Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/323830343a326334343a3a2f33322d3336203d3e20323635323037.roa
File:                     323830343a326334343a3a2f33322d3336203d3e20323635323037.roa (raw, json)
Hash identifier:          QTnAqXmK03NEeVJstUBmpEGpKmRZSTvKAnGlX2m4JAQ=
Subject key identifier:   21:4D:88:60:F1:D8:CC:DB:8E:02:3B:11:0B:00:43:35:48:88:E7:7B
Certificate issuer:       /CN=8F599B5DF56CD57359415BB8A38402E54100108B
Certificate serial:       05A0F6B30D2B8E9F5F6C550AD28A537FB63E5037
Authority key identifier: 8F:59:9B:5D:F5:6C:D5:73:59:41:5B:B8:A3:84:02:E5:41:00:10:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F599B5DF56CD57359415BB8A38402E54100108B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/323830343a326334343a3a2f33322d3336203d3e20323635323037.roa
Signing time:             Sat 19 Nov 2022 12:16:26 +0000
ROA not before:           Sat 19 Nov 2022 12:11:26 +0000
ROA not after:            Sat 18 Nov 2023 12:16:26 +0000
asID:                     265207
IP address blocks:        2804:2c44::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a0:f6:b3:0d:2b:8e:9f:5f:6c:55:0a:d2:8a:53:7f:b6:3e:50:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F599B5DF56CD57359415BB8A38402E54100108B
        Validity
            Not Before: Nov 19 12:11:26 2022 GMT
            Not After : Nov 18 12:16:26 2023 GMT
        Subject: CN=214D8860F1D8CCDB8E023B110B0043354888E77B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b6:0b:7f:8d:7b:90:7c:a0:46:06:e6:09:97:
                    25:ac:a2:34:49:41:f0:e3:77:d2:d0:31:bb:1f:4a:
                    8b:e4:a8:a6:c6:5e:75:9e:9c:73:00:6f:ef:cc:d5:
                    8f:ab:6f:58:40:b6:64:17:b3:60:ab:f4:ff:b4:70:
                    d9:ab:79:82:2f:c2:12:c3:97:3b:52:5b:19:61:4d:
                    cf:ee:70:f8:41:2d:2a:0a:f6:f9:77:7c:2c:3a:c2:
                    45:77:66:b2:4f:73:b4:a2:a8:25:d3:1a:4c:5d:9c:
                    4b:5e:63:be:37:84:2c:b2:ea:d0:67:ef:a7:ed:82:
                    6f:ff:74:39:72:76:df:98:84:79:b3:48:f1:69:24:
                    b9:d1:27:c5:0a:1d:d1:12:92:d5:da:6f:08:59:03:
                    e0:22:fe:63:3a:98:be:05:f1:90:1a:58:df:6e:f1:
                    ca:19:ec:92:a3:36:c0:5c:a2:26:16:b3:b3:55:1e:
                    8b:c4:f2:a1:e6:02:4a:ed:1e:dc:cc:64:e6:a0:19:
                    67:5b:8c:bb:03:95:de:fe:86:71:c6:d1:2f:9e:56:
                    55:f9:80:bd:0f:95:18:28:1a:4b:d1:88:d5:0e:13:
                    3d:23:ae:d5:55:ab:a6:97:fb:d1:c5:c8:62:8c:e6:
                    9d:2e:57:ca:cd:93:8e:8c:f6:a6:55:08:7a:24:17:
                    23:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4D:88:60:F1:D8:CC:DB:8E:02:3B:11:0B:00:43:35:48:88:E7:7B
            X509v3 Authority Key Identifier:
                keyid:8F:59:9B:5D:F5:6C:D5:73:59:41:5B:B8:A3:84:02:E5:41:00:10:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/8F599B5DF56CD57359415BB8A38402E54100108B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F599B5DF56CD57359415BB8A38402E54100108B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/323830343a326334343a3a2f33322d3336203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c44::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:9c:ae:94:04:2d:aa:9c:2b:9e:15:65:0c:c7:03:8a:a0:8c:
         24:cd:e5:a9:ae:99:db:87:32:99:e6:02:e1:27:e4:71:96:42:
         de:54:23:98:ae:3d:75:c2:ac:cc:bb:c7:d5:28:fd:c2:0d:2d:
         14:96:2d:ad:03:79:5a:4c:c8:0c:49:b8:8c:c1:e6:61:e9:06:
         b2:a9:58:b3:9c:fd:ef:5b:4e:b6:20:d8:34:56:3f:11:69:83:
         6e:01:36:c8:b1:98:a4:9c:78:a5:f1:b4:7c:16:97:b7:11:07:
         d9:72:c1:60:aa:46:c9:39:c4:4b:cb:2f:e5:5f:94:01:89:8e:
         20:17:6e:c5:8b:ac:ff:f2:41:30:de:24:c3:be:cd:b4:9b:c6:
         47:69:51:7c:73:e9:a0:39:69:93:3a:9a:46:64:94:1e:b9:4e:
         da:cb:0a:ba:08:70:a5:00:90:71:55:9e:7d:65:4e:d3:46:d9:
         2b:c6:43:58:0e:86:5f:89:1d:37:ef:2c:00:e9:c6:c1:37:5e:
         c3:64:fa:c9:9e:4f:27:cf:91:c2:88:e1:9a:5a:e7:d3:19:11:
         d7:1b:40:fa:4f:74:62:80:60:bd:5e:cc:e1:0d:55:09:1e:4d:
         a9:c2:83:e8:37:19:a9:34:3d:b4:da:a2:a1:1d:bf:1b:f8:bb:
         b1:2d:d2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----