Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a343030303a3a2f33342d3334203d3e20323730343137.roa
File:                     323830343a366262303a343030303a3a2f33342d3334203d3e20323730343137.roa (raw, json)
Hash identifier:          3G4Ni2WD+rJfI12qiC2G/u6sgQACy8Y2dje4defpAcM=
Subject key identifier:   4D:50:10:08:40:92:9D:F0:FF:62:5C:E2:E0:BD:F4:28:D4:29:39:26
Certificate issuer:       /CN=EDAD5F12EEA89C9E401BD574669D6954F9209697
Certificate serial:       75C3120AA2EACAE9EAD035EF06AACBFEDF746B89
Authority key identifier: ED:AD:5F:12:EE:A8:9C:9E:40:1B:D5:74:66:9D:69:54:F9:20:96:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDAD5F12EEA89C9E401BD574669D6954F9209697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a343030303a3a2f33342d3334203d3e20323730343137.roa
Signing time:             Tue 16 Aug 2022 18:32:44 +0000
ROA not before:           Tue 16 Aug 2022 18:27:44 +0000
ROA not after:            Tue 15 Aug 2023 18:32:44 +0000
asID:                     270417
IP address blocks:        2804:6bb0:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c3:12:0a:a2:ea:ca:e9:ea:d0:35:ef:06:aa:cb:fe:df:74:6b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDAD5F12EEA89C9E401BD574669D6954F9209697
        Validity
            Not Before: Aug 16 18:27:44 2022 GMT
            Not After : Aug 15 18:32:44 2023 GMT
        Subject: CN=4D50100840929DF0FF625CE2E0BDF428D4293926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:ce:d8:17:33:78:1a:ed:21:1a:c4:4e:c8:
                    b1:b9:5d:78:b8:25:eb:e2:85:e9:36:80:f1:08:52:
                    46:95:52:b6:80:51:1b:37:65:12:12:df:43:9e:45:
                    c6:12:97:c1:93:9c:c6:d0:f1:0f:d7:67:ba:1c:e1:
                    72:fc:22:42:24:44:2b:55:6c:9e:57:0f:bb:fc:a3:
                    e0:ce:1e:89:55:75:fb:4d:16:d9:81:7a:61:3f:70:
                    8e:f9:66:bc:b7:36:46:ff:b9:1d:eb:7b:09:70:95:
                    66:b0:22:b8:d8:db:63:89:59:7e:7c:6e:bd:8f:08:
                    2e:18:58:65:3a:e3:b2:a2:31:0c:56:cc:ef:9c:26:
                    38:11:ff:7c:85:aa:fb:25:81:ba:af:25:45:bf:f0:
                    39:de:82:8c:b6:ee:27:e7:38:24:3f:f9:cc:fb:fe:
                    d9:51:c7:d6:a6:b5:58:fc:95:49:ef:1c:00:6c:b6:
                    52:f5:70:e4:f2:13:ec:86:f3:c1:80:7e:15:84:09:
                    16:c9:f1:a0:26:eb:79:1b:82:48:f0:f1:c9:82:94:
                    4d:98:11:61:9d:00:a7:ea:29:a4:8d:d1:ba:0c:98:
                    4c:e2:a4:30:0e:ea:9d:f7:2b:0f:47:c3:fe:77:b0:
                    99:97:b4:d0:7f:56:a8:49:65:07:6b:bb:ce:f4:f3:
                    24:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:50:10:08:40:92:9D:F0:FF:62:5C:E2:E0:BD:F4:28:D4:29:39:26
            X509v3 Authority Key Identifier:
                keyid:ED:AD:5F:12:EE:A8:9C:9E:40:1B:D5:74:66:9D:69:54:F9:20:96:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/EDAD5F12EEA89C9E401BD574669D6954F9209697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDAD5F12EEA89C9E401BD574669D6954F9209697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a343030303a3a2f33342d3334203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         17:dd:73:30:a6:e5:80:aa:cb:b6:bd:8a:3b:83:7a:c9:fa:1a:
         b8:17:56:a5:71:b1:08:9d:e5:72:c8:2b:9b:0e:f0:d8:0c:4f:
         e3:38:e5:79:45:61:bd:1a:ea:71:96:ef:a3:3f:3f:4c:5e:0b:
         a6:b2:a5:3c:66:0f:bb:0a:60:cf:2d:a1:f7:93:ac:81:43:1c:
         e1:3f:f7:4d:2a:07:70:82:ab:f4:49:07:f1:7b:1f:0e:b4:c4:
         d5:13:68:0c:69:bf:2f:62:f4:a1:6d:10:3c:a5:6e:89:fd:93:
         dd:70:e7:ad:c3:43:f0:d5:e1:93:61:22:ff:e9:98:78:ee:1c:
         1a:eb:a8:c9:59:5a:07:39:04:c4:07:74:cf:fd:93:bd:1b:ee:
         91:49:ca:65:39:5a:c8:ce:e3:c8:bc:e5:1e:e4:9b:ba:0c:b8:
         23:05:c8:ed:4e:fd:7a:1e:2c:02:c4:67:08:28:2c:d3:9b:2b:
         83:f2:55:56:49:c7:b2:be:30:bb:53:02:ad:f2:55:bd:a2:9c:
         0e:6c:87:d5:34:e3:63:ba:e5:84:63:54:5a:96:6f:cf:75:c7:
         92:f8:84:b8:7b:62:fc:5a:14:b0:9a:8d:df:3d:e6:4f:66:b6:
         14:67:1c:c0:1b:9f:fc:85:44:ab:d4:63:4c:cc:a4:74:69:4a:
         21:8d:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----