Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a35303a3a2f34342d3434203d3e203238323630.roa
File:                     323830343a323865343a35303a3a2f34342d3434203d3e203238323630.roa (raw, json)
Hash identifier:          W15EuyuDV8UO5DFkMYv13fNnqO0muuNXC5LzEf3C2Kg=
Subject key identifier:   E6:0D:E8:40:D0:D3:51:E4:57:E8:CA:11:EC:9F:8B:61:07:3E:16:19
Certificate issuer:       /CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
Certificate serial:       141BBA8937C45CAA58DA214A6D7C101D7FBA50C3
Authority key identifier: 64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a35303a3a2f34342d3434203d3e203238323630.roa
Signing time:             Wed 09 Jun 2021 18:09:22 +0000
ROA not before:           Wed 09 Jun 2021 18:04:22 +0000
ROA not after:            Wed 08 Jun 2022 18:09:22 +0000
asID:                     28260
IP address blocks:        2804:28e4:50::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1b:ba:89:37:c4:5c:aa:58:da:21:4a:6d:7c:10:1d:7f:ba:50:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
        Validity
            Not Before: Jun  9 18:04:22 2021 GMT
            Not After : Jun  8 18:09:22 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:1f:fd:15:81:19:90:5d:a2:a8:0e:52:73:
                    35:25:a2:62:38:53:21:22:46:de:29:46:b3:e3:ab:
                    d5:85:34:58:31:14:a2:4d:2c:c6:c8:d8:20:03:52:
                    c9:17:04:20:26:70:8e:1c:01:ab:8a:95:65:d3:8f:
                    fd:ca:88:d4:52:75:ab:88:73:18:ea:cc:4e:69:03:
                    8b:ab:f9:42:3b:28:16:8f:27:94:05:42:4a:08:62:
                    2f:71:84:99:ff:e3:c2:b3:49:8b:ae:0b:67:d0:b0:
                    c1:33:c9:17:2c:75:34:d0:d7:cd:d7:80:5f:33:0e:
                    1b:1e:a7:9d:3b:f7:e0:c6:41:a0:b1:2d:3c:0a:ee:
                    cd:a8:41:f6:69:8f:ae:5e:20:d4:11:ae:46:2c:3e:
                    df:7d:5b:06:41:97:4b:90:f9:7a:7d:8d:66:ce:4a:
                    f3:94:99:53:03:d7:4a:21:39:ac:16:85:9c:86:6d:
                    b6:0f:8e:1a:fa:65:db:fe:d4:42:03:5f:b1:51:28:
                    ee:8d:9d:77:a5:db:b0:e1:d0:bf:17:60:68:8b:c2:
                    e7:c1:1e:e9:0b:0e:87:6c:2a:54:53:06:48:75:9b:
                    f5:41:b2:e0:35:c3:3e:8f:ec:80:58:6d:8a:0f:40:
                    b6:61:a8:5b:16:61:da:5b:8c:35:ab:fc:70:ef:b2:
                    f1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0D:E8:40:D0:D3:51:E4:57:E8:CA:11:EC:9F:8B:61:07:3E:16:19
            X509v3 Authority Key Identifier:
                keyid:64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a35303a3a2f34342d3434203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         95:03:35:28:90:3b:08:34:8b:7a:05:2b:e3:cb:8d:d9:6f:31:
         45:6b:f9:bb:ba:4f:f8:bd:e6:af:80:89:ac:8e:bf:4e:d5:1f:
         45:04:f3:89:3b:25:1f:98:c3:2a:d4:83:4d:59:d1:31:8c:25:
         9d:73:9b:61:04:5a:42:d5:6c:4d:01:d7:3d:99:89:00:49:90:
         bc:5b:09:67:da:af:97:8e:a6:0e:15:40:f0:f0:1e:a8:ab:57:
         26:06:86:3f:1d:a7:9a:52:21:33:40:68:7a:61:18:97:af:38:
         25:97:47:8a:c2:bc:fd:be:42:03:bd:93:c7:79:bc:da:09:e0:
         6f:74:f4:c2:99:e3:36:db:34:e1:5f:6c:f6:ec:f8:ab:f7:95:
         04:c1:98:22:9d:56:da:22:19:77:e8:3c:54:20:80:63:a1:ab:
         77:c9:96:fb:3f:25:d2:fd:8f:11:37:04:e6:ff:fd:94:98:f5:
         22:18:0a:36:eb:d1:e2:2c:a6:f6:b3:90:2a:df:60:3d:4e:d8:
         1f:e4:d7:29:45:7e:d6:d7:71:b6:c4:8b:c6:50:fa:24:80:4e:
         93:b5:d3:b4:94:61:4b:74:3f:8b:5c:f3:68:47:0a:72:80:d6:
         bb:84:32:88:e8:06:83:34:73:09:11:8d:73:8f:da:8f:5b:28:
         c7:20:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----