Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33332d3333203d3e203238333630.roa
File:                     323830343a31343a3a2f33332d3333203d3e203238333630.roa (raw, json)
Hash identifier:          5RUtJ4BU/+iZBhWRWJP/vi7NwHxcxoDEWd2EwpAVoDg=
Subject key identifier:   95:18:9E:CE:4B:B5:83:3B:B2:B5:E5:72:87:C4:BD:00:D6:AE:5B:7E
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       02F0AE3D471795A46A8207313F5275E65E7B296B
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33332d3333203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:35 +0000
ROA not before:           Thu 17 Nov 2022 17:58:35 +0000
ROA not after:            Thu 16 Nov 2023 18:03:35 +0000
asID:                     28360
IP address blocks:        2804:14::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f0:ae:3d:47:17:95:a4:6a:82:07:31:3f:52:75:e6:5e:7b:29:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:35 2022 GMT
            Not After : Nov 16 18:03:35 2023 GMT
        Subject: CN=95189ECE4BB5833BB2B5E57287C4BD00D6AE5B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d8:89:82:28:51:2a:3c:2e:14:f8:59:88:24:
                    d1:f7:ea:a1:18:f1:a5:41:2a:b9:6d:7f:1a:5c:e2:
                    a3:3c:de:2e:ea:cf:95:61:3a:6e:02:ed:64:bb:ff:
                    e7:f9:0f:3a:be:35:c7:2b:97:c5:63:60:75:89:78:
                    9a:4d:7f:ee:92:77:cb:ea:89:06:ba:fc:37:96:47:
                    82:c1:30:9c:ca:52:c3:3b:db:18:86:85:80:b4:7d:
                    81:f0:36:10:96:58:9b:10:84:92:85:cb:ac:b0:b6:
                    a3:35:6f:cf:d3:32:51:b9:30:d1:43:09:2e:1c:53:
                    2e:f4:88:63:c1:e8:5e:cb:1f:a6:ad:a7:5d:92:a6:
                    99:95:c1:7c:5f:72:6b:59:04:89:1f:f4:46:e5:fc:
                    79:6b:96:a5:42:29:fb:48:c4:b6:99:79:7a:39:01:
                    c8:11:1c:d6:f7:56:d4:07:83:ce:d3:25:e3:cc:4a:
                    79:f2:a2:78:7e:f3:88:8b:28:e5:2c:3f:bc:e4:1f:
                    69:ef:67:27:e3:a0:57:86:33:56:6b:27:ee:31:78:
                    81:e6:3a:b4:a8:ae:da:3a:e3:ce:71:12:0d:bf:d5:
                    ea:cc:14:00:cf:d2:0f:5e:9c:17:60:e7:24:b1:2b:
                    78:65:71:ee:53:32:2c:96:3d:6e:df:ef:18:16:8c:
                    6b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:18:9E:CE:4B:B5:83:3B:B2:B5:E5:72:87:C4:BD:00:D6:AE:5B:7E
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33332d3333203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14::/33

    Signature Algorithm: sha256WithRSAEncryption
         16:06:8f:f3:5d:16:0c:b5:07:47:a2:b1:ad:8d:bb:99:9c:5e:
         8e:71:36:a3:b4:9a:c4:27:08:d6:41:94:44:9a:fa:32:66:36:
         a4:9c:86:34:81:f8:0e:7e:2d:24:fe:22:c8:93:3f:41:6f:e1:
         cf:d2:77:73:8b:48:e2:0a:fc:dc:4f:89:75:9f:ce:2c:d0:e3:
         d4:8b:c0:93:c6:88:04:d7:f2:01:16:4d:25:45:97:c2:dd:2f:
         63:b2:a7:47:87:97:67:b0:1e:d2:1d:25:61:33:17:09:d2:37:
         5f:e1:69:6e:12:5c:da:fc:cc:6b:f7:c4:3b:0f:f0:01:56:ab:
         69:b0:35:95:c9:10:84:88:74:2d:d6:8c:c8:d4:5b:bd:c4:b0:
         93:bc:85:2f:ec:f2:c5:d8:7a:30:7d:67:c2:0a:60:8b:72:db:
         e4:06:ce:b7:61:1d:f9:c6:7a:31:23:a6:0e:ce:bd:db:b9:3d:
         f0:a4:71:ff:4c:95:93:49:45:5c:4a:8b:05:88:e1:97:68:8e:
         9e:3c:6d:4b:d9:83:c5:7d:d9:6e:19:ba:09:9b:18:11:83:ab:
         f2:93:99:89:03:31:40:9e:3b:62:0b:33:6d:c4:8a:29:ff:10:
         3a:27:a2:db:2a:ea:8a:2f:44:a2:e1:a9:45:28:a6:76:ed:ee:
         3f:57:bd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----