Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/323830343a363931383a3a2f33322d3332203d3e20323730323438.roa
File:                     323830343a363931383a3a2f33322d3332203d3e20323730323438.roa (raw, json)
Hash identifier:          AUkEha88H59gy6VvFbYzT5gs1l8nH2HAElJdIALRmzw=
Subject key identifier:   BD:E9:8B:CD:BA:76:51:C2:23:B7:62:57:ED:BC:9E:39:AF:60:2B:81
Certificate issuer:       /CN=F80DED6A1F4F2C99656349748DC012B944C48AB7
Certificate serial:       558DD52C31A56B49B97C5237C7A1FA8998A9F15B
Authority key identifier: F8:0D:ED:6A:1F:4F:2C:99:65:63:49:74:8D:C0:12:B9:44:C4:8A:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F80DED6A1F4F2C99656349748DC012B944C48AB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/323830343a363931383a3a2f33322d3332203d3e20323730323438.roa
Signing time:             Thu 06 Oct 2022 23:56:26 +0000
ROA not before:           Thu 06 Oct 2022 23:51:26 +0000
ROA not after:            Thu 05 Oct 2023 23:56:26 +0000
asID:                     270248
IP address blocks:        2804:6918::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8d:d5:2c:31:a5:6b:49:b9:7c:52:37:c7:a1:fa:89:98:a9:f1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F80DED6A1F4F2C99656349748DC012B944C48AB7
        Validity
            Not Before: Oct  6 23:51:26 2022 GMT
            Not After : Oct  5 23:56:26 2023 GMT
        Subject: CN=BDE98BCDBA7651C223B76257EDBC9E39AF602B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:1c:a2:1d:54:d8:b0:0c:68:41:68:54:99:
                    ca:2f:18:d6:9e:b4:8d:78:fb:45:ef:db:da:fe:59:
                    d2:5d:58:8b:a2:7a:da:56:9b:d7:36:ec:99:fc:d6:
                    f2:f4:62:de:2c:94:f4:9c:01:7d:db:c1:89:fa:7a:
                    49:1f:cd:c7:6c:27:65:d2:b0:b2:23:f7:fb:eb:6a:
                    b3:65:b4:86:b5:c0:b3:01:a6:0e:64:80:5e:2d:09:
                    09:5f:90:10:e8:48:b5:5a:3c:3a:1e:db:53:d6:d6:
                    39:28:5d:45:37:21:f4:5e:10:2f:17:ef:28:c3:22:
                    f1:a5:45:a5:7c:90:20:49:99:83:d7:84:b1:f2:dc:
                    84:b3:38:ff:71:46:b1:3e:83:06:30:9a:92:41:7a:
                    8e:6c:30:88:14:e4:0c:d7:7d:c6:db:ce:f2:07:f7:
                    69:bb:c4:e5:cd:11:35:90:c6:7d:98:31:5d:28:42:
                    3e:d0:6e:58:f7:04:af:df:7d:24:0a:fd:bf:2a:d3:
                    2f:cf:4d:8a:c6:12:cb:d1:55:29:aa:97:d5:00:f5:
                    c1:41:b6:b2:62:40:73:15:28:53:6c:7e:90:1f:f2:
                    6e:94:ec:44:4e:ea:b3:18:8d:48:04:93:8a:fb:62:
                    d0:28:9f:91:4a:ea:9d:2f:c6:06:b3:93:6a:4c:80:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E9:8B:CD:BA:76:51:C2:23:B7:62:57:ED:BC:9E:39:AF:60:2B:81
            X509v3 Authority Key Identifier:
                keyid:F8:0D:ED:6A:1F:4F:2C:99:65:63:49:74:8D:C0:12:B9:44:C4:8A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/F80DED6A1F4F2C99656349748DC012B944C48AB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F80DED6A1F4F2C99656349748DC012B944C48AB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/323830343a363931383a3a2f33322d3332203d3e20323730323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6918::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:87:1e:07:5b:b7:dc:4b:85:70:b2:dc:e7:d6:9b:40:4f:7a:
         de:5c:3c:11:27:84:ff:58:94:2f:46:93:ef:dc:59:b7:8d:fe:
         d5:cd:4e:8c:8b:3e:82:79:36:59:3d:c7:d6:f4:c0:5e:50:f7:
         53:03:52:30:d6:f0:03:c8:70:ba:0b:4b:ff:10:6d:9c:2e:b3:
         29:f8:06:1f:44:bb:3c:a9:61:11:cd:3a:55:51:cf:de:11:d1:
         04:76:4c:b2:c3:81:a4:0f:33:94:89:5f:98:1a:e4:c3:fb:fb:
         a3:48:18:f4:b7:95:d4:25:fa:c1:0f:64:43:be:de:fc:9b:02:
         8e:3b:97:97:cb:81:77:e3:49:95:9e:7c:c5:33:e8:78:76:40:
         02:54:80:08:1c:41:12:ac:59:b8:59:5a:68:2d:e2:7b:26:4a:
         9a:1b:b1:21:95:fd:9d:2b:57:73:a2:0c:2f:4d:35:0f:41:d3:
         01:09:57:12:51:fd:0f:26:0d:2c:e9:15:2e:98:f7:d6:84:8d:
         60:d2:dd:30:7c:27:ba:71:a1:a9:3b:d3:1d:69:e9:95:d7:cd:
         7f:78:50:d8:d2:04:62:49:4c:64:d5:62:20:e0:45:be:b5:20:
         fd:15:ad:9b:53:9e:0a:02:b0:01:1f:c3:ba:b0:05:3d:0f:69:
         dd:02:65:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----