Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383063323a3a2f34382d3438203d3e20323632383437.roa
File:                     323830343a3265383a383063323a3a2f34382d3438203d3e20323632383437.roa (raw, json)
Hash identifier:          SVEZN6uPYag+cVCN+dSfoWPSnD430cRuuvXqck1e3bA=
Subject key identifier:   BD:16:FF:E0:82:BC:DE:BE:96:05:11:D2:3D:42:93:BA:C8:08:88:B2
Certificate issuer:       /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial:       06A74B509D7E486C7747E387AF4B68988CB69E0A
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383063323a3a2f34382d3438203d3e20323632383437.roa
Signing time:             Sun 11 Dec 2022 18:40:36 +0000
ROA not before:           Sun 11 Dec 2022 18:35:36 +0000
ROA not after:            Sun 10 Dec 2023 18:40:36 +0000
asID:                     262847
IP address blocks:        2804:2e8:80c2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a7:4b:50:9d:7e:48:6c:77:47:e3:87:af:4b:68:98:8c:b6:9e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
        Validity
            Not Before: Dec 11 18:35:36 2022 GMT
            Not After : Dec 10 18:40:36 2023 GMT
        Subject: CN=BD16FFE082BCDEBE960511D23D4293BAC80888B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:8c:bb:e9:99:ef:83:06:b5:fa:b9:1d:8d:
                    0e:c4:7f:2a:d1:89:f7:37:11:54:12:9d:3f:4c:42:
                    1f:3b:93:7f:d9:4e:b0:1f:a5:4c:f3:cf:59:14:8c:
                    6f:3c:01:2a:0a:fd:4a:33:b1:9a:dd:49:26:52:bf:
                    a4:87:0d:76:bb:75:02:61:5f:4a:3e:e8:40:f6:e2:
                    0b:be:ef:97:10:1a:42:d4:f5:88:26:9c:44:3f:11:
                    11:58:a3:c8:f9:68:ad:8f:39:91:34:63:17:87:59:
                    0c:bf:3b:08:81:73:85:ab:4b:13:2e:81:99:36:2f:
                    b9:d2:e9:40:ad:de:16:7f:33:d5:35:30:17:f8:51:
                    a8:d2:1c:3b:5a:26:26:6d:e1:84:b8:e7:87:eb:24:
                    f4:9d:9e:50:7e:c8:d4:3e:00:d0:23:89:e9:1f:ed:
                    57:0c:da:d8:55:09:43:37:57:87:7f:d4:64:c2:1b:
                    db:c8:2d:4f:d7:d2:74:b1:ad:71:1e:70:3a:3c:72:
                    1c:cb:a5:de:c9:f2:3a:e9:a6:4e:7f:66:f8:db:c9:
                    41:0e:0f:24:66:dc:20:df:65:44:30:1e:32:2d:49:
                    15:3f:da:08:cc:8f:8e:04:56:8d:29:ec:b6:82:4f:
                    8f:68:3a:5e:42:5e:10:d2:ef:51:29:29:dc:70:9b:
                    9f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:16:FF:E0:82:BC:DE:BE:96:05:11:D2:3D:42:93:BA:C8:08:88:B2
            X509v3 Authority Key Identifier:
                keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383063323a3a2f34382d3438203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:80c2::/48

    Signature Algorithm: sha256WithRSAEncryption
         d3:8e:42:00:e3:fe:0a:68:39:52:aa:aa:cd:81:92:c9:6a:84:
         39:69:c0:89:3a:37:c4:42:92:72:e5:55:68:6a:20:ab:04:1c:
         d0:d3:a3:44:0c:e1:59:25:70:4d:9e:f2:a8:77:35:3c:c6:76:
         2d:b1:09:38:ec:52:09:08:3f:d6:74:e8:70:87:04:57:27:2d:
         ad:38:d6:68:88:02:03:7f:d2:96:93:cd:c3:43:ca:ed:de:4c:
         66:0d:e2:7f:8f:f6:f8:e6:a5:a8:9b:51:7f:46:6b:92:dc:35:
         23:42:ef:c2:45:f1:67:29:43:18:8c:0e:0b:0a:2e:1b:90:13:
         03:67:08:2b:3d:d1:f8:6f:5c:98:3b:15:24:9f:70:48:5d:9a:
         c8:fd:53:9d:98:8a:a8:e4:74:f7:27:92:a5:c7:29:a2:ec:0d:
         d5:17:4f:8d:f7:d2:07:e0:2f:c3:3b:0b:e1:52:37:14:ce:b8:
         b0:1d:03:b2:0b:de:7e:54:fc:9e:52:5a:a3:0e:a3:55:0b:26:
         c5:2b:ed:79:1c:c5:b6:f4:64:ab:a3:2d:6d:be:e2:8b:f3:82:
         a8:69:74:05:86:04:65:96:9e:cf:5d:44:76:56:d7:a1:73:93:
         d5:24:53:0e:0a:dd:6b:0e:ec:de:8e:72:39:d1:4a:15:ba:99:
         f3:90:23:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----