Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a3a2f33332d3333203d3e20323730343137.roa
File:                     323830343a366262303a3a2f33332d3333203d3e20323730343137.roa (raw, json)
Hash identifier:          NzsYcTfUKxLGY7m6ql1X5D6eZ3jCXwBpJgqLqP+BFNo=
Subject key identifier:   A8:12:E0:32:D6:32:C4:A8:C8:6E:FA:7D:EE:D4:7B:E2:BC:E2:D2:19
Certificate issuer:       /CN=EDAD5F12EEA89C9E401BD574669D6954F9209697
Certificate serial:       228F5694B7BFEF43A9D629283A0CCA81D3AD7CCF
Authority key identifier: ED:AD:5F:12:EE:A8:9C:9E:40:1B:D5:74:66:9D:69:54:F9:20:96:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDAD5F12EEA89C9E401BD574669D6954F9209697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a3a2f33332d3333203d3e20323730343137.roa
Signing time:             Tue 16 Aug 2022 18:32:44 +0000
ROA not before:           Tue 16 Aug 2022 18:27:44 +0000
ROA not after:            Tue 15 Aug 2023 18:32:44 +0000
asID:                     270417
IP address blocks:        2804:6bb0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8f:56:94:b7:bf:ef:43:a9:d6:29:28:3a:0c:ca:81:d3:ad:7c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDAD5F12EEA89C9E401BD574669D6954F9209697
        Validity
            Not Before: Aug 16 18:27:44 2022 GMT
            Not After : Aug 15 18:32:44 2023 GMT
        Subject: CN=A812E032D632C4A8C86EFA7DEED47BE2BCE2D219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:21:6e:c6:be:89:73:0b:7f:e7:16:d0:e1:
                    50:51:dc:73:fe:27:ff:ad:2e:68:4d:7d:51:6a:dd:
                    05:c2:1e:9c:ad:79:c7:6f:38:ea:2d:52:39:43:8e:
                    95:3e:cf:38:25:71:55:07:9c:72:99:2b:e7:6d:a1:
                    c0:80:fd:b4:9b:83:11:91:d9:80:23:f3:c5:5f:c9:
                    b7:ce:4d:c4:55:95:6d:52:06:20:76:67:86:b2:79:
                    cc:4e:99:18:d5:74:15:e2:3b:45:a1:6e:5f:56:f4:
                    40:18:d6:20:63:ae:9b:67:a3:04:a5:cd:66:ce:39:
                    ee:31:8c:62:46:bf:0f:90:90:be:84:a6:80:9d:4e:
                    5f:64:c3:e2:f6:09:4d:b1:22:b0:ef:bf:84:1f:74:
                    63:0f:4c:24:39:5e:e0:eb:0a:e2:85:37:0e:7c:1c:
                    9e:db:57:3f:a4:15:f9:04:71:35:1e:f0:5a:12:66:
                    56:9d:37:f1:17:16:03:14:3d:92:c1:bc:f1:4c:b0:
                    dd:7a:30:7f:c7:ce:95:f4:94:90:dc:f1:eb:9b:9b:
                    d2:79:c1:76:dd:57:5e:ac:63:75:59:eb:a3:0a:9d:
                    a8:c3:18:17:c4:6f:dd:57:76:f4:98:be:32:3c:16:
                    73:51:d5:5e:b0:da:ff:f7:8c:c6:73:98:59:04:ac:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:12:E0:32:D6:32:C4:A8:C8:6E:FA:7D:EE:D4:7B:E2:BC:E2:D2:19
            X509v3 Authority Key Identifier:
                keyid:ED:AD:5F:12:EE:A8:9C:9E:40:1B:D5:74:66:9D:69:54:F9:20:96:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/EDAD5F12EEA89C9E401BD574669D6954F9209697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDAD5F12EEA89C9E401BD574669D6954F9209697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a3a2f33332d3333203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb0::/33

    Signature Algorithm: sha256WithRSAEncryption
         77:e2:ac:36:3f:9d:dc:1e:0e:57:33:3a:fc:f0:ae:71:46:75:
         80:1e:d4:85:f3:83:b1:9b:c3:61:f9:3d:53:11:75:e9:8c:04:
         18:84:c0:d7:14:b1:88:f7:e4:be:27:0c:0e:d5:f4:b0:fc:3b:
         77:37:27:dd:98:63:80:d7:45:ce:99:ad:96:5a:5e:bb:d3:ec:
         5e:94:0e:e8:29:3c:2f:43:aa:be:c9:a7:70:20:66:7d:74:6c:
         16:c3:89:9b:c4:a7:7c:7a:5c:3b:2a:32:48:5d:c0:54:f7:2a:
         39:99:65:98:76:dc:2e:9b:4d:02:f3:7a:b5:72:31:27:59:7a:
         1d:63:85:4e:02:7c:4f:d5:cc:33:03:1f:44:e8:99:07:e5:7d:
         72:00:fb:36:ba:bb:a6:15:a9:0d:ae:68:eb:7e:3c:b5:35:fd:
         39:f8:6b:bb:71:22:f9:9b:de:44:95:09:70:0c:85:86:22:0b:
         a4:11:a8:0e:b8:c3:37:30:96:d7:47:68:2a:d8:81:c3:14:50:
         8c:7f:30:fa:99:48:9e:21:e3:fc:0c:87:4f:8e:3e:2d:fb:fe:
         72:6c:c5:ac:5d:e5:1c:62:2a:71:6d:54:e7:66:83:72:94:b3:
         e6:a8:1e:46:b6:76:28:32:df:57:43:69:c7:08:67:f1:6d:c7:
         2e:cb:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----