Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/323830343a376264303a3a2f33322d3333203d3e20323731343536.roa
File:                     323830343a376264303a3a2f33322d3333203d3e20323731343536.roa (raw, json)
Hash identifier:          wut6fx6JytgxqJkzOLnk0oSSB5aIuVuB/FiZH1WNqvM=
Subject key identifier:   58:85:15:DC:3A:71:B0:D2:71:4F:4F:B5:E9:75:77:50:B9:F6:2E:F2
Certificate issuer:       /CN=8BA7DE987F2B314E50E32EE2337CDC8CEC19406A
Certificate serial:       36E93FDC11006BBF2EE1A4628D65EA23FF076133
Authority key identifier: 8B:A7:DE:98:7F:2B:31:4E:50:E3:2E:E2:33:7C:DC:8C:EC:19:40:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BA7DE987F2B314E50E32EE2337CDC8CEC19406A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/323830343a376264303a3a2f33322d3333203d3e20323731343536.roa
Signing time:             Tue 09 Aug 2022 10:49:39 +0000
ROA not before:           Tue 09 Aug 2022 10:44:39 +0000
ROA not after:            Tue 08 Aug 2023 10:49:39 +0000
asID:                     271456
IP address blocks:        2804:7bd0::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e9:3f:dc:11:00:6b:bf:2e:e1:a4:62:8d:65:ea:23:ff:07:61:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA7DE987F2B314E50E32EE2337CDC8CEC19406A
        Validity
            Not Before: Aug  9 10:44:39 2022 GMT
            Not After : Aug  8 10:49:39 2023 GMT
        Subject: CN=588515DC3A71B0D2714F4FB5E9757750B9F62EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:a0:41:63:b2:54:d3:3a:cf:22:21:0f:f5:
                    ed:c2:1b:6f:7d:54:4e:1d:fc:f4:24:5c:37:7c:0c:
                    9c:28:cc:1b:86:3d:ac:a6:5d:f6:e7:c8:6d:41:17:
                    cc:d7:9d:35:da:0f:67:5c:aa:16:14:d0:60:61:99:
                    7e:d5:f6:45:b5:8c:7c:db:7c:dd:23:de:94:72:2b:
                    f1:2f:03:1a:94:ed:fc:33:81:62:d7:a9:22:4c:ab:
                    0b:a1:d1:3d:ad:8b:17:3c:ab:f3:8b:ba:5b:40:7c:
                    d1:fc:92:d0:55:78:f0:d6:e6:04:95:de:71:01:af:
                    57:a2:76:85:eb:55:34:a7:81:19:92:00:3f:3d:58:
                    c5:0a:44:3a:8d:c0:81:7f:5f:10:ec:cc:26:ac:d0:
                    23:6f:ef:d8:e5:ff:ca:f5:52:ff:77:f4:af:34:76:
                    9e:38:35:5b:7c:88:34:f6:e1:33:5f:ab:a8:8a:8d:
                    2a:aa:ee:ee:79:1a:92:fa:f4:97:03:e4:a8:f5:d0:
                    10:8f:87:dd:4c:85:9e:02:d1:26:b1:de:2a:aa:78:
                    f3:17:71:98:82:f3:4e:be:80:a0:3f:ac:3a:ce:f2:
                    68:d3:cd:03:df:51:aa:36:2c:32:e2:c5:f8:a6:a1:
                    48:6c:ee:1b:34:9e:30:f6:7a:9c:5f:d6:fc:fc:e2:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:85:15:DC:3A:71:B0:D2:71:4F:4F:B5:E9:75:77:50:B9:F6:2E:F2
            X509v3 Authority Key Identifier:
                keyid:8B:A7:DE:98:7F:2B:31:4E:50:E3:2E:E2:33:7C:DC:8C:EC:19:40:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/8BA7DE987F2B314E50E32EE2337CDC8CEC19406A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BA7DE987F2B314E50E32EE2337CDC8CEC19406A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/323830343a376264303a3a2f33322d3333203d3e20323731343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:4d:42:14:0d:90:75:3e:e5:00:2c:16:75:ed:05:8c:6b:0e:
         ef:69:7d:3e:7a:36:9a:1c:17:c5:36:16:32:a7:ac:e2:19:6d:
         b0:e3:4c:85:d3:dd:dd:5c:4f:fe:e4:a4:ab:2f:17:83:1b:25:
         7a:5d:34:ed:56:35:ad:7e:bf:e4:ba:ce:be:f7:04:e2:1c:82:
         8c:c1:48:04:3b:4b:1b:8d:4e:56:f5:15:7d:63:56:18:c3:b6:
         5a:41:3d:5a:91:29:ec:52:f8:98:c0:05:08:3c:4c:71:8f:40:
         d6:e9:1b:4f:00:70:40:95:ce:fb:40:78:68:b6:f1:1c:a3:82:
         34:db:50:d0:36:25:b6:4a:b9:b0:4e:f3:f4:e7:c2:c7:3c:ac:
         3d:21:6b:56:a5:e5:c9:60:24:a7:e9:f4:fb:61:16:c7:c7:a2:
         ec:14:dc:7c:fd:7c:84:aa:59:81:fd:c9:f1:ef:04:43:5d:47:
         c7:b3:93:18:e9:e9:68:84:9c:c6:e6:04:88:ba:f9:33:71:1d:
         df:6f:b7:69:7a:c7:0c:c9:9a:14:cf:7e:0b:3a:dc:50:ea:b1:
         b6:8f:c8:27:84:24:c1:4b:6c:43:a9:06:4f:bc:92:d1:c6:32:
         8b:a9:0a:21:fb:79:3d:4b:26:43:21:d0:01:96:da:0b:a9:66:
         84:9c:53:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----