Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a3a2f33322d3332203d3e20323632373733.roa
File:                     323830343a3966383a3a2f33322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          D012QG28USeBoRFYflCGB0zOoMD+hdkjPjJJDsLN0bQ=
Subject key identifier:   A8:E4:F8:FF:E5:CB:74:E7:02:5D:06:19:D6:98:C9:FF:69:91:15:3C
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       1EFE2AF3D774D5E5A7D1C3E22A15391F3C45299F
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a3a2f33322d3332203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:28 +0000
ROA not before:           Tue 27 Sep 2022 19:14:28 +0000
ROA not after:            Tue 26 Sep 2023 19:19:28 +0000
asID:                     262773
IP address blocks:        2804:9f8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fe:2a:f3:d7:74:d5:e5:a7:d1:c3:e2:2a:15:39:1f:3c:45:29:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:28 2022 GMT
            Not After : Sep 26 19:19:28 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:32:51:b7:58:36:ac:b8:b3:bd:16:28:03:
                    b5:b3:6a:87:88:25:eb:c8:0e:3b:4e:8e:6f:28:39:
                    64:d5:41:7c:e5:a0:7e:b9:99:70:dc:68:4c:88:58:
                    2f:87:42:3f:42:ca:af:01:91:1f:fd:75:8b:42:a5:
                    a5:c4:f5:b1:05:cd:32:5a:3d:99:b0:78:43:b4:d9:
                    4a:8e:73:d1:7a:d5:f1:51:64:4e:d6:cc:46:6d:b4:
                    14:12:69:47:ac:bf:a8:27:69:e6:e4:1a:41:39:20:
                    f1:bf:8f:4b:bd:c8:1a:b3:c7:31:bc:22:89:9c:d6:
                    7a:ed:16:fd:b9:88:97:fa:de:3e:a6:2d:dc:a6:7f:
                    3e:67:5e:7c:1e:49:ad:c7:85:0a:fe:53:88:ef:12:
                    4e:12:01:9c:8e:27:e3:79:6b:86:4e:e0:07:29:f0:
                    22:b6:b4:48:fe:87:b4:ec:d5:b8:bb:6a:3a:7a:90:
                    26:3f:38:ea:76:7a:f9:84:1d:38:02:80:9f:d4:2e:
                    5c:cd:bc:a7:7e:58:97:71:15:49:3b:21:2d:84:b7:
                    bc:a6:e4:96:b4:d6:42:44:2e:b9:e0:2f:0c:62:fa:
                    d1:54:ae:71:ae:6e:75:59:36:89:08:d9:31:36:0c:
                    a0:43:ba:eb:0d:4b:44:cc:51:4e:0c:80:c6:c4:f0:
                    4b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E4:F8:FF:E5:CB:74:E7:02:5D:06:19:D6:98:C9:FF:69:91:15:3C
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a3a2f33322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:07:bb:e3:66:98:79:4e:94:0d:f5:37:35:87:eb:e4:c8:87:
         8c:b9:d7:6b:43:a4:4f:05:25:99:13:50:dd:89:55:84:dc:8c:
         4a:0b:f3:b2:81:e9:ee:8e:1e:b7:7a:ba:15:47:81:44:31:68:
         ea:5d:e2:e9:06:bf:63:bb:91:e3:7c:0d:fb:52:33:ab:58:74:
         40:ce:50:bb:a8:44:1a:b7:13:e8:6f:e5:c4:5b:77:ed:30:0e:
         ea:50:2f:aa:72:fe:e0:13:e3:0d:72:5f:84:0d:66:63:8c:1f:
         6d:44:d2:3f:df:37:2a:53:33:e0:1f:dc:a8:1c:d9:e7:b8:3a:
         5c:a8:17:3f:0f:86:bc:8e:01:3d:59:dc:c8:2d:13:18:27:6e:
         55:c8:70:8c:bc:7d:7e:b1:e1:dd:ee:09:66:45:47:0a:06:b5:
         d7:af:0d:68:17:8c:e1:73:6a:2b:35:66:d6:ed:44:43:3b:66:
         94:60:8d:1d:40:d6:a0:4f:36:1c:2d:4e:bc:c9:11:2e:72:6d:
         fa:c2:80:bf:1c:0e:c3:ae:53:4c:55:58:d8:92:85:18:75:16:
         dd:f6:1e:cc:5b:91:a2:f0:0d:71:14:21:d0:57:2e:c6:7f:62:
         80:21:a2:b1:14:42:a5:bc:16:e6:24:59:fd:34:d4:fe:c5:19:
         4b:fa:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----