Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/323830343a373636303a3a2f33322d3332203d3e20323731313038.roa
File:                     323830343a373636303a3a2f33322d3332203d3e20323731313038.roa (raw, json)
Hash identifier:          oy6bSFtPOaUWHuW7E3iEKVF72TISdBrIWMObZcI+5pU=
Subject key identifier:   8F:89:29:E8:F3:CA:A4:AA:A9:18:9D:A4:1F:93:A6:AD:EC:AC:65:7B
Certificate issuer:       /CN=CAC39154F7C09F9C6EFFD4CC4E7E96F60C99CD37
Certificate serial:       4030105DA69AE5AE7B084E6C0C0387DF8687E583
Authority key identifier: CA:C3:91:54:F7:C0:9F:9C:6E:FF:D4:CC:4E:7E:96:F6:0C:99:CD:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAC39154F7C09F9C6EFFD4CC4E7E96F60C99CD37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/323830343a373636303a3a2f33322d3332203d3e20323731313038.roa
Signing time:             Fri 10 Dec 2021 17:30:00 +0000
ROA not before:           Fri 10 Dec 2021 17:25:00 +0000
ROA not after:            Fri 09 Dec 2022 17:30:00 +0000
asID:                     271108
IP address blocks:        2804:7660::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:30:10:5d:a6:9a:e5:ae:7b:08:4e:6c:0c:03:87:df:86:87:e5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAC39154F7C09F9C6EFFD4CC4E7E96F60C99CD37
        Validity
            Not Before: Dec 10 17:25:00 2021 GMT
            Not After : Dec  9 17:30:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:07:00:98:76:de:9a:1c:d6:00:39:9a:1d:f0:
                    f7:dd:4f:bb:23:b4:67:e2:d5:cc:2a:4a:7d:b4:6a:
                    d2:4b:7b:f1:49:42:53:ca:58:de:36:ef:34:91:09:
                    3e:91:a2:82:a9:fe:1a:e0:45:4a:60:19:df:3c:29:
                    8b:67:34:ba:7e:85:36:6e:b9:07:26:86:f0:28:f3:
                    b6:38:24:d8:68:01:d4:31:be:e8:0b:1e:5f:d7:82:
                    7b:b2:ea:54:4d:61:17:4e:e2:c4:76:0e:97:7a:20:
                    4f:80:77:64:9e:29:98:46:d6:fc:cc:bf:54:08:69:
                    33:d7:d1:68:a6:62:fc:19:0d:1a:31:f0:4b:19:89:
                    8b:fd:24:03:c0:33:95:91:27:3d:c2:96:cc:fd:e3:
                    9a:09:75:a9:34:f3:c2:a0:1e:df:1e:f0:c1:6b:d9:
                    c0:cd:c6:81:48:b8:61:93:82:bc:57:92:5c:33:0e:
                    22:34:66:3b:7c:4a:b7:ad:17:76:48:94:db:35:80:
                    0c:3e:6d:b0:0e:d2:0b:80:d6:d9:e1:45:3a:9e:a6:
                    1e:61:3a:19:76:be:45:89:e0:52:44:2a:78:03:e6:
                    9a:3d:67:b4:40:f9:54:42:7b:28:23:87:1a:a4:03:
                    b5:87:ed:cd:75:bd:c4:e1:6e:82:11:15:15:83:e2:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:89:29:E8:F3:CA:A4:AA:A9:18:9D:A4:1F:93:A6:AD:EC:AC:65:7B
            X509v3 Authority Key Identifier:
                keyid:CA:C3:91:54:F7:C0:9F:9C:6E:FF:D4:CC:4E:7E:96:F6:0C:99:CD:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/CAC39154F7C09F9C6EFFD4CC4E7E96F60C99CD37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAC39154F7C09F9C6EFFD4CC4E7E96F60C99CD37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/323830343a373636303a3a2f33322d3332203d3e20323731313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7660::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:ca:1b:68:20:00:81:c3:75:24:a5:03:35:37:10:ba:e0:1d:
         1b:98:f5:ba:84:12:84:a8:70:d6:42:84:82:24:9c:02:a6:2b:
         70:c4:99:9f:57:e9:3a:a4:35:45:22:99:bd:61:5f:29:33:ed:
         36:dd:4c:26:98:7f:dd:01:bf:5f:0a:35:19:e7:c3:0b:92:a8:
         dc:b6:28:04:2a:18:51:e0:83:b8:a1:d8:f6:7f:01:49:77:62:
         be:f7:ee:aa:ed:f8:99:9e:49:1b:bc:10:7a:7a:53:7f:de:5c:
         e1:f4:52:93:0f:05:49:29:cf:d6:03:91:25:1e:98:89:5b:1d:
         b2:6c:6a:2f:04:a1:f1:43:82:4c:05:ff:27:62:0d:4e:4c:b7:
         c3:49:56:aa:70:87:68:d9:70:c5:e0:7d:e7:85:f7:25:28:93:
         ce:aa:9d:1b:ba:8c:d8:9a:66:f3:d7:7f:3b:cf:57:08:71:da:
         61:f0:f2:e5:24:34:3c:55:a6:7a:a5:3e:91:c2:05:74:6c:35:
         04:d2:7c:47:5a:60:c5:de:47:88:f2:81:95:48:2a:d4:fe:51:
         95:86:1a:ab:0d:eb:e7:11:99:df:39:3c:33:17:91:e6:73:1a:
         18:09:fd:54:88:62:b8:1f:5c:80:9f:6c:ff:c6:82:5a:be:58:
         2e:b9:7c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----