Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a6138303a3a2f34352d3435203d3e20323637343230.roa
File:                     323830343a346433633a6138303a3a2f34352d3435203d3e20323637343230.roa (raw, json)
Hash identifier:          962vd2TOWj08eruZ/aBpOlglstPLQHRCrQj7EmdCjps=
Subject key identifier:   80:59:68:9A:45:80:43:09:22:11:DC:48:7D:8F:B5:0B:D0:26:7F:F6
Certificate issuer:       /CN=356DB07CF8617314D1E724F86FE180F52E3D1945
Certificate serial:       04C7DE4B9EEF2F8C9D1DCD8758EE4D5946CCDAEE
Authority key identifier: 35:6D:B0:7C:F8:61:73:14:D1:E7:24:F8:6F:E1:80:F5:2E:3D:19:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/356DB07CF8617314D1E724F86FE180F52E3D1945.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a6138303a3a2f34352d3435203d3e20323637343230.roa
Signing time:             Tue 02 Aug 2022 19:10:49 +0000
ROA not before:           Tue 02 Aug 2022 19:05:49 +0000
ROA not after:            Tue 01 Aug 2023 19:10:49 +0000
asID:                     267420
IP address blocks:        2804:4d3c:a80::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c7:de:4b:9e:ef:2f:8c:9d:1d:cd:87:58:ee:4d:59:46:cc:da:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356DB07CF8617314D1E724F86FE180F52E3D1945
        Validity
            Not Before: Aug  2 19:05:49 2022 GMT
            Not After : Aug  1 19:10:49 2023 GMT
        Subject: CN=8059689A458043092211DC487D8FB50BD0267FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:2c:6e:46:2a:b5:48:46:76:2b:ec:59:99:
                    57:00:65:51:a3:13:48:29:64:d4:3b:18:33:a3:81:
                    24:9d:45:f2:eb:14:b5:36:63:d0:67:af:35:38:f0:
                    a3:3e:b6:92:fd:60:90:b9:27:76:f7:bc:39:3e:a3:
                    6a:fd:91:ef:9e:88:f3:d8:5b:ff:25:1b:27:41:2c:
                    65:89:03:8d:6b:55:e0:01:85:95:11:dd:5a:6a:f0:
                    f2:e7:4b:20:95:60:f1:43:cd:92:89:18:a1:5d:8f:
                    6b:83:24:02:26:4d:dd:1f:ed:0c:06:f9:c6:79:33:
                    50:2a:b3:21:cc:54:9c:70:5b:a9:db:16:9c:2e:7f:
                    81:7b:61:f7:da:00:76:ff:5d:8f:f4:46:ee:5e:e2:
                    d2:1f:a0:e0:b6:0d:7c:fc:6c:19:99:36:dd:3f:b9:
                    42:56:e7:e3:74:4d:3d:32:4a:7d:1e:9a:09:a3:58:
                    a6:b6:cb:e6:e9:a6:03:b2:c4:e8:dd:93:e0:f0:dc:
                    50:93:a9:e8:9f:6d:cb:2e:c1:b7:5b:9e:6d:4e:58:
                    84:61:b8:00:02:51:e9:88:bc:c7:b0:7a:92:a3:16:
                    4e:8c:d7:8e:eb:12:e0:8e:dc:7b:e9:f3:7b:68:dd:
                    79:36:1a:eb:0d:93:1d:c6:30:e2:08:50:dd:a2:33:
                    20:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:59:68:9A:45:80:43:09:22:11:DC:48:7D:8F:B5:0B:D0:26:7F:F6
            X509v3 Authority Key Identifier:
                keyid:35:6D:B0:7C:F8:61:73:14:D1:E7:24:F8:6F:E1:80:F5:2E:3D:19:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/356DB07CF8617314D1E724F86FE180F52E3D1945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/356DB07CF8617314D1E724F86FE180F52E3D1945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a6138303a3a2f34352d3435203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:a80::/45

    Signature Algorithm: sha256WithRSAEncryption
         75:50:01:22:f6:5d:00:17:b8:e8:bb:bc:a6:b4:f1:56:0b:bd:
         26:68:4f:82:58:10:1e:89:0e:e9:ee:b8:58:02:e5:e8:2a:2a:
         72:56:4d:a0:e7:a4:b2:69:cd:5d:c5:f0:1b:0e:b8:70:45:54:
         84:2a:9b:ac:00:b7:fd:04:dc:dd:38:1f:10:a6:5f:46:73:02:
         12:f6:68:e0:55:ab:dc:5d:5c:c1:a5:3d:4b:b4:50:92:ab:fc:
         72:0c:b9:85:a4:23:9e:67:bb:ae:2a:ea:82:b7:42:19:06:cc:
         11:31:af:04:60:a0:8d:e6:d6:8b:65:e3:48:31:73:ea:ab:ae:
         86:93:da:d7:16:1f:e1:68:2b:68:b2:dc:51:25:79:e5:1f:7d:
         b6:7d:70:10:1b:ff:51:40:eb:6f:aa:2f:bf:a5:07:05:c8:2e:
         6b:5a:43:4d:37:f8:76:38:61:04:46:1f:27:1e:9d:f7:2a:5c:
         30:ab:a0:a5:32:4f:65:25:8d:88:1f:38:bc:d1:a5:78:3d:cb:
         ed:ee:63:2a:d1:9b:16:0e:b6:85:55:6f:6e:30:ee:63:a3:fe:
         6e:3b:bd:64:a3:26:af:a4:99:6c:37:8c:39:4f:8a:70:e3:fa:
         4c:13:1d:94:be:53:e3:89:5c:71:97:94:6f:ba:4e:7d:df:b3:
         20:e5:03:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----