Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/323830343a343965383a3a2f33322d313238203d3e20323637323038.roa
File:                     323830343a343965383a3a2f33322d313238203d3e20323637323038.roa (raw, json)
Hash identifier:          Dq7c+Rbr3TylekNhhfAwzTVoLLqfZiYvsWrc6J0fULQ=
Subject key identifier:   F1:81:F5:B5:99:53:76:31:87:5C:45:54:5C:0C:17:26:89:DD:C7:A3
Certificate issuer:       /CN=9AF58802664F504429310F7B4DFD6676DAAB27F4
Certificate serial:       5D91F0886698067CB564785B29879DEC6C270373
Authority key identifier: 9A:F5:88:02:66:4F:50:44:29:31:0F:7B:4D:FD:66:76:DA:AB:27:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/323830343a343965383a3a2f33322d313238203d3e20323637323038.roa
Signing time:             Wed 28 Dec 2022 21:24:34 +0000
ROA not before:           Wed 28 Dec 2022 21:19:34 +0000
ROA not after:            Wed 27 Dec 2023 21:24:34 +0000
asID:                     267208
IP address blocks:        2804:49e8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:91:f0:88:66:98:06:7c:b5:64:78:5b:29:87:9d:ec:6c:27:03:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF58802664F504429310F7B4DFD6676DAAB27F4
        Validity
            Not Before: Dec 28 21:19:34 2022 GMT
            Not After : Dec 27 21:24:34 2023 GMT
        Subject: CN=F181F5B599537631875C45545C0C172689DDC7A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:93:14:eb:28:65:e3:d2:38:d8:36:38:22:94:
                    54:72:7b:c2:3e:3f:65:3c:ff:8a:0e:5c:29:cd:18:
                    51:da:d6:c2:48:e6:8b:98:b2:38:c9:cf:c2:ba:84:
                    8e:ee:c8:0b:22:6a:9f:5b:d8:b3:75:0b:03:83:19:
                    d2:27:d8:13:3b:be:03:e1:2f:65:be:b1:4e:a2:75:
                    83:ff:a5:a3:42:4c:09:f1:e6:72:68:30:62:c6:43:
                    03:af:d2:ea:62:03:97:ec:20:fd:cc:5b:e6:cb:b5:
                    88:33:f4:93:d8:a5:9e:9a:6d:92:f6:11:b8:ba:fd:
                    14:0b:3c:34:c2:72:21:0d:48:4f:6e:9f:ab:4a:7d:
                    5f:3c:07:d4:34:ec:fa:e3:13:ac:92:75:aa:ec:ea:
                    af:05:d9:91:31:07:55:f7:f3:c8:f8:ca:b6:fe:2d:
                    b9:2e:0d:09:27:14:7c:91:d8:46:63:74:06:f9:47:
                    be:72:92:c1:a3:b4:b4:09:2b:95:a0:3d:ea:fb:e1:
                    90:f1:bc:a5:0f:34:2d:11:7b:3f:4a:cc:24:a2:3f:
                    05:e8:8a:46:bd:e1:42:ed:5e:7a:a6:a0:af:46:bc:
                    e0:43:84:66:19:99:3f:80:db:af:9e:93:aa:f1:6b:
                    bb:ee:f9:2d:44:03:ed:b8:f0:5e:1d:80:ea:cb:05:
                    5b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:81:F5:B5:99:53:76:31:87:5C:45:54:5C:0C:17:26:89:DD:C7:A3
            X509v3 Authority Key Identifier:
                keyid:9A:F5:88:02:66:4F:50:44:29:31:0F:7B:4D:FD:66:76:DA:AB:27:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/323830343a343965383a3a2f33322d313238203d3e20323637323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:12:a9:8b:76:67:0b:4b:9e:3b:ed:df:33:87:0b:f0:da:06:
         56:11:40:1f:4c:44:48:87:c7:73:25:83:19:43:f8:fa:2d:58:
         6a:48:90:36:b6:e7:e8:17:10:19:ed:46:db:5a:1d:dc:d6:50:
         c1:99:c5:6c:e4:69:96:90:f0:f7:cb:f5:0a:e9:5c:9c:55:bf:
         bb:00:78:ec:9a:b1:89:03:4c:6f:9a:2e:8a:8a:f2:61:dd:1d:
         a2:3b:80:33:e6:74:4f:ee:ed:e5:0a:f2:23:27:56:73:40:8f:
         8c:21:90:80:ec:d2:59:68:21:c2:b1:73:0b:5b:bd:18:f6:23:
         f7:c9:b7:0a:3d:5e:bc:c1:5e:df:b2:d0:88:75:a1:3c:d2:8c:
         78:e5:b7:98:07:e5:4a:c3:d8:63:6b:a9:5c:c0:77:bf:96:dd:
         ac:2b:3f:c7:ce:c1:8b:e4:90:d0:9c:34:2c:dc:47:a6:74:fc:
         62:37:da:a5:d4:0c:fb:a7:75:47:c9:07:07:c5:9e:4a:62:f5:
         ad:4d:84:6b:e9:b7:11:cc:0c:d2:50:77:95:68:19:58:63:01:
         e2:15:78:df:a8:be:51:a5:b6:63:ca:99:1c:34:51:9b:73:11:
         fa:08:89:85:c3:eb:ef:ff:8f:c0:e9:5c:94:d4:e8:0f:4a:09:
         4e:51:ea:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----