Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a383030303a3a2f33342d3334203d3e20323730343137.roa
File:                     323830343a366262303a383030303a3a2f33342d3334203d3e20323730343137.roa (raw, json)
Hash identifier:          Q6yYYdJjuZX9FYclbRIufVbY7pX6izUzVJrX7euUFkU=
Subject key identifier:   39:3B:B3:59:2A:47:33:6F:7F:56:12:41:E2:8F:6B:B8:DF:3A:22:56
Certificate issuer:       /CN=EDAD5F12EEA89C9E401BD574669D6954F9209697
Certificate serial:       751682CED78A8D55E38FFDD1EE47B99B8104A59E
Authority key identifier: ED:AD:5F:12:EE:A8:9C:9E:40:1B:D5:74:66:9D:69:54:F9:20:96:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDAD5F12EEA89C9E401BD574669D6954F9209697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a383030303a3a2f33342d3334203d3e20323730343137.roa
Signing time:             Tue 16 Aug 2022 18:32:44 +0000
ROA not before:           Tue 16 Aug 2022 18:27:44 +0000
ROA not after:            Tue 15 Aug 2023 18:32:44 +0000
asID:                     270417
IP address blocks:        2804:6bb0:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:16:82:ce:d7:8a:8d:55:e3:8f:fd:d1:ee:47:b9:9b:81:04:a5:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDAD5F12EEA89C9E401BD574669D6954F9209697
        Validity
            Not Before: Aug 16 18:27:44 2022 GMT
            Not After : Aug 15 18:32:44 2023 GMT
        Subject: CN=393BB3592A47336F7F561241E28F6BB8DF3A2256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:81:22:52:57:f2:e6:4e:22:06:e7:af:7d:16:
                    12:49:59:64:9a:14:ee:6e:b7:34:49:6f:aa:c4:3a:
                    77:f6:77:10:95:66:98:0d:82:3f:32:cb:4c:da:f6:
                    3f:e8:53:7b:5a:a8:fd:30:c7:f1:5e:4f:ad:e3:da:
                    2c:ad:7b:fe:af:6c:1c:e9:ef:ff:3e:d4:32:b8:3a:
                    aa:9b:13:9b:53:7a:03:54:a1:9a:f5:48:df:80:c4:
                    a4:d4:5c:6b:21:f4:db:67:7d:02:e1:79:6f:a8:3e:
                    e9:d6:46:60:5f:3d:3a:25:fb:35:0a:1a:74:80:aa:
                    93:81:56:72:b7:ee:ac:28:01:e7:f9:a4:74:cf:2a:
                    6c:a3:98:b0:7c:80:ef:59:b9:5e:e4:0c:93:e5:fa:
                    e1:f5:7b:a1:09:60:55:c5:31:25:d2:d9:97:2f:c6:
                    8c:09:3e:c4:6d:8c:01:67:8d:55:a6:b6:67:f0:79:
                    16:02:73:8b:c4:ab:f7:2c:a6:85:49:19:e6:d4:72:
                    cb:89:dc:37:d7:6b:55:d2:9d:04:3f:5e:30:54:d9:
                    d1:8e:55:66:4b:a9:81:5a:0b:39:c1:c1:4b:75:bc:
                    39:c9:38:a9:95:c8:22:6e:28:25:84:8f:3d:62:b2:
                    11:68:50:99:e2:e1:be:23:3d:dc:52:6a:ad:15:e1:
                    51:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3B:B3:59:2A:47:33:6F:7F:56:12:41:E2:8F:6B:B8:DF:3A:22:56
            X509v3 Authority Key Identifier:
                keyid:ED:AD:5F:12:EE:A8:9C:9E:40:1B:D5:74:66:9D:69:54:F9:20:96:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/EDAD5F12EEA89C9E401BD574669D6954F9209697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDAD5F12EEA89C9E401BD574669D6954F9209697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a383030303a3a2f33342d3334203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8b:a3:7c:84:4e:28:8c:e8:56:be:b6:d2:fe:9d:d5:3a:99:2f:
         22:ae:e1:9d:12:28:fa:09:a8:c6:09:d1:42:b8:39:0b:30:bd:
         52:09:33:5c:b0:d2:d6:88:ea:c3:04:74:65:35:b9:84:9f:c3:
         fc:f6:ce:67:b0:85:1b:16:6a:8b:18:5d:17:c7:26:22:9b:5b:
         0a:22:24:ce:2a:d1:14:0b:7d:1c:b5:1b:1d:ce:1c:15:b2:dd:
         9a:40:04:37:3b:bb:cd:b8:4c:1c:98:8a:75:93:65:b7:ad:35:
         ce:d4:bd:44:8d:b6:a4:cb:15:5c:c1:21:3a:e1:04:2e:e0:bd:
         34:06:1d:a8:70:0f:27:17:c5:e8:03:e1:49:2a:aa:28:9f:62:
         16:33:46:5a:1c:ed:3d:62:5e:23:9f:0b:ba:43:eb:a3:26:eb:
         ce:ae:37:7e:9e:94:bc:1f:56:ba:f4:b4:7e:56:8e:4e:01:40:
         c2:d9:db:46:2d:ef:41:e9:88:45:fe:7a:a7:21:ba:9e:37:b3:
         f9:39:db:a3:9e:97:dc:ff:29:fa:84:c7:95:81:fc:75:06:34:
         2b:79:ca:83:42:7b:c9:9d:09:13:7b:53:53:27:a2:57:07:d8:
         60:bc:ed:e0:57:19:7e:50:8d:25:5b:e6:df:d3:ac:95:0f:cd:
         4d:2d:19:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----