Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/323830343a376438343a633030303a3a2f33362d3336203d3e20323731353636.roa
File:                     323830343a376438343a633030303a3a2f33362d3336203d3e20323731353636.roa (raw, json)
Hash identifier:          DHpw4YPUah/StUQrD8yudx0kCmMelPWMxwEd5c9Hp5s=
Subject key identifier:   F9:59:3D:C5:5C:A1:10:C5:9E:E0:6A:85:B7:DE:E3:1B:6B:E9:7A:B4
Certificate issuer:       /CN=851FB15B600F8E7DA5D5054E369228A7E196CA81
Certificate serial:       4BD5F8DB3DC6D8B0257E89A4C9246BBB250A097B
Authority key identifier: 85:1F:B1:5B:60:0F:8E:7D:A5:D5:05:4E:36:92:28:A7:E1:96:CA:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/851FB15B600F8E7DA5D5054E369228A7E196CA81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/323830343a376438343a633030303a3a2f33362d3336203d3e20323731353636.roa
Signing time:             Fri 17 Jun 2022 16:41:29 +0000
ROA not before:           Fri 17 Jun 2022 16:36:29 +0000
ROA not after:            Fri 16 Jun 2023 16:41:29 +0000
asID:                     271566
IP address blocks:        2804:7d84:c000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d5:f8:db:3d:c6:d8:b0:25:7e:89:a4:c9:24:6b:bb:25:0a:09:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851FB15B600F8E7DA5D5054E369228A7E196CA81
        Validity
            Not Before: Jun 17 16:36:29 2022 GMT
            Not After : Jun 16 16:41:29 2023 GMT
        Subject: CN=F9593DC55CA110C59EE06A85B7DEE31B6BE97AB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:49:96:e4:7f:54:82:28:91:72:6e:b3:35:
                    16:73:3d:68:36:64:63:71:9b:25:13:9e:bb:d5:06:
                    ff:98:1e:22:3a:9b:82:e0:51:40:60:4b:d2:06:cc:
                    a1:97:75:6b:c4:b4:bd:94:09:a5:39:45:9b:24:f0:
                    ba:e4:48:81:79:c9:dc:9b:ed:d2:c8:b6:23:b5:e8:
                    b8:b6:ab:18:27:d3:cc:cc:fb:93:80:37:4b:61:5c:
                    73:e6:76:14:d4:7c:ba:43:6c:fa:10:ed:f0:f0:4f:
                    7c:8d:9d:ad:79:27:d1:b7:41:a3:ae:62:4f:24:12:
                    ae:21:85:a2:29:b5:3e:d9:62:55:47:be:4d:fe:15:
                    01:ed:96:ab:12:e6:f5:52:b3:d0:6a:33:5d:72:2d:
                    b1:9b:b9:b1:d0:4e:d1:50:1f:ae:1e:6a:07:ed:e6:
                    ee:35:4e:2d:89:2d:27:02:82:79:ff:51:e9:b2:58:
                    c6:88:31:e0:b4:a2:89:d5:88:90:43:92:57:b5:1e:
                    60:bf:83:a4:84:a5:b9:22:d1:b0:3b:2e:fe:65:55:
                    6a:82:6a:f2:cd:e9:2d:aa:cd:05:e1:84:e6:62:a3:
                    1c:a8:3c:a0:a3:3b:a3:7b:87:31:f7:42:ae:7f:7a:
                    40:26:9c:74:c3:3b:6c:b3:43:7c:30:8b:92:d1:2f:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:59:3D:C5:5C:A1:10:C5:9E:E0:6A:85:B7:DE:E3:1B:6B:E9:7A:B4
            X509v3 Authority Key Identifier:
                keyid:85:1F:B1:5B:60:0F:8E:7D:A5:D5:05:4E:36:92:28:A7:E1:96:CA:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/851FB15B600F8E7DA5D5054E369228A7E196CA81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/851FB15B600F8E7DA5D5054E369228A7E196CA81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/323830343a376438343a633030303a3a2f33362d3336203d3e20323731353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d84:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:4e:c7:41:f6:b5:11:44:28:0c:97:d3:db:92:32:e3:1b:c8:
         1b:98:8c:33:0b:27:2d:f1:a7:ba:b7:95:e5:ba:17:37:f2:c0:
         b9:a8:6f:c3:af:d7:82:ef:84:fa:b6:ac:90:cc:70:ec:c5:d0:
         8c:73:d3:a1:11:02:7a:86:6f:81:57:2e:62:a6:7a:bb:a7:18:
         a3:64:3b:81:c1:56:1b:f4:50:2e:85:ed:40:57:7f:82:7f:a0:
         ce:b7:ed:90:63:58:0d:9e:e8:3a:cb:d2:b1:0a:64:15:98:0a:
         3a:f4:42:fe:d7:31:16:58:1a:02:ff:a2:7a:01:f2:ba:dc:13:
         45:8f:e6:09:d2:ae:28:eb:78:a6:7d:78:8b:a8:24:4c:5d:94:
         cf:09:b1:53:3e:84:18:2b:cc:75:55:35:5c:5e:b3:f9:72:05:
         15:a9:d4:29:20:0e:b6:7e:1b:ed:95:28:2f:0e:82:cb:cf:aa:
         97:6c:55:28:8d:b6:14:35:c7:a3:41:fa:7c:70:7a:80:55:b9:
         69:dd:12:59:07:0c:e9:e0:90:63:51:b2:e3:96:bc:72:71:81:
         92:5b:d6:b1:6c:27:65:c4:58:2f:33:b3:3c:25:2c:d7:9f:ac:
         99:f8:27:34:5a:56:b8:2d:d0:da:cd:9d:fa:49:97:94:8f:b6:
         4b:0d:2c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----