Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653831343a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a653831343a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          LohMNEX7iYIg3am7KXffmURC5eP49HfNxWUogLYDM/o=
Subject key identifier:   CB:E5:82:AD:F1:D1:CE:94:A3:B0:78:CE:AA:99:1C:F7:6C:0D:7C:E4
Certificate issuer:       /CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
Certificate serial:       656A0A0C8E6005DB797B14C6F6DC06DC1B7448D6
Authority key identifier: 64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653831343a3a2f34382d3438203d3e203238323630.roa
Signing time:             Wed 09 Jun 2021 18:09:21 +0000
ROA not before:           Wed 09 Jun 2021 18:04:21 +0000
ROA not after:            Wed 08 Jun 2022 18:09:21 +0000
asID:                     28260
IP address blocks:        2804:28e4:e814::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6a:0a:0c:8e:60:05:db:79:7b:14:c6:f6:dc:06:dc:1b:74:48:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
        Validity
            Not Before: Jun  9 18:04:21 2021 GMT
            Not After : Jun  8 18:09:21 2022 GMT
        Subject: CN=3082010A0282010100B5E0F255CA84174C1FB2B237867B171BB7017C8800294F220DB29A8776D0CC953A234F67F49B27E9B0043BF47B9304B571D365209D95CD4A603BB57C64EC9D701ABDDA8C14778F18B8C0E66ACBE03007801175A7E411F0AD1E062F30C119B1FCBA5D7C49AD0961EF452AF0F3EA87AE04B2920340AED7DB46AED7880FF6D38B278FABBE09510FBDFC6B8EB09AF668539443F59F21A3DE6F90FE0AD3EDFFDB8F98CD3AD3245B1A4C60EC1A385B66E6E0AC0528C1367A0F164A19D20EF7740623BC5C1FD6C3C17DA541FF771BEE107B18CF110CC92E357B19B1CE6D2C16DB7750F5776BC832BD530138D3E6FCE684AFEBA0B6D9C8C1D8A1B63D2B1B48E81C3387950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:f2:55:ca:84:17:4c:1f:b2:b2:37:86:7b:
                    17:1b:b7:01:7c:88:00:29:4f:22:0d:b2:9a:87:76:
                    d0:cc:95:3a:23:4f:67:f4:9b:27:e9:b0:04:3b:f4:
                    7b:93:04:b5:71:d3:65:20:9d:95:cd:4a:60:3b:b5:
                    7c:64:ec:9d:70:1a:bd:da:8c:14:77:8f:18:b8:c0:
                    e6:6a:cb:e0:30:07:80:11:75:a7:e4:11:f0:ad:1e:
                    06:2f:30:c1:19:b1:fc:ba:5d:7c:49:ad:09:61:ef:
                    45:2a:f0:f3:ea:87:ae:04:b2:92:03:40:ae:d7:db:
                    46:ae:d7:88:0f:f6:d3:8b:27:8f:ab:be:09:51:0f:
                    bd:fc:6b:8e:b0:9a:f6:68:53:94:43:f5:9f:21:a3:
                    de:6f:90:fe:0a:d3:ed:ff:db:8f:98:cd:3a:d3:24:
                    5b:1a:4c:60:ec:1a:38:5b:66:e6:e0:ac:05:28:c1:
                    36:7a:0f:16:4a:19:d2:0e:f7:74:06:23:bc:5c:1f:
                    d6:c3:c1:7d:a5:41:ff:77:1b:ee:10:7b:18:cf:11:
                    0c:c9:2e:35:7b:19:b1:ce:6d:2c:16:db:77:50:f5:
                    77:6b:c8:32:bd:53:01:38:d3:e6:fc:e6:84:af:eb:
                    a0:b6:d9:c8:c1:d8:a1:b6:3d:2b:1b:48:e8:1c:33:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E5:82:AD:F1:D1:CE:94:A3:B0:78:CE:AA:99:1C:F7:6C:0D:7C:E4
            X509v3 Authority Key Identifier:
                keyid:64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653831343a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:e814::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:1e:3e:6b:da:4a:94:04:b9:cf:db:df:62:60:64:36:d1:c6:
         d1:c6:c0:4b:4f:7d:46:59:fe:69:09:92:d1:7f:b8:00:a4:e0:
         43:67:7e:47:58:85:b9:3d:3a:57:bd:e9:c0:87:28:f9:2a:d0:
         d4:cd:aa:f1:12:6d:6c:14:87:f5:96:00:95:68:e2:d4:df:64:
         bd:a0:6f:b6:06:91:98:d7:f8:6e:03:8b:18:f7:70:cb:6e:d1:
         42:30:17:32:19:6e:26:d7:27:95:0c:09:b3:1f:ec:29:49:05:
         ef:ed:d7:a2:21:4d:49:c8:c1:d3:48:70:10:d9:a3:ef:3e:47:
         68:30:ba:fb:79:26:8f:88:e9:2c:25:a2:f4:69:b3:2d:97:27:
         1a:9e:f0:fb:80:84:43:04:fc:d1:f4:7a:8a:2d:60:2e:09:16:
         27:30:cb:d3:16:85:3c:29:61:dd:83:a1:6c:7f:f2:d7:1d:0e:
         18:d1:96:10:b9:2a:da:91:fd:9a:a0:15:c7:a5:47:76:24:0c:
         d0:1e:c2:d2:45:93:2e:ce:0d:d8:38:6a:b6:81:75:65:b1:c5:
         a2:ce:81:22:bc:44:03:76:34:c1:22:78:9a:a9:2a:86:84:14:
         94:f1:e8:8d:4d:91:ad:87:a0:cc:f4:a4:de:42:d6:c0:a8:ad:
         8f:d9:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----