Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0/323830343a366236303a3a2f33322d313238203d3e20323730333936.roa
File:                     323830343a366236303a3a2f33322d313238203d3e20323730333936.roa (raw, json)
Hash identifier:          k09Mtm1a2D8NJLpN+DQXSPySIckEN79M38uz6DAk32c=
Subject key identifier:   85:C6:39:CF:DF:0C:E1:2F:A7:04:E8:E0:F1:EA:0A:F5:49:93:4F:6C
Certificate issuer:       /CN=FCE4412C7EBFFE9F9AF8F23BD851E8BD673D2238
Certificate serial:       32367D4A20DDE3AA80BDBDE970D6CFC45B3EA5B9
Authority key identifier: FC:E4:41:2C:7E:BF:FE:9F:9A:F8:F2:3B:D8:51:E8:BD:67:3D:22:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCE4412C7EBFFE9F9AF8F23BD851E8BD673D2238.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0/323830343a366236303a3a2f33322d313238203d3e20323730333936.roa
Signing time:             Thu 15 Dec 2022 12:47:13 +0000
ROA not before:           Thu 15 Dec 2022 12:42:13 +0000
ROA not after:            Thu 14 Dec 2023 12:47:13 +0000
asID:                     270396
IP address blocks:        2804:6b60::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:36:7d:4a:20:dd:e3:aa:80:bd:bd:e9:70:d6:cf:c4:5b:3e:a5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE4412C7EBFFE9F9AF8F23BD851E8BD673D2238
        Validity
            Not Before: Dec 15 12:42:13 2022 GMT
            Not After : Dec 14 12:47:13 2023 GMT
        Subject: CN=85C639CFDF0CE12FA704E8E0F1EA0AF549934F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:21:4c:0b:e0:0c:1e:7d:32:07:dc:1e:e1:5f:
                    a2:f4:c6:c9:90:26:c7:e4:b7:f9:a4:42:ad:bb:b0:
                    79:22:a8:64:b9:6a:62:4b:89:d0:78:ec:3c:b8:1d:
                    d0:8f:7d:1c:8d:ed:40:7c:1f:bf:45:06:8f:04:29:
                    31:ae:17:99:7d:d6:ee:29:0a:34:65:20:75:70:c8:
                    54:5a:16:0b:cb:e8:1f:b9:2d:d0:30:73:3f:fc:0c:
                    cd:b9:d6:a0:e8:61:74:40:db:71:55:79:f0:85:0e:
                    f4:f6:ea:f8:01:19:fd:76:2e:8a:82:21:4e:4f:df:
                    4c:8c:28:5b:fc:14:e3:35:93:22:7b:1e:72:9b:fe:
                    6b:87:80:c2:19:e5:e9:ee:bc:a7:19:ef:62:12:da:
                    30:d0:97:f1:10:3d:f1:29:86:0c:7c:03:68:41:09:
                    61:67:c6:4b:0d:38:f1:f3:58:36:bc:9b:86:0e:9d:
                    6d:99:ab:de:7d:f7:2a:cb:06:6f:96:cb:9a:b5:ff:
                    18:7b:e5:b4:3a:8c:15:2b:b7:f9:1f:0d:06:67:65:
                    83:2a:6b:0c:c8:b6:c6:ae:8e:e3:07:34:2a:c3:8b:
                    5b:8f:38:fd:be:e8:7e:42:0e:14:82:83:d4:5c:d0:
                    84:c1:fb:d3:34:1b:da:c4:25:bd:2c:fc:f2:bd:54:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C6:39:CF:DF:0C:E1:2F:A7:04:E8:E0:F1:EA:0A:F5:49:93:4F:6C
            X509v3 Authority Key Identifier:
                keyid:FC:E4:41:2C:7E:BF:FE:9F:9A:F8:F2:3B:D8:51:E8:BD:67:3D:22:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0/FCE4412C7EBFFE9F9AF8F23BD851E8BD673D2238.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCE4412C7EBFFE9F9AF8F23BD851E8BD673D2238.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0/323830343a366236303a3a2f33322d313238203d3e20323730333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:c2:16:f4:67:a5:36:88:ef:73:fa:1b:0e:5d:9f:b7:b3:15:
         17:76:10:5d:01:a1:f2:5c:a0:11:6b:77:9f:db:df:ed:e3:cb:
         4c:c6:52:02:9f:38:8f:22:83:a3:b0:d4:cd:6a:ec:9c:b1:27:
         85:5a:55:2d:24:05:5e:e3:44:8b:9d:70:ee:91:55:13:a7:54:
         c9:2e:e4:57:be:68:be:ec:27:e3:45:23:2e:c4:fa:e0:93:f3:
         c0:35:23:57:fb:bf:ea:d2:02:c7:24:55:3f:af:3c:a4:42:f9:
         d7:5b:b6:e6:b2:80:68:32:97:33:66:cb:13:ee:d4:f7:51:09:
         ba:c6:0e:d9:6d:ee:3f:9c:2b:a1:6e:9f:51:d0:dd:62:04:55:
         20:da:59:f7:12:46:35:e6:da:82:03:a5:e6:b5:21:38:e0:69:
         4e:f8:74:97:e5:d0:12:c1:fc:75:f8:a9:fc:a9:6e:99:44:13:
         37:99:95:03:33:98:e8:29:90:de:64:6c:c0:b9:4d:b0:cf:82:
         4a:25:2a:76:b8:a7:5a:5a:8f:3e:08:f3:a7:ca:e0:30:8a:16:
         a6:8b:c7:a9:93:99:f5:a5:b3:c5:a5:49:8e:b9:84:75:d3:b0:
         d6:2b:2a:ce:0b:8d:84:8f:d0:e2:2a:1c:57:7b:47:fd:92:4b:
         55:91:41:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----