Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a363130303a3a2f34332d3433203d3e20323634343634.roa
File:                     323830343a323031383a363130303a3a2f34332d3433203d3e20323634343634.roa (raw, json)
Hash identifier:          M+ZZHh5kii8giT38ggdFCcM4hfchEtOs0A8pIHH2bF8=
Subject key identifier:   1D:F0:33:CA:B5:70:D2:DE:1A:2F:5F:44:A5:FE:66:FD:CB:F8:E7:5C
Certificate issuer:       /CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
Certificate serial:       08C8A5522199895D85FD70CF0B9BE8F047A40F10
Authority key identifier: 91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a363130303a3a2f34332d3433203d3e20323634343634.roa
Signing time:             Fri 15 Oct 2021 13:00:01 +0000
ROA not before:           Fri 15 Oct 2021 12:55:01 +0000
ROA not after:            Sat 15 Oct 2022 13:00:01 +0000
asID:                     264464
IP address blocks:        2804:2018:6100::/43 maxlen: 43
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c8:a5:52:21:99:89:5d:85:fd:70:cf:0b:9b:e8:f0:47:a4:0f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
        Validity
            Not Before: Oct 15 12:55:01 2021 GMT
            Not After : Oct 15 13:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:34:9f:1e:39:5a:51:94:7b:fa:38:4f:48:af:
                    b0:87:c0:4c:f1:47:4a:29:cc:26:a2:e0:fa:e5:5d:
                    e5:5f:06:e4:f5:29:d3:56:99:dd:19:f0:0c:c1:58:
                    e4:92:91:29:fa:1a:d5:fa:60:e4:4d:2f:b4:38:ef:
                    f2:17:77:f7:0f:6d:7c:a0:79:5a:19:69:ff:a8:bc:
                    96:10:1e:a0:9e:78:ac:9b:2f:f6:0b:b2:95:d6:75:
                    51:b8:2e:14:46:c4:98:a5:ed:f7:0a:a2:e4:11:ce:
                    f3:92:58:a3:dc:7f:b8:24:9b:d2:90:eb:87:e6:8a:
                    19:d7:29:e5:14:31:b0:46:93:a9:16:98:63:53:a0:
                    5e:af:d1:18:63:49:85:ec:c5:4c:6f:f2:24:a0:0d:
                    e0:82:17:d0:ef:09:f5:43:7f:99:bb:8f:a5:3b:77:
                    7b:f3:98:e2:2f:d8:c8:0b:7b:b4:66:61:1e:d5:d5:
                    55:a2:5f:60:47:5b:95:b8:c8:fc:39:e5:35:79:6d:
                    58:79:0d:d0:37:c0:6d:12:f7:2a:00:26:fb:27:f5:
                    cf:47:31:33:c7:82:52:dd:3f:73:df:e5:da:d9:ad:
                    d0:76:7d:55:af:b9:db:67:39:a7:be:f3:1e:64:cc:
                    13:53:16:50:85:b2:21:80:e9:80:c9:56:4f:7d:e7:
                    04:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F0:33:CA:B5:70:D2:DE:1A:2F:5F:44:A5:FE:66:FD:CB:F8:E7:5C
            X509v3 Authority Key Identifier:
                keyid:91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/323830343a323031383a363130303a3a2f34332d3433203d3e20323634343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2018:6100::/43

    Signature Algorithm: sha256WithRSAEncryption
         0b:8d:93:6a:3e:02:4b:60:f8:fa:7e:51:7f:d1:1c:8a:10:bf:
         76:84:1e:83:86:d0:ea:89:12:7d:7b:06:a4:5c:8f:57:d0:73:
         94:df:56:77:47:49:19:3d:88:21:78:a8:99:bb:f9:0a:4b:13:
         4d:bc:9a:25:88:fc:6c:79:35:55:a8:7a:ae:83:0a:8f:7a:8e:
         c5:d0:17:8b:46:3a:17:77:d1:6a:7c:d9:e5:f9:48:76:ac:22:
         96:66:7e:8e:41:83:a3:86:29:68:fb:e7:b5:69:f0:aa:ff:ec:
         e9:a1:40:35:04:25:fd:00:71:28:7b:c5:ed:1e:22:ce:fc:5c:
         50:2e:ee:67:64:94:5a:46:07:0c:45:8a:16:1a:60:20:5e:09:
         6d:d4:ff:14:58:69:6b:84:78:79:cb:9d:94:52:ce:04:5e:ec:
         1d:aa:c2:d8:3a:c9:51:f3:46:e0:64:6d:d0:97:10:0c:c6:ed:
         8b:44:dd:e6:9f:e8:48:58:e9:b2:1f:ee:69:c0:45:a5:91:c7:
         d3:b2:8b:c1:9d:a9:2b:15:07:96:62:a9:99:11:a0:dc:a3:df:
         99:31:7d:56:89:ca:6c:df:2f:6c:a0:3e:9f:a3:7f:9d:8a:0f:
         df:20:a4:f5:3c:d4:2f:00:b7:5a:28:f5:6c:29:49:4e:c1:1f:
         2d:1b:b4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----