Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EHAUUKyG38Noyn4U3nN9JqxcAaMqa7bDYNPVmwbS6bkn/0/323830343a3466343a3a2f33322d3332203d3e20323632373637.roa
File:                     323830343a3466343a3a2f33322d3332203d3e20323632373637.roa (raw, json)
Hash identifier:          2mbR4qudLZQSQ8QejOg85ssS1JDSMeW7UubgwxkfLAc=
Subject key identifier:   28:A9:11:13:A1:3E:53:E7:58:AF:8C:16:B1:AB:E7:6C:64:19:45:71
Certificate issuer:       /CN=91313AC4DF9E008EB6F6018432299232572EDB20
Certificate serial:       363C3C326A1BB0CB13C3E3861E5F39D036B20A5F
Authority key identifier: 91:31:3A:C4:DF:9E:00:8E:B6:F6:01:84:32:29:92:32:57:2E:DB:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91313AC4DF9E008EB6F6018432299232572EDB20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHAUUKyG38Noyn4U3nN9JqxcAaMqa7bDYNPVmwbS6bkn/0/323830343a3466343a3a2f33322d3332203d3e20323632373637.roa
Signing time:             Thu 21 Jul 2022 20:01:18 +0000
ROA not before:           Thu 21 Jul 2022 19:56:18 +0000
ROA not after:            Thu 20 Jul 2023 20:01:18 +0000
asID:                     262767
IP address blocks:        2804:4f4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3c:3c:32:6a:1b:b0:cb:13:c3:e3:86:1e:5f:39:d0:36:b2:0a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91313AC4DF9E008EB6F6018432299232572EDB20
        Validity
            Not Before: Jul 21 19:56:18 2022 GMT
            Not After : Jul 20 20:01:18 2023 GMT
        Subject: CN=28A91113A13E53E758AF8C16B1ABE76C64194571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:b4:6b:d7:06:22:34:a3:d8:07:2f:bd:84:
                    da:04:0f:de:a0:2f:97:2b:1f:ad:fa:de:fd:75:5a:
                    bf:ab:1d:3d:76:a6:fc:0c:8a:e4:69:52:8c:73:c6:
                    81:3a:9c:79:a8:01:0e:34:1b:64:49:8b:10:f7:e2:
                    1c:ad:84:62:8f:17:fb:ea:0c:c5:49:b8:de:28:e5:
                    82:a3:57:da:e4:a4:3a:1f:cd:32:3f:7b:90:bf:3d:
                    29:1b:68:4c:5b:90:80:6d:43:af:c1:ad:60:56:cf:
                    7e:d3:3c:87:8b:3f:c7:b7:a0:36:4c:a0:f1:a7:ba:
                    7b:ba:29:f8:50:90:ac:ce:8a:3c:19:b4:6d:27:31:
                    95:14:6e:39:e4:27:c3:9e:cf:f8:8a:a4:cf:13:74:
                    97:56:29:e1:d5:8d:1f:12:42:0b:79:21:62:cd:ff:
                    45:8a:76:ea:a2:e8:58:9b:c8:9e:b1:b5:9c:21:9a:
                    58:75:a3:52:1e:27:c2:4c:c3:79:cb:4c:72:ca:00:
                    7d:e9:4c:41:00:99:c6:13:d3:9c:f8:0f:27:5d:fe:
                    b1:f0:49:49:e5:4f:93:17:bc:16:9b:9e:2c:f6:90:
                    3a:44:bb:bf:fa:93:0b:44:1e:5d:9d:14:48:24:bb:
                    f1:f1:57:98:62:c5:b0:e6:85:a5:7f:c2:db:c7:7d:
                    b9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A9:11:13:A1:3E:53:E7:58:AF:8C:16:B1:AB:E7:6C:64:19:45:71
            X509v3 Authority Key Identifier:
                keyid:91:31:3A:C4:DF:9E:00:8E:B6:F6:01:84:32:29:92:32:57:2E:DB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHAUUKyG38Noyn4U3nN9JqxcAaMqa7bDYNPVmwbS6bkn/0/91313AC4DF9E008EB6F6018432299232572EDB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91313AC4DF9E008EB6F6018432299232572EDB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHAUUKyG38Noyn4U3nN9JqxcAaMqa7bDYNPVmwbS6bkn/0/323830343a3466343a3a2f33322d3332203d3e20323632373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:b8:5f:b6:60:c7:8a:64:c4:c2:e5:cc:b1:b9:75:47:8c:8c:
         57:ff:19:7b:69:61:5a:5c:30:df:9c:84:a3:f6:01:ff:cd:8c:
         e4:35:14:8d:79:98:9f:5c:23:32:c8:02:08:79:f0:b9:10:dc:
         bb:b9:74:16:6d:1f:08:a2:bb:72:ee:d3:a9:02:2a:cd:75:24:
         99:09:68:6a:9c:a8:e7:aa:36:94:62:95:d3:39:4c:8b:22:28:
         6d:c1:80:d6:65:31:e3:39:08:ac:0b:dd:34:2e:51:d2:28:23:
         68:43:f0:21:d0:b7:f0:7f:a0:53:38:37:6f:2b:45:88:3e:1d:
         ba:25:30:e2:6a:a1:58:b9:aa:bc:0b:1a:dd:cf:0a:07:f3:dc:
         22:01:ae:49:bd:dc:0d:1c:73:b4:2a:0e:d2:37:c6:f5:51:5f:
         09:e5:0e:14:42:a0:75:38:67:f1:5b:7c:9a:15:92:d6:7c:9b:
         e0:7c:b7:5f:5d:78:18:c1:61:df:39:25:fe:08:c8:93:c0:1c:
         e3:e2:ab:17:b1:aa:ba:9c:81:4c:2a:ca:a5:f9:23:69:61:3b:
         7b:d8:cb:3c:0c:06:0f:e6:60:45:54:b7:8e:3e:76:57:68:c4:
         cf:a0:45:b2:bb:51:e4:8f:54:64:dd:ad:ca:32:5c:b7:e3:60:
         ee:f9:6f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----