Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a313030303a3a2f34302d3430203d3e203237363838.roa
File:                     323830343a353461303a313030303a3a2f34302d3430203d3e203237363838.roa (raw, json)
Hash identifier:          0NffWg648EdEqeL2MLw1JfdjFaGDtaIDlZCpp+OkSpo=
Subject key identifier:   1E:90:B1:16:3F:06:45:9A:3A:8F:11:AD:5F:C4:76:65:4B:F2:96:D8
Certificate issuer:       /CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
Certificate serial:       5BB8F2FCC615225EAA975C908EADFD9C513AE50C
Authority key identifier: AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a313030303a3a2f34302d3430203d3e203237363838.roa
Signing time:             Fri 15 Jul 2022 21:08:10 +0000
ROA not before:           Fri 15 Jul 2022 21:03:10 +0000
ROA not after:            Fri 14 Jul 2023 21:08:10 +0000
asID:                     27688
IP address blocks:        2804:54a0:1000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b8:f2:fc:c6:15:22:5e:aa:97:5c:90:8e:ad:fd:9c:51:3a:e5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
        Validity
            Not Before: Jul 15 21:03:10 2022 GMT
            Not After : Jul 14 21:08:10 2023 GMT
        Subject: CN=1E90B1163F06459A3A8F11AD5FC476654BF296D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fb:f7:a3:3f:9e:7e:68:1c:c9:2e:37:cb:7c:
                    83:e0:87:50:ba:0e:2c:8d:5e:01:4e:08:bd:cd:99:
                    ea:eb:4a:e4:53:90:87:ae:de:43:d4:2f:31:55:f3:
                    73:f3:0d:7f:de:b8:b8:da:33:26:54:3b:34:47:e4:
                    7b:81:1c:21:8e:e6:bc:40:bb:b5:d7:e8:16:96:e0:
                    40:2e:0c:38:61:60:80:f4:76:9d:3e:4c:0b:fb:1a:
                    d6:3e:55:9c:3d:49:98:dc:ff:31:f4:f1:59:d7:53:
                    d7:de:35:3d:74:78:49:bf:17:e0:f2:ef:2a:c9:82:
                    64:83:c8:45:a1:49:df:76:93:00:da:95:4b:82:70:
                    dc:f6:cf:8d:02:49:62:7c:15:5d:3d:83:4c:03:9a:
                    c7:e7:61:f4:9b:c6:b6:5d:7f:a9:3d:47:8d:cb:f6:
                    a1:50:b6:28:55:f1:d7:4c:6d:ee:39:e1:29:e1:62:
                    fd:4c:f1:9c:3d:bd:70:55:e4:34:c8:12:2c:dd:df:
                    3c:2a:af:0c:6b:9e:42:fb:71:e1:34:9d:76:c7:2d:
                    d1:a6:64:b9:0b:ec:00:f1:39:ef:fd:dc:ba:a7:4b:
                    58:c0:eb:a8:3d:54:f8:34:d0:67:cd:af:b1:ee:4b:
                    37:af:05:41:f1:67:27:2a:e8:bb:c0:84:42:29:0e:
                    96:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:90:B1:16:3F:06:45:9A:3A:8F:11:AD:5F:C4:76:65:4B:F2:96:D8
            X509v3 Authority Key Identifier:
                keyid:AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a313030303a3a2f34302d3430203d3e203237363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a0:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:16:5c:57:64:fe:23:18:b1:b2:40:9b:61:e7:69:b8:d1:35:
         a2:0d:fb:a0:f1:d1:82:13:d2:5e:13:0c:04:79:14:77:7b:bc:
         7a:2a:6f:2a:80:22:71:2f:d4:bc:00:53:12:fd:07:ee:58:fe:
         1b:5c:ca:9e:f2:dd:df:a9:d3:70:ec:42:2e:de:75:1c:4a:16:
         86:5a:84:af:41:1d:86:cf:55:60:d8:90:a2:53:33:5d:74:93:
         60:99:88:58:01:23:91:06:3c:ae:63:4c:98:4b:5b:c1:26:d5:
         94:26:94:df:34:5e:1f:63:a5:b9:f5:ed:83:11:72:d4:a5:a8:
         9a:9e:90:dd:6a:33:95:15:83:e8:e4:62:59:45:fe:b9:18:b9:
         27:06:76:a0:c1:91:56:63:bf:13:6a:0e:6e:1c:02:2f:b6:b6:
         cf:f8:ed:89:c6:24:d5:e8:3e:e1:e9:fd:9b:5c:2a:96:bb:de:
         88:a3:a6:03:b5:d6:2e:e6:25:13:1b:0a:a5:6c:6c:d4:fb:58:
         fc:c2:14:fc:53:79:c4:28:c8:7a:c4:d1:91:4f:97:fb:4b:ff:
         82:58:56:75:75:3e:26:c2:55:c9:15:4b:3a:fa:df:2b:da:75:
         83:bf:85:02:f3:8d:57:11:c8:76:c8:1d:e6:d4:91:10:80:78:
         c0:7f:05:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----