Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqi5hF6M1Pmcyrjo2iDDnPB5rfUQpde9LkatGLnLEy1r/0/323830343a356235303a3a2f33322d3438203d3e20323638383334.roa
File:                     323830343a356235303a3a2f33322d3438203d3e20323638383334.roa (raw, json)
Hash identifier:          hSSVnCoTCA+21GNgxKQnFWXZjNt02YDvVQGjkfgkbvg=
Subject key identifier:   88:68:59:40:4A:08:C5:FD:D7:30:78:B2:D4:1A:3F:0C:7A:5D:22:B3
Certificate issuer:       /CN=CF6F651962E513C0566982D037B8C2B9D63509F0
Certificate serial:       7438E57E5AF074018DF90265208B5B46A86BDF58
Authority key identifier: CF:6F:65:19:62:E5:13:C0:56:69:82:D0:37:B8:C2:B9:D6:35:09:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF6F651962E513C0566982D037B8C2B9D63509F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqi5hF6M1Pmcyrjo2iDDnPB5rfUQpde9LkatGLnLEy1r/0/323830343a356235303a3a2f33322d3438203d3e20323638383334.roa
Signing time:             Thu 07 Apr 2022 23:20:15 +0000
ROA not before:           Thu 07 Apr 2022 23:15:15 +0000
ROA not after:            Fri 07 Apr 2023 23:20:15 +0000
asID:                     268834
IP address blocks:        2804:5b50::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:38:e5:7e:5a:f0:74:01:8d:f9:02:65:20:8b:5b:46:a8:6b:df:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF6F651962E513C0566982D037B8C2B9D63509F0
        Validity
            Not Before: Apr  7 23:15:15 2022 GMT
            Not After : Apr  7 23:20:15 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:d8:47:2b:a3:08:b7:72:3e:d2:00:55:e5:
                    84:54:df:f9:2d:98:07:4b:00:50:70:68:06:7d:72:
                    45:96:28:1e:f5:e1:0a:ad:2d:da:5c:a9:4e:d7:62:
                    ad:ff:33:1b:41:3c:99:53:5f:52:f8:25:d7:d6:ab:
                    d6:e8:29:3d:5e:fa:ec:17:c9:6b:1d:5c:84:38:a6:
                    69:71:71:4d:e7:d6:a2:36:75:6c:63:70:e9:67:df:
                    22:e9:1d:c0:c5:9e:41:cb:40:fe:62:02:46:1a:83:
                    ef:ec:8d:e6:6e:fc:ee:be:31:4e:bf:87:c3:8c:50:
                    6e:11:6e:82:65:17:c9:43:45:bd:15:aa:89:b1:c5:
                    01:60:9e:dc:d5:fa:a7:97:99:4a:97:a0:fc:6d:4f:
                    58:55:72:ed:9b:3f:13:1f:66:6f:ec:bb:f2:5f:b4:
                    c5:75:15:fb:ed:6c:5d:d3:c3:ff:28:82:4b:81:e1:
                    50:23:92:60:bf:69:a9:e1:2d:dc:89:88:98:5c:f1:
                    ff:2c:49:84:19:5c:83:50:96:cd:55:1f:b7:2b:96:
                    3c:ab:09:38:3c:6d:f4:92:11:c3:70:de:2b:34:4c:
                    ea:db:ae:09:64:98:6c:da:44:4b:a7:7a:d6:96:10:
                    8c:60:79:be:c0:eb:89:57:fc:d1:b6:b6:62:42:59:
                    af:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:68:59:40:4A:08:C5:FD:D7:30:78:B2:D4:1A:3F:0C:7A:5D:22:B3
            X509v3 Authority Key Identifier:
                keyid:CF:6F:65:19:62:E5:13:C0:56:69:82:D0:37:B8:C2:B9:D6:35:09:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqi5hF6M1Pmcyrjo2iDDnPB5rfUQpde9LkatGLnLEy1r/0/CF6F651962E513C0566982D037B8C2B9D63509F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF6F651962E513C0566982D037B8C2B9D63509F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqi5hF6M1Pmcyrjo2iDDnPB5rfUQpde9LkatGLnLEy1r/0/323830343a356235303a3a2f33322d3438203d3e20323638383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b50::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:dc:2d:4a:b4:c9:79:15:80:e1:26:db:bd:e4:1d:a4:f3:2f:
         4e:93:ec:d5:70:a5:21:a1:5a:0a:2e:78:1b:fc:0c:c2:70:79:
         06:e7:c9:53:17:59:7d:f2:e3:34:82:aa:38:ba:ff:fc:56:88:
         82:13:bd:3d:85:57:dd:9a:8d:e9:eb:b1:e9:9b:e0:77:19:4d:
         c9:ab:21:9d:06:fb:e3:46:20:c5:c9:7c:a8:e1:17:16:c5:90:
         97:3a:26:19:8a:25:8f:cc:d1:ed:da:75:49:e5:f6:86:8d:46:
         6d:5b:26:e3:53:7f:e6:ee:a1:0d:23:b2:7c:1f:0b:f7:e0:44:
         f0:b8:68:4d:1b:ae:fe:e2:b4:82:3a:23:f7:e6:0d:39:04:73:
         a1:77:09:7b:93:bc:2b:9d:f5:ea:a4:3b:f6:10:35:f3:a3:43:
         14:bb:ef:4a:10:c6:1f:45:5f:90:43:5f:15:65:a3:ac:90:0c:
         43:51:9a:92:5a:3d:23:8a:d1:f9:b9:73:37:b3:0f:11:ac:2a:
         cb:d5:a1:23:ac:c3:f5:90:f5:cd:7b:73:4a:cd:04:cd:07:dd:
         c8:a8:a5:eb:5f:b7:a5:21:19:27:61:04:36:3f:db:81:9d:80:
         ca:e1:5f:00:8f:52:95:73:48:58:0e:4a:dd:57:c8:f0:5c:f3:
         a5:6c:44:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----