Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/323830343a3339633a3a2f33322d3438203d3e203238333239.roa
File:                     323830343a3339633a3a2f33322d3438203d3e203238333239.roa (raw, json)
Hash identifier:          ujhT5eKYAJ8nn/XQcNNXmWuJeIL5S6Uwk4kqKvWOwB0=
Subject key identifier:   F7:BA:A4:9E:BC:03:7B:E0:58:19:15:ED:66:BD:30:70:2F:EC:80:B6
Certificate issuer:       /CN=D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB
Certificate serial:       5E1FC06A20A5E8C6F60BB6458AE6CE045F3DBF74
Authority key identifier: D8:08:0D:58:CE:4D:30:EF:B1:40:7E:8D:ED:ED:B0:2B:3C:C9:6C:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/323830343a3339633a3a2f33322d3438203d3e203238333239.roa
Signing time:             Sat 22 Jan 2022 15:00:00 +0000
ROA not before:           Sat 22 Jan 2022 14:55:00 +0000
ROA not after:            Sun 22 Jan 2023 15:00:00 +0000
asID:                     28329
IP address blocks:        2804:39c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1f:c0:6a:20:a5:e8:c6:f6:0b:b6:45:8a:e6:ce:04:5f:3d:bf:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB
        Validity
            Not Before: Jan 22 14:55:00 2022 GMT
            Not After : Jan 22 15:00:00 2023 GMT
        Subject: CN=3082010A0282010100D47A3659557D7304168A40407A0553379792AFEFD1F64C4ABFEA5E8C9D09F0E9EE4824FE9BED5EFB144B9710EBDF3E886785D87BEB90AE20AC7939FFDB6731DA37B56F7C343D4A56F5E74E6F47D5E68C12052C5B60DD550DB23DBB92EB9465D45130BDB144E174FEB1DFCA58EA2A53A46777058803254C627249453515E2A2FDB75AD1944D4C980566D1813716DB48BCA7516DCC886F6D41ABE4796F93F463B8E3B9DCEBB10C3377A836A1F8F48FC913B218AD6388833BDEC9410B268D6F10016D9BDCD9C66CABB7AA18DA758560A79D0FB5CA73C52326C3E91691E2C050EDAEB9395B47F47BF312A1D0A3B8F03C207B648EAB2AD95977072292980FA9BAF0330203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7a:36:59:55:7d:73:04:16:8a:40:40:7a:05:
                    53:37:97:92:af:ef:d1:f6:4c:4a:bf:ea:5e:8c:9d:
                    09:f0:e9:ee:48:24:fe:9b:ed:5e:fb:14:4b:97:10:
                    eb:df:3e:88:67:85:d8:7b:eb:90:ae:20:ac:79:39:
                    ff:db:67:31:da:37:b5:6f:7c:34:3d:4a:56:f5:e7:
                    4e:6f:47:d5:e6:8c:12:05:2c:5b:60:dd:55:0d:b2:
                    3d:bb:92:eb:94:65:d4:51:30:bd:b1:44:e1:74:fe:
                    b1:df:ca:58:ea:2a:53:a4:67:77:05:88:03:25:4c:
                    62:72:49:45:35:15:e2:a2:fd:b7:5a:d1:94:4d:4c:
                    98:05:66:d1:81:37:16:db:48:bc:a7:51:6d:cc:88:
                    6f:6d:41:ab:e4:79:6f:93:f4:63:b8:e3:b9:dc:eb:
                    b1:0c:33:77:a8:36:a1:f8:f4:8f:c9:13:b2:18:ad:
                    63:88:83:3b:de:c9:41:0b:26:8d:6f:10:01:6d:9b:
                    dc:d9:c6:6c:ab:b7:aa:18:da:75:85:60:a7:9d:0f:
                    b5:ca:73:c5:23:26:c3:e9:16:91:e2:c0:50:ed:ae:
                    b9:39:5b:47:f4:7b:f3:12:a1:d0:a3:b8:f0:3c:20:
                    7b:64:8e:ab:2a:d9:59:77:07:22:92:98:0f:a9:ba:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BA:A4:9E:BC:03:7B:E0:58:19:15:ED:66:BD:30:70:2F:EC:80:B6
            X509v3 Authority Key Identifier:
                keyid:D8:08:0D:58:CE:4D:30:EF:B1:40:7E:8D:ED:ED:B0:2B:3C:C9:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/323830343a3339633a3a2f33322d3438203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:e3:84:a2:df:6d:9e:d9:1b:ad:9f:0f:8b:d1:6f:45:5e:cf:
         62:95:a8:15:9a:4d:25:0d:5d:b7:73:0f:de:d1:42:fc:24:76:
         b1:65:2c:ed:6d:3f:25:7e:2e:69:96:22:51:b2:9a:25:fe:d6:
         41:60:cb:d8:a2:20:a7:a7:0b:77:96:cf:24:38:76:25:bc:d1:
         60:47:0e:e9:4c:eb:20:f5:c9:86:08:ba:ff:b9:56:25:d7:1d:
         4a:37:55:e4:2a:0e:f8:a4:ea:50:7c:05:25:76:db:bd:c4:92:
         96:a2:5a:83:df:8f:02:02:2c:ce:a7:35:ec:78:85:f0:04:b7:
         10:f3:64:1c:e2:57:ee:43:6c:43:76:25:c6:d2:7d:55:a1:ed:
         4b:b1:33:68:17:e0:99:5f:72:e4:2a:b1:87:4a:a7:8a:65:89:
         6d:37:c6:e7:89:87:86:7a:14:e1:ee:58:2f:e6:8b:c0:cf:05:
         0c:db:c5:73:e5:74:f4:40:b9:65:51:74:d7:3b:0a:c2:ed:2a:
         24:2c:97:54:42:f9:f9:ef:91:b0:52:d5:22:dd:df:ec:4d:99:
         c5:dd:1a:30:88:62:e1:9c:81:15:56:f9:ac:cc:7a:fe:70:e7:
         b0:2f:0f:72:1d:fa:ac:57:fd:f5:45:bb:97:31:8e:12:b1:d5:
         79:c1:58:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----