Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/323830313a38303a323265303a3a2f34382d3634203d3e20323637303836.roa
File:                     323830313a38303a323265303a3a2f34382d3634203d3e20323637303836.roa (raw, json)
Hash identifier:          9D2cqJAnuPjI+uTQnvcsWPE+n7YochKx71NDP2slrKE=
Subject key identifier:   4E:FF:A5:F6:4A:B1:1D:BC:EE:71:03:5B:33:03:95:35:41:30:F8:AA
Certificate issuer:       /CN=5B676FF3322516563A6E39ED7C7043384675A1ED
Certificate serial:       3C7DDDBB6A0834A9A424BD5350416D8471AA9228
Authority key identifier: 5B:67:6F:F3:32:25:16:56:3A:6E:39:ED:7C:70:43:38:46:75:A1:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B676FF3322516563A6E39ED7C7043384675A1ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/323830313a38303a323265303a3a2f34382d3634203d3e20323637303836.roa
Signing time:             Wed 20 Jul 2022 23:00:02 +0000
ROA not before:           Wed 20 Jul 2022 22:55:02 +0000
ROA not after:            Thu 20 Jul 2023 23:00:02 +0000
asID:                     267086
IP address blocks:        2801:80:22e0::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7d:dd:bb:6a:08:34:a9:a4:24:bd:53:50:41:6d:84:71:aa:92:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B676FF3322516563A6E39ED7C7043384675A1ED
        Validity
            Not Before: Jul 20 22:55:02 2022 GMT
            Not After : Jul 20 23:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0c:57:40:c0:15:e0:45:46:1c:14:48:3b:f5:
                    c6:8c:18:44:a2:85:c3:d9:3a:b5:ea:73:e4:46:53:
                    98:84:9e:e4:6d:e4:c3:f3:1a:aa:69:b9:41:62:f1:
                    56:e4:c6:27:5c:b2:95:0f:d0:6f:94:10:c7:66:a0:
                    27:b2:ea:e6:ca:93:2a:04:47:d9:d1:46:da:04:ba:
                    88:5a:0f:89:06:1d:76:11:89:4b:44:8a:a2:f1:92:
                    ba:0c:28:54:24:69:68:7e:ba:d4:c2:ef:ba:4a:b2:
                    68:6c:8d:a5:e6:fb:ec:30:a0:09:73:8f:ed:9f:c8:
                    a9:53:1c:9c:75:29:cd:ee:4f:c3:51:02:57:39:0d:
                    54:56:0e:64:4d:d5:e9:d5:04:32:52:1a:29:9b:b4:
                    ac:7a:13:de:5a:c9:ba:bf:05:71:85:43:85:23:dd:
                    31:74:1a:5d:00:d4:5f:0d:2c:75:42:78:13:25:e2:
                    cd:0a:e7:91:51:1b:dc:07:32:d3:80:91:be:cc:5b:
                    9a:fd:76:e9:7b:b0:55:1e:91:76:dc:79:b5:f4:e1:
                    0c:4b:70:35:12:ac:60:df:ce:fe:29:9e:a9:aa:f3:
                    ef:3f:1a:57:76:83:ae:6a:15:f7:e1:10:77:c5:41:
                    44:a3:b4:af:be:8d:7f:c6:1a:5f:ed:f7:e0:5e:3d:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FF:A5:F6:4A:B1:1D:BC:EE:71:03:5B:33:03:95:35:41:30:F8:AA
            X509v3 Authority Key Identifier:
                keyid:5B:67:6F:F3:32:25:16:56:3A:6E:39:ED:7C:70:43:38:46:75:A1:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/5B676FF3322516563A6E39ED7C7043384675A1ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B676FF3322516563A6E39ED7C7043384675A1ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/323830313a38303a323265303a3a2f34382d3634203d3e20323637303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:22e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:f4:36:59:a7:48:15:02:60:d3:e2:14:15:30:68:7c:06:09:
         ba:ca:06:69:d9:54:b7:82:d4:86:c1:3a:f6:fb:5d:83:88:e1:
         91:6a:ac:ad:ad:d3:97:43:57:f4:40:52:e5:57:9b:63:e0:78:
         cd:0a:7e:3d:b1:b0:f8:fe:e7:0e:ac:d3:0e:b0:37:04:5d:9e:
         41:6f:6f:bc:a6:da:5c:7c:7b:67:4e:51:60:a0:63:a8:3d:1f:
         0e:a6:3b:a8:6e:a2:1e:7b:98:56:b5:16:93:2b:87:6b:b9:55:
         d7:07:4d:64:b3:37:83:e0:d5:ff:af:b6:82:da:29:10:c8:1b:
         03:0d:35:a9:6d:8c:94:09:fa:de:de:b6:17:19:9e:89:d0:6c:
         8b:95:e6:da:e0:07:29:ed:17:c5:76:c3:a1:96:5b:73:d3:56:
         3b:38:d8:9b:db:d6:60:80:4c:11:65:a6:94:f4:a0:23:4b:f3:
         95:1d:5c:62:02:34:48:33:28:ba:17:b2:fb:f8:ce:6d:f9:be:
         19:52:65:b2:da:7c:90:4b:09:7c:20:bb:f5:44:12:1a:37:76:
         c0:ea:37:23:49:cc:ee:28:1b:43:92:a7:1e:03:c5:81:98:80:
         37:81:57:55:d4:ae:1f:0e:2a:9f:2e:a5:ed:1a:19:13:38:37:
         1c:60:48:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----