Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a383030303a3a2f33342d3334203d3e20323636323437.roa
File:                     323830343a336430303a383030303a3a2f33342d3334203d3e20323636323437.roa (raw, json)
Hash identifier:          9safrTg/ku5YdT78lzDO239/4rsYQLqkZWvAbK05XdI=
Subject key identifier:   3D:AC:E2:42:FC:14:14:DC:A9:71:26:99:64:03:30:59:B1:21:11:03
Certificate issuer:       /CN=33C080E6201C3118EC8E437DCF9D314BBCFC74BE
Certificate serial:       1C46B1F15FEC7D03F9B239694DE13A10D1426ABF
Authority key identifier: 33:C0:80:E6:20:1C:31:18:EC:8E:43:7D:CF:9D:31:4B:BC:FC:74:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C080E6201C3118EC8E437DCF9D314BBCFC74BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a383030303a3a2f33342d3334203d3e20323636323437.roa
Signing time:             Tue 18 Jan 2022 13:49:48 +0000
ROA not before:           Tue 18 Jan 2022 13:44:48 +0000
ROA not after:            Tue 17 Jan 2023 13:49:48 +0000
asID:                     266247
IP address blocks:        2804:3d00:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:46:b1:f1:5f:ec:7d:03:f9:b2:39:69:4d:e1:3a:10:d1:42:6a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33C080E6201C3118EC8E437DCF9D314BBCFC74BE
        Validity
            Not Before: Jan 18 13:44:48 2022 GMT
            Not After : Jan 17 13:49:48 2023 GMT
        Subject: CN=3DACE242FC1414DCA971269964033059B1211103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:51:12:d2:24:de:1d:82:ad:d3:13:38:af:
                    f3:58:a3:9f:39:41:cc:a9:11:66:05:d2:18:3b:93:
                    42:9d:e1:b7:76:e7:74:b8:a9:a0:26:9c:d2:88:88:
                    bd:cb:09:55:e1:90:45:e1:db:3e:da:fe:77:f0:b6:
                    72:fb:e6:30:61:cd:0f:c9:76:75:4a:42:64:25:03:
                    dc:d3:d6:f2:c1:b8:a7:c9:87:b4:76:31:c0:9d:df:
                    57:e2:ac:2e:91:b6:19:d7:50:3e:79:e7:f7:49:dd:
                    ff:ec:de:25:3f:5a:8e:76:5c:41:02:12:06:24:3e:
                    45:6d:c4:2a:67:94:98:53:ef:cc:71:21:7d:22:5d:
                    12:2c:96:8f:d9:41:3c:02:70:45:c8:13:ee:13:42:
                    af:27:b6:05:3e:af:71:e3:99:35:d5:94:73:63:57:
                    0f:9a:af:7d:e8:5c:5c:ed:a6:2c:c0:4e:87:29:a4:
                    d3:1a:88:c2:35:2f:15:ed:b7:20:26:e5:f9:d4:12:
                    12:cc:3a:95:20:66:c5:42:8b:14:af:00:38:8e:30:
                    7f:1c:0d:9d:de:d0:85:73:3b:0c:e7:05:80:7d:26:
                    22:f2:ba:bf:80:d7:a6:d9:f3:c6:6d:da:ae:0b:c6:
                    c5:c5:85:10:b5:7a:0f:27:0b:f4:07:c6:95:a7:2d:
                    02:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AC:E2:42:FC:14:14:DC:A9:71:26:99:64:03:30:59:B1:21:11:03
            X509v3 Authority Key Identifier:
                keyid:33:C0:80:E6:20:1C:31:18:EC:8E:43:7D:CF:9D:31:4B:BC:FC:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/33C080E6201C3118EC8E437DCF9D314BBCFC74BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C080E6201C3118EC8E437DCF9D314BBCFC74BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a383030303a3a2f33342d3334203d3e20323636323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d00:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         89:f4:94:b6:22:77:94:43:35:67:01:f9:5f:26:f3:1c:19:1f:
         9c:82:20:70:09:1b:a3:9b:9d:97:3a:21:40:95:33:32:fd:71:
         f5:f4:77:e6:e4:4e:f9:cd:60:58:53:7c:fb:8a:12:36:63:99:
         ea:03:cb:c8:15:4c:a6:38:3b:c5:25:18:bb:54:52:af:dd:46:
         fc:fa:21:11:a3:9c:bd:15:a0:a4:f7:81:7a:c2:91:05:d8:27:
         5b:68:f2:32:d3:75:95:9d:8f:af:96:68:0e:92:92:d6:bc:bd:
         7d:48:20:6a:9c:5a:c4:65:82:6e:65:0e:2b:7c:a4:35:82:4c:
         ef:7d:0c:8d:27:68:e9:95:84:3a:2c:bd:bc:a4:55:a0:bc:8d:
         6c:6b:9c:ea:3d:e9:bc:e5:bb:db:6c:a5:3b:e3:7b:4a:43:55:
         4f:d7:52:47:3d:36:b5:82:3f:07:26:99:60:cb:72:ed:c1:4e:
         15:35:0d:c3:fe:4a:81:a6:73:e2:a1:44:94:37:e8:f0:0a:7d:
         49:e8:71:87:c0:64:74:02:8d:b2:33:59:c6:93:dd:c8:76:c0:
         19:52:76:be:4f:e9:f4:34:61:24:c3:a4:2b:63:3f:36:88:f9:
         38:38:78:89:a2:5a:a2:ca:b4:e2:83:ce:04:64:fe:b2:87:b3:
         ba:c0:47:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----