Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/323830343a313937383a3a2f33322d3333203d3e203631373936.roa
File:                     323830343a313937383a3a2f33322d3333203d3e203631373936.roa (raw, json)
Hash identifier:          dKr4gmHFlfXbLhep2PrL5JjyuPUUNHs1cZtAaQ/ctNo=
Subject key identifier:   B4:36:1F:0D:27:7A:7D:EE:3D:ED:EF:7B:0A:92:A3:FF:11:76:80:61
Certificate issuer:       /CN=D30B3AC84F0D41D5CF20CFF4217AF6594A4E45B7
Certificate serial:       17303AE331B8EB3450302E6BF241D3F5A75BB364
Authority key identifier: D3:0B:3A:C8:4F:0D:41:D5:CF:20:CF:F4:21:7A:F6:59:4A:4E:45:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D30B3AC84F0D41D5CF20CFF4217AF6594A4E45B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/323830343a313937383a3a2f33322d3333203d3e203631373936.roa
Signing time:             Tue 04 Oct 2022 14:32:05 +0000
ROA not before:           Tue 04 Oct 2022 14:27:05 +0000
ROA not after:            Tue 03 Oct 2023 14:32:05 +0000
asID:                     61796
IP address blocks:        2804:1978::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:30:3a:e3:31:b8:eb:34:50:30:2e:6b:f2:41:d3:f5:a7:5b:b3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D30B3AC84F0D41D5CF20CFF4217AF6594A4E45B7
        Validity
            Not Before: Oct  4 14:27:05 2022 GMT
            Not After : Oct  3 14:32:05 2023 GMT
        Subject: CN=B4361F0D277A7DEE3DEDEF7B0A92A3FF11768061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:19:bc:af:e2:47:87:58:00:b6:a2:c7:9b:3f:
                    f4:fe:4c:8e:32:06:8f:d0:40:fb:7c:a4:9d:50:fd:
                    b0:d8:b4:e6:97:eb:26:c9:c1:fc:d0:1a:a1:c0:b1:
                    03:1c:db:b3:47:71:37:4f:66:55:78:d2:dc:ec:ec:
                    22:91:cc:52:44:5e:8a:1d:00:39:04:c8:f2:98:27:
                    b5:62:61:26:b4:2a:a6:d2:29:57:ed:2e:83:eb:46:
                    a4:fe:7a:07:7e:ff:65:57:32:b5:80:e9:f2:18:af:
                    b6:53:91:da:ec:d4:b7:9a:8a:bd:ab:27:cf:23:58:
                    9e:53:5c:19:68:8f:f8:7c:dd:d8:34:5b:02:24:d3:
                    a9:52:af:b4:87:03:3c:5a:15:17:38:61:e7:58:d6:
                    3d:07:ce:6b:ee:88:36:f9:90:17:7e:cc:6a:75:f6:
                    6d:17:fa:d8:a3:d1:a0:bf:8d:0c:7c:d1:78:c7:86:
                    0b:cc:5a:b9:32:2e:70:53:71:85:7e:7f:b4:f8:2e:
                    82:63:6f:df:f7:15:35:f8:76:43:7b:7b:8e:fb:67:
                    c3:f8:a0:75:54:87:71:09:a2:36:46:55:1d:6d:b7:
                    f0:63:70:e9:25:9a:b9:b3:62:b2:08:c5:67:e1:67:
                    3b:a6:28:fd:c3:be:26:02:57:ba:14:fa:8a:5c:09:
                    e2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:36:1F:0D:27:7A:7D:EE:3D:ED:EF:7B:0A:92:A3:FF:11:76:80:61
            X509v3 Authority Key Identifier:
                keyid:D3:0B:3A:C8:4F:0D:41:D5:CF:20:CF:F4:21:7A:F6:59:4A:4E:45:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D30B3AC84F0D41D5CF20CFF4217AF6594A4E45B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D30B3AC84F0D41D5CF20CFF4217AF6594A4E45B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/323830343a313937383a3a2f33322d3333203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1978::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:b3:10:c9:74:84:14:96:e6:1d:93:c8:5f:9d:77:58:f7:f3:
         65:e4:1c:1e:df:26:59:ad:6c:e5:42:cc:16:e3:13:1a:b2:b3:
         1a:4d:7d:f5:30:ef:f1:fc:c2:c7:27:0a:d2:0d:32:8b:c9:41:
         8f:9d:8e:d5:8c:d0:04:e4:63:58:cf:fe:92:a2:70:6b:fc:09:
         23:82:17:08:51:11:f1:db:63:7a:89:6d:39:eb:2a:a9:f6:3d:
         74:e1:7e:58:55:c5:99:a5:1b:34:78:ef:9e:6f:7a:6e:2e:f8:
         c1:e1:41:33:3d:e7:f2:98:0c:71:8a:dd:ef:65:c1:8e:d2:f6:
         b2:3a:4c:a0:22:36:72:20:75:3b:5d:8f:32:04:01:2d:83:a0:
         9f:d7:21:71:53:d4:0e:dc:bb:9f:6a:e9:60:51:15:ea:af:9a:
         6a:00:cc:6a:ce:43:c4:f2:88:d3:55:d4:45:60:d8:d7:c0:cc:
         83:ab:6a:8d:46:5d:5e:24:57:2a:4b:a0:06:c4:59:36:bc:10:
         54:85:2d:38:5c:d5:63:4f:8d:29:b4:b6:06:52:e4:c7:5a:8c:
         05:b9:72:1b:f2:03:2a:10:fe:ac:ef:2e:5f:80:c0:1f:40:3b:
         da:26:85:27:d8:cf:20:5a:40:b5:23:b2:07:44:ed:bc:05:d8:
         04:20:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----