Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/323830343a313537343a3a2f33322d3438203d3e20323633333839.roa
File:                     323830343a313537343a3a2f33322d3438203d3e20323633333839.roa (raw, json)
Hash identifier:          p/yWZYO7DXDKms0Lk/vgM3qTZagpnt+S0lkbowlUmG0=
Subject key identifier:   0F:A8:90:CA:85:8F:91:B2:46:E6:AD:61:A6:0E:5E:8E:F2:9B:54:C3
Certificate issuer:       /CN=DD3760EF84954446A79C77767939A1C7859DA5C9
Certificate serial:       1F21E81C8F6A8DDC8320EC41FF5D9BAF6037232B
Authority key identifier: DD:37:60:EF:84:95:44:46:A7:9C:77:76:79:39:A1:C7:85:9D:A5:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3760EF84954446A79C77767939A1C7859DA5C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/323830343a313537343a3a2f33322d3438203d3e20323633333839.roa
Signing time:             Sat 09 Jul 2022 12:42:00 +0000
ROA not before:           Sat 09 Jul 2022 12:37:00 +0000
ROA not after:            Sat 08 Jul 2023 12:42:00 +0000
asID:                     263389
IP address blocks:        2804:1574::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:21:e8:1c:8f:6a:8d:dc:83:20:ec:41:ff:5d:9b:af:60:37:23:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD3760EF84954446A79C77767939A1C7859DA5C9
        Validity
            Not Before: Jul  9 12:37:00 2022 GMT
            Not After : Jul  8 12:42:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1c:a3:18:d3:33:51:17:8b:15:b4:fb:4c:c5:
                    15:76:65:88:e3:f8:0f:b7:ff:19:48:08:0f:24:dd:
                    d6:c2:b9:10:6d:c0:f2:3e:92:34:61:11:07:fa:64:
                    55:a4:b1:44:4c:35:f6:18:70:b1:cd:3a:ca:f1:af:
                    33:9c:92:07:0c:76:7f:09:65:a2:6a:cf:78:5d:34:
                    11:36:93:92:9a:a9:11:b5:35:a0:fa:80:22:51:ab:
                    c8:0a:e8:70:24:f4:ac:00:4b:f6:93:8f:37:cd:f9:
                    cc:65:98:ba:7f:05:c9:cc:15:e1:13:e7:a6:5c:0b:
                    02:dc:12:78:62:50:6f:b0:e9:25:99:14:2d:0b:31:
                    7b:5e:5a:a2:07:03:89:85:ab:72:e8:fe:65:69:88:
                    7a:01:d3:6c:7f:3d:55:cd:82:b0:c6:98:03:c4:8a:
                    f7:29:2b:12:35:3b:f2:66:3e:ef:b9:61:2c:72:e5:
                    d0:54:8b:33:ce:e7:48:f5:7f:7a:5f:bf:74:93:73:
                    41:c8:f7:ba:b8:99:93:f7:39:a1:b5:4c:35:f4:9c:
                    51:29:41:34:e1:df:36:37:27:0f:d8:13:64:8a:56:
                    10:40:68:cc:8d:fd:0a:91:b7:bd:dc:70:06:42:22:
                    8a:8d:d1:9e:b2:1a:0b:fc:ae:15:0b:d0:fc:c9:e0:
                    38:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A8:90:CA:85:8F:91:B2:46:E6:AD:61:A6:0E:5E:8E:F2:9B:54:C3
            X509v3 Authority Key Identifier:
                keyid:DD:37:60:EF:84:95:44:46:A7:9C:77:76:79:39:A1:C7:85:9D:A5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/DD3760EF84954446A79C77767939A1C7859DA5C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3760EF84954446A79C77767939A1C7859DA5C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/323830343a313537343a3a2f33322d3438203d3e20323633333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1574::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:3d:8a:3c:8b:84:d3:46:f8:9e:79:4c:fa:b8:6f:42:e9:6a:
         5a:af:47:5d:62:c9:d8:ca:48:ca:26:5d:b5:48:e0:0a:04:0c:
         f8:07:0d:90:34:2d:99:fe:3a:78:05:1d:d3:c9:ec:7e:94:45:
         13:11:09:1b:37:81:1e:b0:bc:b9:cb:50:0a:f1:5e:8e:d5:12:
         00:ec:9b:e6:63:88:70:ff:94:d4:6c:b6:ed:2b:ec:31:33:1c:
         0e:a6:7c:ca:9f:df:4d:c4:94:78:30:88:b1:e1:b7:d1:4f:fc:
         a7:74:ad:7b:f9:4d:18:fc:52:d9:b7:a6:ad:64:f4:d1:8b:9e:
         61:a5:0b:bb:18:bb:35:ad:06:8c:af:d2:04:24:ea:e5:e7:8e:
         57:2b:78:39:02:33:c5:2c:58:0b:75:75:05:b1:73:ea:25:c1:
         0e:f7:cb:a5:fb:ce:25:b4:06:b1:5b:1e:67:c8:92:eb:85:ff:
         69:19:6c:db:3b:a0:3d:e1:de:c4:1f:c1:0c:1f:0e:91:78:3b:
         e5:7b:5a:27:7c:08:0a:eb:f1:04:0f:d6:e8:2c:df:b2:ff:be:
         c1:86:bb:52:95:c5:f1:2b:35:b0:90:76:0f:6a:0c:31:03:b3:
         71:40:74:78:58:15:16:c8:91:ff:d1:e7:0f:f1:11:5c:9e:09:
         43:52:9f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----