Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a363030303a3a2f34382d3438203d3e20323634343634.roa
File:                     323830343a323031383a363030303a3a2f34382d3438203d3e20323634343634.roa (raw, json)
Hash identifier:          2KnhSDne66DOvsk+NjOSKeKe/cOuxyuB7uSG1nHwAWA=
Subject key identifier:   AC:87:D3:45:8A:EF:0B:B6:16:60:48:B4:30:5B:DD:B7:DD:A9:0F:3A
Certificate issuer:       /CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
Certificate serial:       229BCAE3B125CDCEA893F1C180804A287572CEB8
Authority key identifier: 91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a363030303a3a2f34382d3438203d3e20323634343634.roa
Signing time:             Fri 15 Oct 2021 13:00:00 +0000
ROA not before:           Fri 15 Oct 2021 12:55:00 +0000
ROA not after:            Sat 15 Oct 2022 13:00:00 +0000
asID:                     264464
IP address blocks:        2804:2018:6000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9b:ca:e3:b1:25:cd:ce:a8:93:f1:c1:80:80:4a:28:75:72:ce:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
        Validity
            Not Before: Oct 15 12:55:00 2021 GMT
            Not After : Oct 15 13:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:f1:c4:b3:3a:25:8a:49:7b:69:25:d4:9f:
                    e6:98:91:52:b6:e9:90:8a:a8:a4:ed:2a:0c:88:10:
                    25:18:16:d4:c3:e2:92:a7:b0:35:0a:c5:7e:6c:be:
                    fe:49:04:8c:89:55:99:ea:38:71:6b:c9:d0:7d:ec:
                    df:db:ae:2a:e0:78:5d:0e:1d:d2:d8:82:eb:02:f3:
                    31:bc:9b:62:ab:54:64:ce:35:78:57:ba:65:fd:12:
                    c0:af:d7:83:77:bb:32:23:a6:4c:84:69:47:27:71:
                    2a:44:5c:8f:72:d6:99:af:e4:97:c8:e5:19:34:29:
                    af:69:bb:86:0f:67:75:af:b0:3e:03:70:a3:d9:1e:
                    2f:0e:40:8e:80:5f:02:5e:e4:e3:a4:66:dc:21:95:
                    2d:ac:be:be:9a:2f:72:90:90:50:fa:54:84:11:e6:
                    af:bb:89:d2:f0:6a:ea:fb:8b:07:2e:ab:12:39:58:
                    58:7d:c2:6f:fa:e2:a8:5f:35:bb:b6:54:bd:7c:c7:
                    69:05:de:30:af:8f:a4:0e:17:e4:28:16:cc:eb:6f:
                    6b:1a:ce:83:30:c8:74:78:df:1c:e2:f9:d5:e8:70:
                    2f:64:6f:98:03:2a:76:f6:24:87:03:ec:64:be:2b:
                    bc:76:e4:91:68:e1:2f:68:ce:b6:78:d1:ef:4d:52:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:87:D3:45:8A:EF:0B:B6:16:60:48:B4:30:5B:DD:B7:DD:A9:0F:3A
            X509v3 Authority Key Identifier:
                keyid:91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a363030303a3a2f34382d3438203d3e20323634343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2018:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:f7:83:b2:07:e4:08:7f:58:9d:ce:f2:70:3a:1d:13:53:16:
         c2:d8:43:e9:1d:fb:79:65:18:b9:20:25:72:b7:d4:f4:7c:5e:
         73:f6:7d:21:53:3a:76:5c:e1:77:8e:16:3e:3f:d7:2e:fc:c9:
         1a:79:25:13:1b:c9:51:67:29:03:71:0f:51:a8:d5:c8:60:b0:
         81:b1:7e:f6:78:fc:f5:33:1c:0d:46:dc:dc:a7:eb:ee:8e:29:
         62:9c:e7:52:6e:a2:a6:29:ff:80:87:d5:eb:df:a5:04:a1:db:
         c6:1a:55:8f:2c:76:4e:b5:4c:77:a3:45:b1:34:fc:3c:f1:6c:
         dc:77:ed:72:f0:b7:c2:f5:45:10:7e:6b:be:b4:62:4b:c5:03:
         fa:e4:8c:8e:b2:5e:49:49:8b:43:3f:18:26:93:1c:8c:f4:67:
         64:f9:3b:27:e5:4a:00:57:38:5d:a2:96:7d:5c:a3:1b:e5:b3:
         1a:23:1c:bf:e6:0e:cb:a4:1b:59:ef:92:d9:15:9f:16:17:e4:
         df:11:d7:af:a3:c6:f8:0f:ac:96:8c:11:a9:18:f8:1a:8f:0f:
         44:3d:57:38:70:d9:f2:a2:d7:e2:37:8c:cf:bf:a4:76:fa:0a:
         0e:1f:5e:c4:ef:a9:70:34:e9:35:ef:df:89:1d:9b:d1:f0:54:
         59:c8:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----