Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030623a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a3966383a343030623a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          9/eQ2YEuMc6WpMVAoHmCH6oA1qB+xI7yYOj9G/QWZHo=
Subject key identifier:   01:15:DB:7B:20:BA:E4:01:3E:E8:DA:01:C5:53:C3:7E:29:35:3E:1C
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       7D0D76D6C2F5862E7A5861452131404D0894682A
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030623a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:20:15 +0000
ROA not before:           Tue 09 Aug 2022 13:15:15 +0000
ROA not after:            Tue 08 Aug 2023 13:20:15 +0000
asID:                     262773
IP address blocks:        2804:9f8:400b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0d:76:d6:c2:f5:86:2e:7a:58:61:45:21:31:40:4d:08:94:68:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:15:15 2022 GMT
            Not After : Aug  8 13:20:15 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:71:7d:91:ac:db:51:3a:7a:b5:ca:93:f2:8c:
                    f9:c3:ce:de:02:e9:9d:5a:8a:fd:c3:59:6b:e3:08:
                    26:b8:2d:d5:d5:18:f3:f7:8c:c2:34:20:0b:0e:57:
                    46:62:d6:0e:74:c4:3d:2c:d4:f7:ee:8c:b3:dc:58:
                    99:41:dd:78:10:68:e3:28:7b:4a:21:84:f8:4b:e5:
                    7b:7a:77:24:fa:d0:79:66:c4:f4:9d:5d:82:3f:6b:
                    c2:bf:be:e4:cf:a9:c6:de:5f:1e:ed:10:bb:55:66:
                    9e:a4:fc:09:86:ea:fe:98:15:ec:f6:d6:12:42:c7:
                    62:62:b2:32:29:71:0a:56:9e:c0:e1:7b:8a:92:f9:
                    6d:52:93:fa:09:8b:88:ac:b3:04:09:e2:35:41:50:
                    d9:a2:3c:40:7e:90:e2:39:5a:40:d7:7b:92:a2:74:
                    9c:9a:2c:7f:c1:6d:e7:cc:68:f5:e0:9a:6f:91:1e:
                    b9:f0:78:9c:65:a3:57:86:a7:39:32:99:27:f8:f5:
                    65:f7:8b:c8:5d:71:97:13:d1:c0:6c:32:83:2c:d1:
                    57:71:3b:74:09:a4:0a:ef:de:ed:a5:ef:bb:87:09:
                    b7:38:87:ad:ef:7e:f7:75:6d:5e:ae:0a:95:7b:fc:
                    02:00:bd:14:88:a4:c1:dc:64:ec:d0:4e:15:49:7c:
                    fd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:15:DB:7B:20:BA:E4:01:3E:E8:DA:01:C5:53:C3:7E:29:35:3E:1C
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030623a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:400b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:a6:66:ea:fc:d8:b0:43:fd:3a:da:13:7a:2f:5b:35:5b:c4:
         a4:17:7f:f4:b1:64:34:bb:a9:2b:cc:a0:c4:f9:01:e2:1f:00:
         73:a2:69:6c:35:bd:c3:1f:57:3c:2b:ae:69:76:e7:48:d1:42:
         3b:27:4a:32:20:2f:1f:5d:62:22:5a:37:eb:93:b6:9b:40:07:
         95:59:44:b5:ca:93:0c:d0:84:80:bb:59:4a:92:a0:18:e1:5a:
         47:b1:fb:d9:74:1d:3c:f2:e0:af:40:a9:26:c8:66:96:6d:2e:
         58:db:30:41:7a:cc:34:32:28:3e:59:9b:10:bf:76:b0:44:ee:
         c9:36:b6:bf:c0:09:86:13:8c:47:87:4c:35:63:79:7d:13:53:
         12:ff:86:a3:73:56:2b:f9:9d:95:69:e2:16:34:e8:ad:47:e8:
         fe:56:b0:58:96:be:51:61:06:3c:1b:08:52:27:8a:13:9c:99:
         59:38:01:4a:61:42:e1:ab:68:8f:2b:30:5c:af:ab:6a:4f:eb:
         c4:fa:9e:2b:c3:f1:30:55:be:f4:9f:a3:c3:30:24:d0:61:12:
         8b:c9:6d:35:32:e4:53:e2:e3:4d:d4:d6:23:74:ad:b4:ae:8f:
         da:ca:48:dc:fd:28:9a:9b:a9:3b:d5:dc:40:ac:81:0c:78:bb:
         7c:44:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----