Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9BNPU2rWm9LYYfLoZoxrQhTiq8cKdiYZBKxKvP63fQ1/0/323830343a6464343a3a2f33322d3332203d3e203533303234.roa
File:                     323830343a6464343a3a2f33322d3332203d3e203533303234.roa (raw, json)
Hash identifier:          GhGwpgJxA+t3VhgH+Lw5HihnO8G6VrGNTz65qqR3kTc=
Subject key identifier:   AB:1A:CF:05:BA:CC:82:EF:10:56:CE:E2:F8:10:BB:60:F4:2D:B7:25
Certificate issuer:       /CN=81054A5E0D4A934A669FC835F030DE2F15DAF2DE
Certificate serial:       6348730456BB5B5C56A9FBD0EA88FFA408E450AE
Authority key identifier: 81:05:4A:5E:0D:4A:93:4A:66:9F:C8:35:F0:30:DE:2F:15:DA:F2:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81054A5E0D4A934A669FC835F030DE2F15DAF2DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9BNPU2rWm9LYYfLoZoxrQhTiq8cKdiYZBKxKvP63fQ1/0/323830343a6464343a3a2f33322d3332203d3e203533303234.roa
Signing time:             Thu 03 Mar 2022 12:52:36 +0000
ROA not before:           Thu 03 Mar 2022 12:47:36 +0000
ROA not after:            Thu 02 Mar 2023 12:52:36 +0000
asID:                     53024
IP address blocks:        2804:dd4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:48:73:04:56:bb:5b:5c:56:a9:fb:d0:ea:88:ff:a4:08:e4:50:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81054A5E0D4A934A669FC835F030DE2F15DAF2DE
        Validity
            Not Before: Mar  3 12:47:36 2022 GMT
            Not After : Mar  2 12:52:36 2023 GMT
        Subject: CN=AB1ACF05BACC82EF1056CEE2F810BB60F42DB725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:96:db:77:bf:51:3f:e1:6a:d3:6a:8c:c6:be:
                    17:d1:a6:27:f8:df:dc:4d:93:be:c2:5c:ec:4b:b6:
                    92:5c:fa:3b:cf:bf:9b:07:b8:80:1e:1b:79:26:ce:
                    a4:c5:ec:55:36:0a:3f:91:b9:18:b8:cd:17:14:9d:
                    bd:da:32:50:11:88:71:a6:ad:bf:19:8a:34:de:a3:
                    ae:92:45:83:ba:ce:71:c0:9b:15:19:e7:f2:24:62:
                    5c:5f:27:c9:7f:2e:a2:a6:73:3a:51:eb:4b:5c:fe:
                    37:40:7c:bd:06:df:17:e0:c8:db:c3:c1:49:a3:d1:
                    ae:d6:1e:1f:e9:76:74:5a:de:aa:0f:95:c3:11:8e:
                    4a:98:a8:50:e9:31:7f:9f:a0:01:15:0b:3d:4a:bc:
                    68:12:ce:62:fe:47:e7:b6:2e:27:8c:61:1e:65:eb:
                    fd:ba:03:ff:3d:ba:3f:93:51:18:46:77:da:b6:22:
                    b4:53:68:80:69:b5:3e:80:1d:50:f9:1e:22:dd:a8:
                    97:20:6f:13:ba:a6:b1:be:d9:03:a9:eb:fd:0b:d2:
                    03:a2:94:09:74:2e:07:16:38:3c:32:53:99:35:dd:
                    22:d0:72:3e:0d:6e:e7:83:e7:d1:58:62:a5:ea:c0:
                    a9:46:a8:90:a3:4b:dd:8d:0d:03:30:2e:a5:98:d4:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1A:CF:05:BA:CC:82:EF:10:56:CE:E2:F8:10:BB:60:F4:2D:B7:25
            X509v3 Authority Key Identifier:
                keyid:81:05:4A:5E:0D:4A:93:4A:66:9F:C8:35:F0:30:DE:2F:15:DA:F2:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9BNPU2rWm9LYYfLoZoxrQhTiq8cKdiYZBKxKvP63fQ1/0/81054A5E0D4A934A669FC835F030DE2F15DAF2DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81054A5E0D4A934A669FC835F030DE2F15DAF2DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9BNPU2rWm9LYYfLoZoxrQhTiq8cKdiYZBKxKvP63fQ1/0/323830343a6464343a3a2f33322d3332203d3e203533303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:2d:e4:6c:a1:ab:34:12:fc:72:00:94:dc:a0:7c:a0:19:2d:
         2b:36:fb:48:d9:78:59:ec:de:0c:a2:f1:fe:26:cb:ca:b8:dd:
         ff:42:29:6b:10:61:c8:5e:ef:3f:27:55:5f:49:c9:d1:b8:00:
         b8:84:f2:73:50:d7:82:4b:c4:14:33:85:d2:00:d3:d6:17:75:
         7b:b7:94:e3:d5:89:7b:ed:4c:54:13:8e:b2:91:ce:53:07:1b:
         35:71:c0:21:91:51:5c:95:5a:77:0f:50:e0:d3:9b:17:a8:b9:
         62:de:4e:56:8d:57:e9:fe:04:88:4d:98:bf:25:15:3a:9f:de:
         5a:4b:cd:7a:0f:e7:a6:76:8c:82:b5:96:c8:7d:cf:85:6c:07:
         78:1c:97:a4:80:9c:d6:8d:a6:c3:93:53:d8:5d:06:e2:75:22:
         13:80:a2:61:fa:24:cb:76:6a:83:da:a5:09:40:2f:53:b5:38:
         37:f7:16:e4:e8:7e:5f:34:ec:f4:ce:37:dd:6d:68:8f:c3:e5:
         8f:9e:a0:78:ee:27:44:9d:95:e8:a3:cf:f8:63:8e:41:0f:a7:
         48:22:c7:08:46:e7:0c:28:fb:8f:4f:a9:43:72:74:a1:22:39:
         75:00:13:80:fe:82:f1:82:ef:35:05:31:09:36:80:a5:a2:b8:
         36:a3:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----