Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/323830343a336539343a3a2f33382d3338203d3e20323636363037.roa
File:                     323830343a336539343a3a2f33382d3338203d3e20323636363037.roa (raw, json)
Hash identifier:          ZNM/Q5W8GudbXcE8/CCdtp5+nhLkh8DWMMgFUIRFM3o=
Subject key identifier:   02:8E:C8:95:D0:07:20:D0:74:50:49:07:6D:C8:0B:BF:31:98:83:F3
Certificate issuer:       /CN=4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96
Certificate serial:       085AD35B5FBFFC835706D1DC961E6EE4611E37BF
Authority key identifier: 4C:FB:DC:F7:FE:7E:54:B8:9F:D3:C7:FA:AC:3A:D7:82:B9:8E:AF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/323830343a336539343a3a2f33382d3338203d3e20323636363037.roa
Signing time:             Fri 11 Nov 2022 12:18:29 +0000
ROA not before:           Fri 11 Nov 2022 12:13:29 +0000
ROA not after:            Fri 10 Nov 2023 12:18:29 +0000
asID:                     266607
IP address blocks:        2804:3e94::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5a:d3:5b:5f:bf:fc:83:57:06:d1:dc:96:1e:6e:e4:61:1e:37:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96
        Validity
            Not Before: Nov 11 12:13:29 2022 GMT
            Not After : Nov 10 12:18:29 2023 GMT
        Subject: CN=028EC895D00720D0745049076DC80BBF319883F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:0f:60:7a:36:f3:0d:90:3c:dd:93:6f:8f:
                    1f:40:2e:24:fa:3f:21:f9:38:78:2c:5d:96:ab:8d:
                    b5:d6:e6:ec:d3:e6:3a:44:99:81:1d:f1:dc:6b:a6:
                    8c:dd:81:2f:d8:74:9b:b3:ae:20:32:74:36:5b:5f:
                    06:37:a2:3b:ac:b3:be:c8:d1:7b:d3:7b:11:98:fb:
                    86:79:bd:bd:43:10:82:32:38:78:b6:bd:1e:53:e8:
                    27:6e:21:3d:b3:b3:3a:bf:a4:ad:0a:c7:eb:cf:a7:
                    1d:ad:21:8c:62:9f:ad:9a:71:df:5b:fb:a6:22:a9:
                    84:7d:6b:35:83:ea:4d:e6:18:3d:17:3c:d4:7d:01:
                    7c:ae:5d:68:8c:b8:fa:65:9f:2c:04:80:aa:70:99:
                    13:98:3d:bf:dd:54:47:cb:8d:70:3a:0f:a4:e2:ea:
                    b5:80:60:80:49:27:97:64:9b:c2:da:c5:bc:0d:c4:
                    64:4e:a1:ef:48:cd:eb:b8:02:34:2e:72:c6:e7:b0:
                    8c:ec:24:fa:ac:3b:bf:2a:2f:cc:40:73:cd:f0:b1:
                    a4:77:fb:85:d0:61:4f:6b:a0:7f:3f:8c:40:33:db:
                    25:69:98:bc:ae:c0:1b:e1:4e:3a:22:65:99:ed:3e:
                    d1:1c:87:59:1b:00:d1:f2:be:81:2b:5e:17:56:ed:
                    0c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8E:C8:95:D0:07:20:D0:74:50:49:07:6D:C8:0B:BF:31:98:83:F3
            X509v3 Authority Key Identifier:
                keyid:4C:FB:DC:F7:FE:7E:54:B8:9F:D3:C7:FA:AC:3A:D7:82:B9:8E:AF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/323830343a336539343a3a2f33382d3338203d3e20323636363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e94::/38

    Signature Algorithm: sha256WithRSAEncryption
         7b:d2:cb:16:b1:2e:8c:f8:c7:6e:4f:ae:dc:5d:ca:21:de:99:
         64:a9:ce:f6:1b:29:fa:e3:15:3f:b8:79:00:59:e6:15:49:75:
         8d:7a:7b:0c:99:85:14:dc:00:92:97:90:8a:11:df:e3:89:c9:
         16:3e:c7:2c:74:4f:d3:fa:2f:22:98:7f:84:f0:39:8f:dd:e7:
         65:e3:a4:cd:86:1d:f4:f8:ba:51:84:d7:47:34:e2:44:a6:9b:
         45:05:3e:3d:94:92:79:71:06:c5:b7:5a:fb:8e:c7:f8:39:2b:
         29:98:d3:4f:f5:cd:0c:52:18:1f:64:88:5d:c7:a2:02:e0:f8:
         5b:7d:d7:73:be:bc:e2:b3:83:90:c6:1e:f6:28:53:9b:77:46:
         42:07:8b:fb:7b:30:76:c3:90:4d:f9:ec:1a:3e:e5:b7:28:94:
         b5:7a:77:3c:b0:57:f9:37:fe:a5:df:1a:4b:cb:67:78:70:cc:
         0e:e4:ec:50:f8:e7:3c:31:9a:be:8c:79:1e:6a:59:7a:6c:a0:
         d5:5f:a9:eb:ab:63:f7:c6:73:a6:1a:00:c3:da:59:ae:2e:83:
         32:1d:01:63:c1:2f:af:30:a6:9c:78:f2:a9:24:a4:c4:c7:c9:
         9e:25:e4:57:4d:0c:eb:00:5d:4c:ed:36:38:0a:99:91:ca:7e:
         0e:dd:e6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----