Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3a2f33322d3332203d3e20323638343330.roa
File:                     323830343a353131383a3a2f33322d3332203d3e20323638343330.roa (raw, json)
Hash identifier:          z1ol1gpvFzgZSO6I/y5GaO/nxUfbNPJENr2hsP3FHyI=
Subject key identifier:   D2:8C:CE:5F:0C:FC:43:5B:81:D4:EB:CF:D9:1B:A8:AB:E6:4F:85:0E
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       66F6575644507FD47BAC26E0FCCF26024328BE00
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3a2f33322d3332203d3e20323638343330.roa
Signing time:             Tue 15 Mar 2022 16:26:00 +0000
ROA not before:           Tue 15 Mar 2022 16:21:00 +0000
ROA not after:            Tue 14 Mar 2023 16:26:00 +0000
asID:                     268430
IP address blocks:        2804:5118::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f6:57:56:44:50:7f:d4:7b:ac:26:e0:fc:cf:26:02:43:28:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Mar 15 16:21:00 2022 GMT
            Not After : Mar 14 16:26:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3c:fb:a5:bd:b9:1b:44:58:0d:ca:88:af:9c:
                    0c:0e:1a:17:35:e2:d0:59:fb:f8:b5:77:ff:2f:7d:
                    ed:3e:d1:7f:6b:c2:ed:81:a0:a6:dd:e3:2d:5d:0d:
                    c7:3f:8e:45:f8:87:22:5e:8d:d8:9e:8e:8e:21:0c:
                    66:cf:52:36:a7:c8:46:03:d6:48:e3:69:83:0c:01:
                    65:dc:44:c7:39:43:f0:d4:0d:99:aa:63:69:cc:b6:
                    b2:51:3e:0e:ec:1a:50:a6:8a:19:c0:91:25:c9:f2:
                    13:28:25:55:4c:d2:5b:16:ae:1e:a0:0b:99:86:d2:
                    3e:52:ef:19:cd:84:b1:3f:01:e0:b4:ff:ae:88:e6:
                    80:aa:fe:33:50:d7:ec:a1:2c:2e:27:e0:72:3a:e5:
                    06:ce:46:d1:49:25:54:e3:05:01:19:93:f0:49:17:
                    b1:bc:9d:75:c0:4b:1a:57:29:11:48:ac:d0:97:c0:
                    95:5f:b0:5b:73:c6:c7:34:04:90:75:58:e1:8f:0a:
                    ea:29:65:e0:9d:52:15:ca:d4:17:e8:56:03:bd:80:
                    79:c0:93:83:4c:19:ab:0c:f9:c7:30:2e:c1:83:40:
                    01:9a:95:ea:9c:57:83:5d:fa:2a:15:7c:b8:9a:5e:
                    b4:bf:ea:af:86:00:8c:6d:5a:2d:df:fe:0e:e2:28:
                    1e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8C:CE:5F:0C:FC:43:5B:81:D4:EB:CF:D9:1B:A8:AB:E6:4F:85:0E
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3a2f33322d3332203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:b0:b5:82:6a:ea:02:ba:a3:c2:05:f2:49:37:b2:7f:20:83:
         82:9a:b4:a4:fa:a4:f7:70:e0:09:4f:a5:ba:b4:a3:2f:09:c1:
         25:d5:b6:c3:17:5c:a7:9f:aa:c5:46:b3:d7:68:6d:db:45:5b:
         20:15:17:e4:8a:14:37:b3:0c:ea:e8:8c:49:26:68:c6:f7:6f:
         c6:c1:11:97:ce:ac:48:f4:a8:f1:b2:df:24:f2:24:9d:90:c2:
         a2:ea:bf:46:ea:74:b1:18:a5:04:9a:d1:1f:4b:26:f6:82:29:
         48:8b:f9:74:34:51:e0:06:a5:a6:83:e3:fb:33:1e:dc:b1:01:
         39:f3:a4:0e:68:5e:5d:24:3e:89:7e:16:ec:f4:0e:24:7d:d3:
         97:c0:e0:ad:ef:9e:f5:a4:7b:87:2a:e0:14:4a:27:b4:44:1a:
         30:fd:b3:30:85:09:29:d6:28:6d:07:c6:84:5e:40:ea:e0:af:
         30:40:b5:22:9b:e1:83:bd:62:33:01:71:9e:30:8c:d3:d3:1f:
         d5:37:3c:5a:81:81:65:63:bf:59:08:d9:16:06:dd:5a:20:50:
         8e:c8:16:a6:1a:21:59:8c:17:66:d7:1b:30:20:37:0f:3d:af:
         46:24:e6:6e:6e:6b:8c:e8:7a:8b:44:c5:3c:6a:07:93:55:89:
         7a:01:a4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----