Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/323830343a343030343a3a2f33322d3332203d3e20323635393238.roa
File:                     323830343a343030343a3a2f33322d3332203d3e20323635393238.roa (raw, json)
Hash identifier:          kaAV0vLt2JIo8K73plTIF4STovVile34U8XpL2Zjf/4=
Subject key identifier:   32:83:E7:83:8F:F0:3C:A8:97:6D:2A:53:8D:91:19:ED:56:42:41:23
Certificate issuer:       /CN=5265AD242CC40D9E4E242C25E31152E30289153C
Certificate serial:       6BC267975F3190E25DF7605FCA0977DF9879C002
Authority key identifier: 52:65:AD:24:2C:C4:0D:9E:4E:24:2C:25:E3:11:52:E3:02:89:15:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5265AD242CC40D9E4E242C25E31152E30289153C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/323830343a343030343a3a2f33322d3332203d3e20323635393238.roa
Signing time:             Sat 20 Aug 2022 00:46:22 +0000
ROA not before:           Sat 20 Aug 2022 00:41:22 +0000
ROA not after:            Sat 19 Aug 2023 00:46:22 +0000
asID:                     265928
IP address blocks:        2804:4004::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c2:67:97:5f:31:90:e2:5d:f7:60:5f:ca:09:77:df:98:79:c0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5265AD242CC40D9E4E242C25E31152E30289153C
        Validity
            Not Before: Aug 20 00:41:22 2022 GMT
            Not After : Aug 19 00:46:22 2023 GMT
        Subject: CN=3283E7838FF03CA8976D2A538D9119ED56424123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:ea:52:5e:5a:16:b5:66:6a:ac:d8:6c:0d:
                    c3:3f:dd:31:11:da:4f:a9:86:90:00:34:d5:39:4c:
                    63:d4:18:d4:b7:0e:1d:49:d6:6b:ee:3a:30:be:9b:
                    f9:e6:4b:14:43:a9:9f:85:06:10:00:45:5f:97:bf:
                    3a:6e:a1:89:22:78:cb:d1:ed:7d:8f:95:f8:68:c8:
                    b6:29:c4:2b:60:b7:15:2e:af:18:3e:54:21:95:6c:
                    61:e9:1c:7e:b0:56:d3:22:a4:46:cd:da:ef:58:e2:
                    7d:b4:d1:14:1e:c3:84:71:bf:e3:84:83:12:63:bf:
                    4e:0f:20:4c:34:97:24:59:e5:4a:0c:59:96:09:c8:
                    c6:2e:bf:0e:f6:d6:e4:fe:1c:ce:e4:af:a8:09:87:
                    a7:14:7b:b2:12:a2:d9:aa:fd:4a:cc:75:3d:e8:b8:
                    69:3d:93:54:38:25:5a:58:69:b8:16:73:3d:84:79:
                    d3:c8:bc:64:bf:fe:23:7b:99:10:f5:08:dc:df:b3:
                    67:94:44:ec:82:e6:da:08:70:5b:e7:be:59:9c:ab:
                    2e:46:c5:1e:b6:3a:73:f2:5b:d6:8a:7f:8b:ce:b5:
                    2e:7e:80:7f:27:8e:f3:ab:db:c0:ca:d6:86:bc:a5:
                    a2:8d:93:01:e8:f3:e1:f1:35:33:d1:25:91:e3:6e:
                    0a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:83:E7:83:8F:F0:3C:A8:97:6D:2A:53:8D:91:19:ED:56:42:41:23
            X509v3 Authority Key Identifier:
                keyid:52:65:AD:24:2C:C4:0D:9E:4E:24:2C:25:E3:11:52:E3:02:89:15:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/5265AD242CC40D9E4E242C25E31152E30289153C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5265AD242CC40D9E4E242C25E31152E30289153C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/323830343a343030343a3a2f33322d3332203d3e20323635393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4004::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:d6:55:63:e5:1b:74:c6:f0:c6:f7:68:d3:9d:b3:ce:dd:f6:
         52:2e:2d:f5:3b:72:36:63:d0:be:f8:c7:c3:b8:c4:67:81:4a:
         ea:31:d0:f0:70:62:07:d0:7f:e4:65:59:68:86:cb:30:28:a0:
         14:90:d2:9a:85:bf:89:e8:07:e8:39:81:90:41:32:55:79:b0:
         f1:47:9d:9f:35:cf:7a:44:d3:b2:31:4b:77:7c:a4:1b:7c:a4:
         04:6b:23:bd:cf:e0:5f:29:3e:30:3a:35:b1:fd:38:95:7d:76:
         45:26:0e:76:29:b1:00:06:20:18:93:e8:f1:b2:b9:4b:1a:ea:
         eb:eb:e2:b0:5a:56:dd:57:f4:29:89:85:e6:6a:3c:ed:dd:fb:
         86:4f:85:3e:3c:a5:1a:30:16:7b:59:90:c9:e9:3f:13:06:d7:
         f8:57:09:77:a7:4b:0f:dc:0f:37:68:79:23:b9:6e:07:bb:73:
         46:70:7a:f3:bd:96:80:2b:f1:34:e1:80:bf:fa:fd:bf:7c:3d:
         7c:66:88:78:a2:00:55:ff:f9:10:be:f4:64:ff:35:dd:4f:e5:
         91:75:a0:66:1d:b6:66:16:9f:94:d9:6f:65:31:c9:8e:90:a2:
         e1:e0:85:e9:c1:4f:11:b2:5e:df:6f:35:ab:5e:4f:79:c3:4f:
         83:6d:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----