Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a3a2f33322d3336203d3e20323638303335.roa
File:                     323830343a353666383a3a2f33322d3336203d3e20323638303335.roa (raw, json)
Hash identifier:          RfwzpWRqvWmN0fLPzM+t4iAlzGkHNzVMs76YG0D9Ps8=
Subject key identifier:   E3:16:CA:1C:73:E4:D6:7B:50:B5:C4:F2:BF:27:52:F6:9C:12:8C:05
Certificate issuer:       /CN=8F9F207F06040FFE6E788FB3AC3AFEC8DDF060C6
Certificate serial:       134ACCD34484B290E8C5790C952D7748D0D8E001
Authority key identifier: 8F:9F:20:7F:06:04:0F:FE:6E:78:8F:B3:AC:3A:FE:C8:DD:F0:60:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F9F207F06040FFE6E788FB3AC3AFEC8DDF060C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a3a2f33322d3336203d3e20323638303335.roa
Signing time:             Thu 27 Jan 2022 15:54:10 +0000
ROA not before:           Thu 27 Jan 2022 15:49:10 +0000
ROA not after:            Thu 26 Jan 2023 15:54:10 +0000
asID:                     268035
IP address blocks:        2804:56f8::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4a:cc:d3:44:84:b2:90:e8:c5:79:0c:95:2d:77:48:d0:d8:e0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9F207F06040FFE6E788FB3AC3AFEC8DDF060C6
        Validity
            Not Before: Jan 27 15:49:10 2022 GMT
            Not After : Jan 26 15:54:10 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:6f:93:51:f2:7a:58:1a:11:a9:80:aa:43:
                    f8:6a:de:f1:5e:0a:60:9f:3d:57:d4:76:91:76:93:
                    87:4e:02:50:cb:54:91:29:66:65:88:3d:e1:3f:20:
                    03:b1:04:a9:80:6c:4f:a0:b7:80:be:34:74:99:8c:
                    cf:08:02:f0:cb:56:10:dc:ae:a7:15:a9:4a:81:e8:
                    0a:f1:71:dc:16:5b:ba:28:04:29:ff:8b:ff:9e:ce:
                    c4:f9:94:69:77:50:f9:b4:20:ab:f9:64:af:19:ae:
                    b5:19:06:9e:fd:73:3a:fe:f0:09:af:9c:cf:b5:94:
                    f5:50:32:4a:af:15:20:76:07:9f:a9:bb:7c:bc:66:
                    b9:07:47:4f:09:ff:9a:05:5f:a3:6d:e3:62:08:f0:
                    06:a2:37:ed:34:54:65:01:2a:5e:59:bb:cd:cb:23:
                    f4:01:ff:1c:c2:9c:60:4e:b6:c2:95:ee:22:a2:ae:
                    41:1d:0c:6b:a8:fd:dc:39:c1:c9:6c:73:b5:7c:c3:
                    8f:fc:1e:1e:bc:ad:cf:3e:39:83:c5:89:77:c8:79:
                    dc:64:90:6f:eb:52:63:45:4a:08:27:d5:65:e3:ab:
                    2f:86:1f:2f:1a:e2:03:1c:6d:05:7e:0c:66:da:8e:
                    37:fd:8f:1a:3f:a5:90:f7:13:4c:3d:f7:3c:85:d4:
                    f9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:16:CA:1C:73:E4:D6:7B:50:B5:C4:F2:BF:27:52:F6:9C:12:8C:05
            X509v3 Authority Key Identifier:
                keyid:8F:9F:20:7F:06:04:0F:FE:6E:78:8F:B3:AC:3A:FE:C8:DD:F0:60:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/8F9F207F06040FFE6E788FB3AC3AFEC8DDF060C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F9F207F06040FFE6E788FB3AC3AFEC8DDF060C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a3a2f33322d3336203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:9e:ef:2e:62:89:59:5f:b8:36:4f:d9:97:ea:c3:27:0b:ee:
         32:06:66:5b:0c:e9:5f:08:cb:30:2f:43:ad:5e:8a:3a:d9:eb:
         d2:2b:eb:a8:a9:ac:c7:ea:56:ec:05:fe:37:c9:c1:67:fa:de:
         19:b6:97:ce:bd:77:a1:b6:ba:61:b2:cf:66:7a:7a:eb:22:6b:
         21:83:0f:6c:e7:28:84:2a:ab:a0:41:3b:cd:de:38:da:ef:23:
         0a:4b:70:b5:8d:18:b8:ce:75:c7:c9:8c:a8:54:b3:78:75:55:
         e3:dd:f0:8f:08:29:18:22:63:58:3f:41:bf:32:b0:b3:83:09:
         80:88:00:f5:e8:78:f9:13:09:d3:bf:45:f6:5d:89:2b:d8:41:
         7e:fd:21:b9:c6:3d:e7:d4:14:1e:80:c0:a1:86:3b:79:65:4f:
         76:1b:01:c3:30:d8:ac:be:1a:32:05:30:f6:6e:b3:8b:b3:57:
         31:d3:24:37:f6:62:7e:d4:c9:ef:11:fa:23:81:37:56:7a:92:
         40:8b:ca:ce:19:04:56:e7:75:4a:78:56:36:3a:17:ca:75:c8:
         b6:0f:9b:48:ff:49:36:73:b5:79:17:ba:46:e0:9c:f9:fb:c7:
         38:9c:6d:a1:22:04:7d:5f:70:52:79:6d:d0:22:c0:7e:98:59:
         ec:4e:a5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----