Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/323830343a353866343a633030303a3a2f33342d3334203d3e20323638313630.roa
File:                     323830343a353866343a633030303a3a2f33342d3334203d3e20323638313630.roa (raw, json)
Hash identifier:          iO7/qB2GJnjkRyZBlH8SSTFO0wEZoZoxYqjSoEy/cpk=
Subject key identifier:   63:F7:3B:E2:4F:0F:77:E6:57:11:DC:47:AC:AE:86:D6:09:97:74:E4
Certificate issuer:       /CN=1C11E8770FA62CB23F7D77E2C262D80D54B60BF0
Certificate serial:       70F236F0980879E41779420161E3055DB5C6ADE0
Authority key identifier: 1C:11:E8:77:0F:A6:2C:B2:3F:7D:77:E2:C2:62:D8:0D:54:B6:0B:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/323830343a353866343a633030303a3a2f33342d3334203d3e20323638313630.roa
Signing time:             Tue 06 Dec 2022 15:22:48 +0000
ROA not before:           Tue 06 Dec 2022 15:17:48 +0000
ROA not after:            Tue 05 Dec 2023 15:22:48 +0000
asID:                     268160
IP address blocks:        2804:58f4:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f2:36:f0:98:08:79:e4:17:79:42:01:61:e3:05:5d:b5:c6:ad:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C11E8770FA62CB23F7D77E2C262D80D54B60BF0
        Validity
            Not Before: Dec  6 15:17:48 2022 GMT
            Not After : Dec  5 15:22:48 2023 GMT
        Subject: CN=63F73BE24F0F77E65711DC47ACAE86D6099774E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:b2:9a:1a:55:98:f5:a1:ae:aa:8d:2e:6e:
                    9a:ad:55:ac:b6:47:2a:b0:37:2d:f4:0d:3a:50:7e:
                    0b:e3:b4:2d:51:6f:e7:8c:6c:14:6b:3d:ba:bb:04:
                    f2:66:b9:a1:de:70:89:1a:46:95:79:b7:40:b0:ce:
                    09:f5:c3:60:c8:94:8f:6c:da:c3:82:4e:44:66:49:
                    f5:cd:4b:cb:ce:06:41:b9:8b:99:b1:01:f2:60:01:
                    b4:10:6a:0c:f2:ef:de:59:5c:15:00:0f:6b:b3:fa:
                    c1:df:f8:5e:60:cc:4f:d6:4f:c9:75:f2:1b:84:f5:
                    cc:af:5c:f9:0d:97:32:bb:a9:2d:a3:03:47:63:1a:
                    ee:35:78:17:30:b7:9d:c1:01:ab:2b:d3:bd:89:6c:
                    62:30:8d:76:aa:35:e5:7d:6f:0e:19:c2:95:c3:ed:
                    cf:11:89:2a:75:8b:55:40:b2:42:40:83:d7:33:a9:
                    31:81:66:97:ed:84:57:f0:21:28:60:c1:8a:c4:9d:
                    1d:0c:9a:d5:53:e0:0c:36:d6:1e:28:cd:8e:58:a5:
                    5a:30:d4:ae:62:08:d3:38:45:6f:b9:74:01:c6:c0:
                    7c:b1:5d:b5:3e:01:1e:65:9a:e0:c8:42:3d:e4:f8:
                    cf:76:bb:03:04:59:52:ad:f9:48:1a:d8:c8:37:b6:
                    52:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F7:3B:E2:4F:0F:77:E6:57:11:DC:47:AC:AE:86:D6:09:97:74:E4
            X509v3 Authority Key Identifier:
                keyid:1C:11:E8:77:0F:A6:2C:B2:3F:7D:77:E2:C2:62:D8:0D:54:B6:0B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/323830343a353866343a633030303a3a2f33342d3334203d3e20323638313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58f4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         57:41:e1:2a:ba:2f:e4:f7:9d:79:c8:0f:50:55:f1:7d:3a:bc:
         b2:b2:8b:ea:11:c1:af:72:87:ac:b9:2e:3b:03:91:25:20:76:
         c6:b6:65:e3:3e:a9:61:42:53:bf:5e:83:e9:88:49:6b:05:0e:
         ea:35:54:a9:73:57:a0:1f:aa:b1:c3:0a:ba:a9:35:5c:61:c3:
         3b:91:73:48:75:f7:a1:a1:c8:59:41:63:f2:0a:9d:97:9b:71:
         da:fb:3e:cd:5f:e2:53:0b:c5:79:1a:22:81:e8:a0:09:0a:c8:
         4e:25:f4:22:cb:85:22:48:ef:18:77:52:49:c8:26:f1:55:a2:
         ec:ce:56:31:20:e0:3e:d3:6a:d1:bb:37:27:e3:1e:db:92:e6:
         81:55:89:33:bb:58:bd:c3:7b:a8:5f:45:eb:4d:2c:39:87:8a:
         c8:3b:9f:48:bf:69:be:54:1d:ec:6a:0a:8b:01:6b:13:5c:69:
         ce:e4:37:e8:59:f8:67:66:4a:9a:c6:ba:b3:15:f5:d1:1c:c2:
         52:df:82:85:c3:10:5a:43:f9:84:68:ea:2e:85:95:ba:3f:d4:
         9a:8b:8b:b1:f9:49:b4:07:96:4b:19:b6:ed:e7:fa:1b:c4:c7:
         42:1a:b7:49:b2:48:f4:77:47:e9:89:83:dd:06:30:59:0f:51:
         bb:8b:fb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----