Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a3a2f33332d3333203d3e20323632373733.roa
File:                     323830343a3966383a3a2f33332d3333203d3e20323632373733.roa (raw, json)
Hash identifier:          KxcaXT7X/rLgo5fEFaMvPrmFzVhQG1bKH/UOcSE3vO0=
Subject key identifier:   E1:1D:90:2D:37:84:CE:9C:3B:68:56:F9:36:73:81:C1:F1:11:E0:75
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       549DA8F6223D97249BC52611B295DCF7077C0AE6
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a3a2f33332d3333203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:24 +0000
ROA not before:           Tue 27 Sep 2022 19:14:24 +0000
ROA not after:            Tue 26 Sep 2023 19:19:24 +0000
asID:                     262773
IP address blocks:        2804:9f8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9d:a8:f6:22:3d:97:24:9b:c5:26:11:b2:95:dc:f7:07:7c:0a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:24 2022 GMT
            Not After : Sep 26 19:19:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:51:39:02:aa:88:3e:0f:2a:30:ec:f3:35:a9:
                    0b:cf:a1:4d:8a:4e:d7:27:c5:11:8b:55:c5:fd:1c:
                    3d:b0:46:e2:1e:f2:27:8c:5f:cc:a8:eb:92:69:cb:
                    a6:bb:20:9c:c3:03:72:0c:f8:85:e3:c9:85:e7:f6:
                    1c:1a:c3:fe:37:de:a9:71:37:ea:c4:76:81:33:50:
                    0c:83:e7:c8:fe:3d:ce:db:60:f3:16:4e:94:63:2d:
                    8e:25:dd:57:6f:78:69:e5:4c:4e:1b:db:ed:70:85:
                    76:d0:49:b9:5f:f4:27:80:1a:9a:a4:7c:0c:6c:37:
                    db:db:95:4d:14:7c:8c:8c:92:b7:0c:05:90:31:61:
                    70:02:59:fe:48:46:f8:75:a5:43:45:f1:50:94:f4:
                    f8:d1:bd:24:7e:3a:9c:8d:a1:3e:ed:a6:7a:8f:d7:
                    9c:c0:9a:d9:9e:12:4a:4e:90:69:7b:aa:47:83:36:
                    5b:c7:e5:ef:48:f9:a0:4e:d4:aa:e4:a8:1a:98:b3:
                    1e:b7:88:5d:53:f1:7a:ac:47:61:7c:08:96:f0:9b:
                    3b:7a:c5:51:b6:32:b1:73:13:c8:e0:15:68:49:20:
                    05:64:87:6e:09:2a:6f:2f:92:79:f7:48:4e:52:cd:
                    32:33:f1:61:9f:62:3e:fc:7c:ad:9c:66:14:bf:16:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1D:90:2D:37:84:CE:9C:3B:68:56:F9:36:73:81:C1:F1:11:E0:75
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a3a2f33332d3333203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8::/33

    Signature Algorithm: sha256WithRSAEncryption
         b4:21:16:86:d1:22:1b:4c:92:0e:88:04:db:75:90:21:9f:12:
         47:10:5c:2d:fe:33:4e:0a:1a:05:94:a4:38:62:3c:2f:c6:e5:
         91:73:a0:5f:01:09:50:56:e1:69:f9:df:24:38:15:f3:f5:da:
         95:ee:15:c4:fe:a4:1b:b3:bd:67:d3:7c:3e:19:b2:32:d2:b1:
         52:e4:b4:c4:4c:6c:33:02:89:39:b3:70:18:bc:56:ea:21:df:
         12:f5:22:db:09:7f:c1:c1:23:59:14:02:83:97:6a:c4:7d:0c:
         b3:51:a6:04:06:b7:29:f9:e8:6f:4d:b4:7a:93:2f:4f:16:6a:
         56:55:16:12:4e:f8:39:a9:09:e5:68:d7:3e:bc:69:90:fb:b7:
         2b:da:9c:15:02:a2:cd:46:e7:84:1c:35:cf:cd:51:a7:93:b3:
         02:b5:21:38:0e:c7:2a:f5:54:f2:51:3a:5d:85:36:3a:01:11:
         df:9c:39:cb:60:6f:6a:58:7d:67:7b:25:ec:e1:57:f3:54:e4:
         e6:1a:ac:7a:fe:50:a4:59:44:01:7b:e8:e3:01:44:93:35:4e:
         74:d4:be:9e:67:6c:91:50:25:50:3c:e5:95:b9:6a:a5:87:2e:
         5a:83:65:d0:84:da:bd:ae:c5:0a:47:0f:b2:1f:c1:0f:68:00:
         5f:ae:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----