Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/323830343a333432303a3a2f33322d3332203d3e20323635343337.roa
File:                     323830343a333432303a3a2f33322d3332203d3e20323635343337.roa (raw, json)
Hash identifier:          sPmBjI/z0D/9r9B2C4fgUagzFPE5F/u/9SMmyKGn6fo=
Subject key identifier:   05:AB:D9:E4:4E:41:FC:77:03:1A:AB:7A:EF:B1:9D:DE:69:13:7E:58
Certificate issuer:       /CN=3AC6959CD824080D479373BCCC2F356CCF6F4F7C
Certificate serial:       2AC446781D5AB5CDC878D30E121C3127560652C8
Authority key identifier: 3A:C6:95:9C:D8:24:08:0D:47:93:73:BC:CC:2F:35:6C:CF:6F:4F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AC6959CD824080D479373BCCC2F356CCF6F4F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/323830343a333432303a3a2f33322d3332203d3e20323635343337.roa
Signing time:             Fri 09 Sep 2022 19:23:08 +0000
ROA not before:           Fri 09 Sep 2022 19:18:08 +0000
ROA not after:            Fri 08 Sep 2023 19:23:08 +0000
asID:                     265437
IP address blocks:        2804:3420::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c4:46:78:1d:5a:b5:cd:c8:78:d3:0e:12:1c:31:27:56:06:52:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AC6959CD824080D479373BCCC2F356CCF6F4F7C
        Validity
            Not Before: Sep  9 19:18:08 2022 GMT
            Not After : Sep  8 19:23:08 2023 GMT
        Subject: CN=05ABD9E44E41FC77031AAB7AEFB19DDE69137E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:88:68:d0:05:27:48:a4:cc:88:68:5d:d9:
                    e6:18:25:d5:85:3b:7f:c0:ff:8f:78:28:d4:46:1e:
                    a3:77:b1:62:00:0b:7b:d7:90:7b:b2:0a:68:e1:01:
                    39:c3:88:5c:64:9c:76:68:19:85:77:83:53:9a:ca:
                    da:8a:24:10:15:d7:46:0e:22:9e:c3:54:07:4f:3e:
                    e5:e3:f4:f4:60:32:e0:bf:d6:44:67:0c:f5:62:45:
                    68:73:95:79:fb:de:e8:8d:11:19:5d:6b:2f:4b:7b:
                    da:02:26:9c:55:5c:a8:3e:12:98:49:49:cf:55:c9:
                    ac:7e:93:a2:d6:5e:32:d1:e5:75:5d:43:72:e4:f1:
                    38:2a:be:3c:ae:50:25:fe:50:cf:d9:f3:9f:05:f8:
                    a1:4d:4e:d5:40:e0:76:44:e6:f6:58:24:9e:55:0b:
                    f0:23:32:81:f3:da:f0:5a:47:55:96:a0:21:00:95:
                    22:18:31:f7:c0:a8:13:ec:44:e2:b3:a5:fe:fb:bb:
                    5f:c1:2f:d3:32:ca:34:c1:ff:cf:c0:03:55:89:db:
                    aa:2c:7b:ac:e2:9b:f5:94:54:7c:45:bb:b1:c4:79:
                    53:d9:2b:85:6e:50:a4:75:fc:64:ab:3c:11:32:d0:
                    35:bf:28:69:fc:a6:5b:c6:9f:d8:78:5e:8c:dc:b7:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AB:D9:E4:4E:41:FC:77:03:1A:AB:7A:EF:B1:9D:DE:69:13:7E:58
            X509v3 Authority Key Identifier:
                keyid:3A:C6:95:9C:D8:24:08:0D:47:93:73:BC:CC:2F:35:6C:CF:6F:4F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/3AC6959CD824080D479373BCCC2F356CCF6F4F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AC6959CD824080D479373BCCC2F356CCF6F4F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/323830343a333432303a3a2f33322d3332203d3e20323635343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3420::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:72:b2:b1:7f:20:1b:b9:16:6b:d3:c9:a2:e2:14:7a:6f:d4:
         2a:a1:22:0a:be:f6:c2:41:71:c4:da:d9:a1:f2:d9:10:93:40:
         18:98:e3:97:9a:6d:4b:2d:63:c4:59:f5:71:d4:35:ad:2e:fe:
         09:78:11:6f:92:91:79:9a:a7:d1:70:b0:3b:0e:24:c0:6b:ec:
         1f:83:86:9b:aa:90:ff:2c:c5:ec:f5:8f:1a:3c:79:4b:fe:da:
         de:fa:63:e0:ed:bf:67:50:c4:39:10:ad:fb:73:9a:58:38:83:
         52:29:a5:a0:37:68:4d:c7:f4:77:21:7f:0c:60:eb:1e:22:bd:
         8a:43:fd:64:b3:cb:b1:68:9d:7d:d2:47:19:48:fa:dc:d3:e2:
         a1:ac:df:b9:2c:65:56:09:64:a5:ec:fd:c0:91:90:5f:49:eb:
         9e:75:47:f9:50:06:c9:e5:70:b0:92:69:ad:be:b4:47:f0:c6:
         c7:32:0e:56:4c:c9:b7:06:1a:49:ed:c5:8c:f5:ff:00:5e:53:
         d0:6a:62:da:25:1d:b1:2f:5b:bc:a8:3b:61:2b:ad:31:1a:d2:
         ad:e0:b5:47:32:b2:f9:4b:73:6e:53:69:f0:02:16:2f:53:71:
         95:e4:52:8f:06:d1:94:12:ce:5b:61:71:50:e5:6b:6f:3c:d4:
         3e:96:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----