Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/323030313a313261343a663930303a3a2f34302d3430203d3e203430333536.roa
File:                     323030313a313261343a663930303a3a2f34302d3430203d3e203430333536.roa (raw, json)
Hash identifier:          U4g196KF/03RAgV2lENyqqZpvVZrMz/jcUsoV4uncPE=
Subject key identifier:   81:1F:02:0D:F4:62:FA:70:A7:1B:3B:A1:BF:6E:AA:22:CC:DD:89:EE
Certificate issuer:       /CN=FFE926797ED6B4B77254E574E1E76238A7293520
Certificate serial:       41DF633EA5A9F09A910BFFB31E73DD5DF220547D
Authority key identifier: FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/323030313a313261343a663930303a3a2f34302d3430203d3e203430333536.roa
Signing time:             Tue 11 Oct 2022 16:56:46 +0000
ROA not before:           Tue 11 Oct 2022 16:51:46 +0000
ROA not after:            Tue 10 Oct 2023 16:56:46 +0000
asID:                     40356
IP address blocks:        2001:12a4:f900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:df:63:3e:a5:a9:f0:9a:91:0b:ff:b3:1e:73:dd:5d:f2:20:54:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE926797ED6B4B77254E574E1E76238A7293520
        Validity
            Not Before: Oct 11 16:51:46 2022 GMT
            Not After : Oct 10 16:56:46 2023 GMT
        Subject: CN=811F020DF462FA70A71B3BA1BF6EAA22CCDD89EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:26:a6:81:6b:d2:5e:7b:0e:7c:3f:97:d4:46:
                    c3:e1:b9:ca:e8:a7:4d:9f:09:9e:0e:5b:82:75:e3:
                    6b:17:de:bc:56:52:93:cd:aa:3d:ab:e6:36:b1:ab:
                    a2:7d:d0:60:51:53:80:58:ae:36:9d:9e:b6:9d:bf:
                    72:93:7f:01:00:e4:96:8c:de:a9:aa:c7:07:5c:df:
                    8d:69:27:eb:eb:1c:65:9d:13:23:82:9a:75:45:4f:
                    b5:43:91:bb:eb:1f:d1:53:66:87:4c:57:01:38:fb:
                    47:cb:1c:55:c8:bf:a4:3d:a0:0c:a3:33:50:34:73:
                    8c:45:d6:38:81:e9:18:74:fb:0b:93:e7:ab:35:16:
                    5c:2f:8e:77:6f:30:4f:f4:1a:41:6a:c7:a5:f4:70:
                    7d:fc:6b:34:69:f5:e8:24:5d:3e:41:54:dc:f2:70:
                    92:17:e9:a8:61:9c:22:9e:be:64:41:c6:cc:44:a3:
                    ea:f0:e6:ee:f1:cd:6f:06:a4:4d:02:79:d7:6f:79:
                    c1:fb:e0:b5:34:b7:99:92:56:70:40:0b:c5:76:7e:
                    19:60:53:b8:94:58:2c:a9:76:64:98:6a:d0:1a:5e:
                    f8:da:2e:06:69:1a:5a:b2:c3:90:ac:96:ed:1a:99:
                    99:fe:54:d8:a1:f2:7d:7d:fd:59:a6:cd:0e:18:8d:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1F:02:0D:F4:62:FA:70:A7:1B:3B:A1:BF:6E:AA:22:CC:DD:89:EE
            X509v3 Authority Key Identifier:
                keyid:FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/FFE926797ED6B4B77254E574E1E76238A7293520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/323030313a313261343a663930303a3a2f34302d3430203d3e203430333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12a4:f900::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:08:ec:39:3b:9b:c5:4a:94:cf:c4:f4:c2:a6:21:7b:13:d9:
         88:ec:3b:a1:7a:bb:1d:52:21:cc:64:23:a9:3d:fb:e7:10:bb:
         ff:7d:a2:55:e2:82:18:85:2a:11:a7:34:12:5b:13:bb:76:ea:
         88:e0:d0:c7:6c:90:7e:18:ef:b7:e6:78:2d:bb:57:93:76:14:
         da:b3:e1:45:25:1e:b8:ba:ff:d0:ec:ac:96:4f:ff:35:9e:ce:
         8c:b1:fc:c0:e6:e8:99:d9:68:0c:6e:3c:33:27:ae:b3:b3:ba:
         12:02:62:30:46:35:83:2a:a6:d3:d0:32:76:ec:46:0b:48:8a:
         4a:72:55:88:22:72:14:d3:7c:71:93:9d:e6:56:10:2c:72:0e:
         17:bf:4f:d1:80:6b:fe:0a:1d:6e:e5:50:6a:aa:ec:86:bb:53:
         96:f9:36:68:0c:74:64:30:b2:80:84:97:c8:52:45:45:70:26:
         b8:9d:5b:1a:fc:58:af:ba:cf:d5:66:39:b0:43:cf:f8:97:28:
         b4:00:ab:8e:7b:bd:a6:8a:ae:f4:04:0c:b0:d9:5f:27:43:38:
         48:94:5d:33:9f:62:c4:2b:dd:76:46:54:5d:8b:32:fe:28:02:
         1e:f1:73:dc:d6:06:89:10:b0:c1:62:6e:ac:9b:0a:e9:ee:dd:
         4b:3e:20:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----