Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3a2f3332203d3e20323637303637.roa
File:                     323830343a343761343a3a2f3332203d3e20323637303637.roa (raw, json)
Hash identifier:          0jzpPgQdX7qoRecSEqEn7p7aHLKSdyYYvkJvmTaCpC4=
Subject key identifier:   FC:7A:BE:54:A4:9E:4F:06:94:33:8C:64:A5:0F:81:4F:72:E9:D9:BD
Certificate issuer:       /CN=ABE2B87282296266F69CE04223629CFC8BFD6354
Certificate serial:       78DF22FCFD4C53B7391601A68648E4AAC53E3694
Authority key identifier: AB:E2:B8:72:82:29:62:66:F6:9C:E0:42:23:62:9C:FC:8B:FD:63:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABE2B87282296266F69CE04223629CFC8BFD6354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3a2f3332203d3e20323637303637.roa
Signing time:             Tue 05 Jul 2022 15:00:00 +0000
ROA not before:           Tue 05 Jul 2022 14:55:00 +0000
ROA not after:            Wed 05 Jul 2023 15:00:00 +0000
asID:                     267067
IP address blocks:        2804:47a4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:df:22:fc:fd:4c:53:b7:39:16:01:a6:86:48:e4:aa:c5:3e:36:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABE2B87282296266F69CE04223629CFC8BFD6354
        Validity
            Not Before: Jul  5 14:55:00 2022 GMT
            Not After : Jul  5 15:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:48:c4:72:ae:95:11:e9:2e:be:64:71:4b:00:
                    0a:38:da:2d:10:0e:21:62:35:85:94:d9:fa:78:81:
                    39:b4:89:ab:66:5d:05:8b:fe:6f:cc:45:d9:19:79:
                    24:81:0e:e0:5c:33:f2:a4:7f:19:cd:94:aa:df:7e:
                    05:17:d4:9f:00:db:15:e2:26:c2:a7:f8:62:bc:4d:
                    be:35:a7:73:e7:5f:23:73:19:11:c0:79:e6:63:9a:
                    ea:f8:db:5e:8c:78:c4:fa:48:55:fb:70:2b:80:53:
                    1d:99:3b:18:11:a8:83:51:5a:b2:d7:dc:a5:c5:7d:
                    20:c2:69:bb:c0:e8:02:42:c4:cb:d4:7d:01:ae:fe:
                    56:67:d0:a4:b6:51:50:9c:90:96:87:e3:07:42:aa:
                    6e:f7:42:79:d8:b8:9d:da:c4:45:33:bb:b7:7e:3e:
                    d3:87:1f:29:73:42:f3:9f:4e:6c:54:14:f5:74:e5:
                    99:fb:f7:b8:32:3d:87:34:e6:2f:6b:34:61:8e:71:
                    51:38:17:ee:f3:7f:8f:73:33:85:80:c0:ec:b4:03:
                    15:b6:5c:5d:a2:3d:3b:31:f6:9d:46:8c:d6:41:4c:
                    23:d6:d4:79:a7:2a:6e:43:b4:bd:e3:6d:bc:be:fa:
                    3e:d3:77:30:84:63:fd:a5:ff:dc:3d:ed:39:92:a7:
                    92:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7A:BE:54:A4:9E:4F:06:94:33:8C:64:A5:0F:81:4F:72:E9:D9:BD
            X509v3 Authority Key Identifier:
                keyid:AB:E2:B8:72:82:29:62:66:F6:9C:E0:42:23:62:9C:FC:8B:FD:63:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/ABE2B87282296266F69CE04223629CFC8BFD6354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABE2B87282296266F69CE04223629CFC8BFD6354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3a2f3332203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:2c:3a:1c:45:b7:65:40:08:ed:e6:61:f2:ac:5b:38:2b:33:
         ba:37:f7:33:da:5a:82:b6:f7:57:a0:e3:4b:c1:49:bf:e9:ff:
         87:f3:7a:fb:35:05:c3:1e:a5:22:67:61:d0:e0:d5:fa:5f:f4:
         b9:60:3a:80:94:da:e2:43:d1:91:8a:8b:3e:0a:4d:bd:0c:46:
         96:30:0a:b6:f0:22:e1:e8:8a:fa:80:b1:94:f5:31:9f:45:a3:
         6f:8e:ae:d5:a8:13:ea:c4:0b:2f:71:bf:d2:0f:11:a6:c8:96:
         55:1f:da:fa:4d:ea:d9:fb:a9:de:5d:9f:69:60:77:0d:ae:4c:
         d9:f2:a7:f3:76:02:ed:44:fb:33:a6:2e:cd:cc:fa:08:4d:f6:
         80:ae:f1:5f:95:d9:e9:e0:c5:01:8d:a8:99:b5:a3:8d:0f:a1:
         7d:08:e4:6d:20:d9:6b:3c:88:49:0a:0a:d1:6b:a5:8a:be:ab:
         0a:27:57:a4:dd:a4:c6:96:c5:54:16:2b:d6:71:b2:cd:35:f4:
         63:1e:40:30:11:5e:e8:04:40:08:5f:88:39:25:75:50:2c:6f:
         d4:90:53:24:80:9d:eb:e7:2f:6e:cd:aa:0f:b0:8e:22:ef:40:
         c4:77:1f:1a:69:e7:93:f2:4a:d9:a8:89:31:5e:63:b1:81:89:
         1d:b7:10:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----