                     269615
IP address blocks:        2804:673c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:df:2d:b9:c2:1c:80:4a:48:98:d0:ed:40:26:90:ba:f5:44:c5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9020B26E317C7624CEDC7BF0EA9E3E168A4F968A
        Validity
            Not Before: Aug 25 19:13:20 2022 GMT
            Not After : Aug 24 19:18:20 2023 GMT
        Subject: CN=34C0FAF130E80A9F86CA03723EE0B50F9D6AAC2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5d:20:e7:90:e0:e9:f7:ae:ee:24:70:cc:aa:
                    a7:3a:eb:7e:32:43:1f:34:7e:73:1b:26:93:a0:68:
                    b7:bf:0d:39:9d:ce:b2:5e:29:cd:bc:b1:78:f2:bc:
                    95:7b:7f:8d:6a:f7:de:c9:88:36:83:97:71:2f:d8:
                    e6:be:ea:3f:93:e3:6b:ab:c9:7e:bc:3e:2c:a1:dc:
                    f2:8f:7c:d9:a8:14:15:07:c5:e8:45:0f:af:43:d0:
                    6f:c7:ea:47:9d:ad:1b:1d:5e:d5:ec:08:5c:3d:3a:
                    24:e7:b2:d4:4c:4b:d8:e1:f8:d0:26:f4:5f:2f:47:
                    da:f2:8f:99:6a:20:e1:7e:1b:0f:8e:01:63:ef:49:
                    1c:ab:7c:28:23:dd:0c:2d:7a:7f:c7:df:55:c5:62:
                    9d:9a:ef:55:79:a5:72:4b:80:4b:41:f4:7e:a1:df:
                    df:8f:c5:c9:df:f2:dd:e6:fe:70:35:09:b9:c8:9d:
                    76:de:17:d6:48:d8:92:a6:e5:b6:cf:bb:44:00:31:
                    22:7a:c7:c6:35:bf:6e:a7:89:da:76:4b:97:a0:1c:
                    5c:ad:92:0a:87:bd:f0:fc:ec:01:29:92:40:2b:1e:
                    23:0b:02:df:74:3c:5a:a0:10:13:88:6a:ca:6d:25:
                    d1:0e:4f:54:03:b7:b2:6e:1e:88:e4:85:4f:b7:52:
                    bc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C0:FA:F1:30:E8:0A:9F:86:CA:03:72:3E:E0:B5:0F:9D:6A:AC:2C
            X509v3 Authority Key Identifier:
                keyid:90:20:B2:6E:31:7C:76:24:CE:DC:7B:F0:EA:9E:3E:16:8A:4F:96:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/9020B26E317C7624CEDC7BF0EA9E3E168A4F968A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9020B26E317C7624CEDC7BF0EA9E3E168A4F968A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/323830343a363733633a3a2f33322d3438203d3e20323639363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:673c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:f5:62:81:af:07:4f:cd:71:7b:44:38:a8:34:c2:80:8a:df:
         13:e8:81:6c:b8:c1:6e:e0:0c:31:04:72:2d:52:93:30:69:9f:
         62:99:c3:9d:5a:b4:dd:8d:3e:81:e8:09:06:79:75:57:4e:13:
         7b:c5:f7:41:71:da:58:6b:23:95:c6:a2:55:75:6f:29:72:a1:
         0b:af:35:a6:f2:5e:49:fc:7a:34:6c:a2:6c:60:33:2e:7f:9b:
         30:fd:a0:e0:13:bc:9a:70:a3:6b:2d:31:bc:f0:f0:fa:0c:c7:
         1f:21:c7:6f:8d:ee:1c:30:bf:38:de:e5:c9:ba:70:5a:43:5c:
         eb:57:f3:77:91:d5:56:01:5c:af:eb:b1:e7:30:93:33:15:a9:
         7d:ff:62:b0:75:22:c1:06:7e:90:ce:72:dd:d8:b2:e2:82:7a:
         c2:cd:ca:3a:99:3d:f1:f2:19:dc:cc:a7:cc:6b:2f:a9:9e:43:
         9e:7a:94:b9:a3:80:1b:c0:06:fa:8a:12:9f:b3:8d:8a:25:47:
         c5:28:c3:d4:d9:b6:4d:c7:21:2a:2d:b3:1f:25:9f:f5:5d:0d:
         b1:e5:ca:2a:ae:4a:c9:50:90:06:c4:23:af:2f:7f:2b:f8:29:
         cd:41:7d:c6:66:14:7b:31:f1:3e:d6:23:f8:de:dc:71:04:08:
         64:88:55:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----