Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a3a2f33332d3438203d3e20323633343836.roa
File:                     323830343a313239383a3a2f33332d3438203d3e20323633343836.roa (raw, json)
Hash identifier:          2fSJYDzdRKEA3etihybvb9gkgOf8ptvC0pQkQGoxAVQ=
Subject key identifier:   9B:4B:7D:2B:E5:DE:4D:A5:95:CF:A0:AD:C7:12:ED:AC:F0:4B:53:C8
Certificate issuer:       /CN=755EF99A8BA2C7F836F67C1F5471E77A126358BA
Certificate serial:       44D1B999DD75B7CE6B2D589B3D77AD05D3D5D38F
Authority key identifier: 75:5E:F9:9A:8B:A2:C7:F8:36:F6:7C:1F:54:71:E7:7A:12:63:58:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/755EF99A8BA2C7F836F67C1F5471E77A126358BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a3a2f33332d3438203d3e20323633343836.roa
Signing time:             Thu 13 Oct 2022 18:28:29 +0000
ROA not before:           Thu 13 Oct 2022 18:23:29 +0000
ROA not after:            Thu 12 Oct 2023 18:28:29 +0000
asID:                     263486
IP address blocks:        2804:1298::/33 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d1:b9:99:dd:75:b7:ce:6b:2d:58:9b:3d:77:ad:05:d3:d5:d3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755EF99A8BA2C7F836F67C1F5471E77A126358BA
        Validity
            Not Before: Oct 13 18:23:29 2022 GMT
            Not After : Oct 12 18:28:29 2023 GMT
        Subject: CN=9B4B7D2BE5DE4DA595CFA0ADC712EDACF04B53C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:c5:b4:f7:a8:11:d0:6a:b1:be:06:0e:29:
                    fd:a9:78:6f:ca:85:59:06:a9:10:eb:a7:24:e2:18:
                    c7:55:9f:1e:19:4d:7d:74:12:1c:84:5e:25:3f:4e:
                    d3:c5:5c:4d:7a:cd:f7:a7:c7:39:0a:2f:e2:7f:69:
                    2f:90:ed:5c:d6:93:63:3d:31:fc:90:0f:79:c5:2c:
                    04:e4:eb:49:45:a9:3c:86:3c:95:13:eb:f4:36:37:
                    78:73:a9:aa:9c:78:b3:c5:f8:84:ed:09:27:b7:4f:
                    5b:ab:d8:0c:db:50:33:bc:26:33:21:b4:4c:6b:79:
                    f8:a4:02:13:b5:cd:2d:f7:1a:fd:5e:8b:d6:bb:0d:
                    74:1a:7a:1c:57:73:9f:bd:fd:dd:c3:ed:0f:37:d4:
                    e9:b9:63:84:0b:a0:a3:47:2b:c8:12:3c:0f:5d:53:
                    67:5f:5b:f1:9b:b8:23:8d:0d:e6:9d:69:7d:17:fa:
                    c8:b7:30:de:6c:09:04:9f:f1:51:29:b2:eb:36:03:
                    68:0f:2e:be:e6:83:32:77:dc:2f:26:fa:f4:7d:4d:
                    45:8d:73:d0:f2:51:d5:c1:6e:d5:a0:89:23:ce:b0:
                    d2:6e:08:10:e4:70:35:e8:5e:22:9d:76:2c:9c:5e:
                    04:64:74:18:eb:67:64:73:1e:d8:ba:af:4f:40:e2:
                    f2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4B:7D:2B:E5:DE:4D:A5:95:CF:A0:AD:C7:12:ED:AC:F0:4B:53:C8
            X509v3 Authority Key Identifier:
                keyid:75:5E:F9:9A:8B:A2:C7:F8:36:F6:7C:1F:54:71:E7:7A:12:63:58:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/755EF99A8BA2C7F836F67C1F5471E77A126358BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/755EF99A8BA2C7F836F67C1F5471E77A126358BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a3a2f33332d3438203d3e20323633343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1298::/33

    Signature Algorithm: sha256WithRSAEncryption
         84:d5:32:d0:4c:8b:83:8e:30:2a:20:71:39:07:22:65:a6:a3:
         cd:92:63:8c:97:09:91:2c:68:8c:82:63:8a:d7:a1:ea:b6:72:
         0d:26:f5:3e:cb:e8:24:9d:fe:07:24:db:38:8e:42:96:4f:91:
         66:84:56:ec:18:1b:d5:2c:23:21:1b:90:03:3f:3e:be:08:93:
         c1:6c:06:99:0a:91:6a:f0:56:f9:3e:64:cd:47:20:81:e4:b8:
         e8:30:86:19:b2:e2:a0:6f:0b:d7:de:d5:a3:e8:ba:a7:af:43:
         6f:e0:8a:6e:be:49:c2:b4:44:c9:df:c4:3f:1b:8f:98:79:d6:
         80:dd:99:93:04:95:fb:12:e2:d9:3a:89:11:98:09:76:0e:ed:
         04:6c:e4:a8:23:03:5e:45:d7:3e:3e:3b:ab:d2:21:db:a1:58:
         d4:ac:be:02:85:d7:05:76:b1:6c:b9:e0:08:14:8f:48:37:ae:
         f1:20:1c:75:da:a0:e8:58:84:28:8d:aa:ae:d4:bd:09:af:7c:
         8d:47:d2:64:3a:e3:c2:d7:11:a8:1d:dd:fb:63:d4:6c:26:0d:
         32:01:bd:a6:0e:75:91:24:64:53:4f:59:bc:d2:70:b4:2a:8f:
         6a:24:00:74:26:a4:c5:4d:31:2c:4c:7c:51:6f:df:37:16:fd:
         12:ed:ca:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----