Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a333130303a3a2f34332d3433203d3e20323634343634.roa
File:                     323830343a323031383a333130303a3a2f34332d3433203d3e20323634343634.roa (raw, json)
Hash identifier:          1KPlsqey5JqNiEva3mWPOZ5XYEfsNf911KjyDwEbmZk=
Subject key identifier:   DD:E2:67:52:84:23:5E:E4:52:2A:C8:E3:CE:95:3C:BD:B4:32:90:17
Certificate issuer:       /CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
Certificate serial:       40CC2E84FE1B2A3D5BE8EC8A62E4D05E250AE429
Authority key identifier: 91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a333130303a3a2f34332d3433203d3e20323634343634.roa
Signing time:             Fri 15 Oct 2021 13:00:00 +0000
ROA not before:           Fri 15 Oct 2021 12:55:00 +0000
ROA not after:            Sat 15 Oct 2022 13:00:00 +0000
asID:                     264464
IP address blocks:        2804:2018:3100::/43 maxlen: 43
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:cc:2e:84:fe:1b:2a:3d:5b:e8:ec:8a:62:e4:d0:5e:25:0a:e4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
        Validity
            Not Before: Oct 15 12:55:00 2021 GMT
            Not After : Oct 15 13:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:c9:d2:34:46:a6:15:3c:a8:4b:17:0d:95:
                    b4:bd:40:9b:5a:28:77:17:64:f1:3b:09:00:34:34:
                    36:a9:bd:ae:55:2a:a7:9e:42:05:4d:a0:e9:6b:14:
                    12:c4:7c:96:e7:df:9e:82:f6:ca:ec:2a:ba:0e:89:
                    85:ec:10:73:d5:6b:3d:c0:a2:6d:00:33:f5:ee:5f:
                    a2:79:af:83:31:bf:a0:38:9a:5c:f7:7c:eb:31:4f:
                    e4:b8:bc:49:87:48:81:fc:64:61:f5:ed:33:4e:11:
                    79:98:e3:4e:1a:19:fb:81:dd:59:67:4f:29:a5:bf:
                    43:5c:7d:b3:0d:bb:0d:61:ff:39:a2:60:84:d6:44:
                    a5:66:45:fc:47:49:f7:8c:9b:ae:66:1e:6c:17:db:
                    23:34:73:59:06:a7:3f:7a:90:96:1a:92:cd:2d:8f:
                    59:9c:4e:18:5b:77:69:62:3f:fc:7e:b4:00:2f:1d:
                    d0:9d:b7:e0:50:c9:f2:09:aa:1c:b6:ac:77:7e:21:
                    08:f2:e7:2a:06:26:ce:9e:ca:ef:12:38:cd:47:e0:
                    29:39:3b:08:ee:93:6f:27:2f:e5:a7:dd:17:95:c4:
                    8c:de:9d:1c:b8:5d:5c:92:c6:15:3d:6e:64:42:39:
                    2e:18:d4:d6:1f:59:54:97:1a:b5:58:19:27:ce:84:
                    5c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E2:67:52:84:23:5E:E4:52:2A:C8:E3:CE:95:3C:BD:B4:32:90:17
            X509v3 Authority Key Identifier:
                keyid:91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a333130303a3a2f34332d3433203d3e20323634343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2018:3100::/43

    Signature Algorithm: sha256WithRSAEncryption
         18:1b:f0:d7:bb:84:f1:6a:3d:98:4b:1b:b5:ac:38:21:bf:35:
         77:1e:fa:1d:1f:1c:e6:29:9c:5b:50:2f:b2:d1:b4:43:4f:a6:
         90:fc:ad:3a:a0:ff:23:bf:06:bb:4c:c7:59:b2:07:f7:c9:7f:
         ad:27:19:8a:74:ac:95:4a:fc:75:dd:d1:b4:37:68:00:c1:6c:
         7e:38:a2:b8:b2:2b:9e:6c:5c:19:72:97:6e:08:19:68:2b:39:
         87:8c:48:db:69:c5:b4:83:67:b3:51:2e:09:0c:30:0a:03:2b:
         ee:31:50:3a:67:3d:68:45:b0:21:e8:3c:2b:01:7e:45:10:74:
         85:7e:9a:cd:af:87:66:c1:25:53:d8:26:94:4e:ed:19:76:69:
         9e:23:56:7e:51:d8:1f:64:61:9e:0c:bd:cc:5b:52:b1:1a:3b:
         e5:81:8f:3b:ca:82:7c:bc:2f:df:2a:4e:0e:4a:c1:b5:78:29:
         a2:d6:e2:d5:71:dc:e3:80:10:63:43:6b:05:77:fc:30:4a:41:
         41:4d:d9:fd:e9:0e:2a:52:f0:f8:82:53:99:34:d2:db:95:9a:
         55:f3:6f:dc:b5:f3:1c:9b:ba:0c:dc:8b:4c:fd:31:34:f5:12:
         37:eb:47:01:e9:dc:21:95:e6:3b:21:7b:5e:d5:39:b9:16:07:
         b8:f7:ff:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----