Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/323830343a356565343a3a2f33322d3432203d3e20323639303633.roa
File:                     323830343a356565343a3a2f33322d3432203d3e20323639303633.roa (raw, json)
Hash identifier:          SPKy8DKi27fLKrINBUEMwqLFiPnrrIwSTu8Afl6eXv8=
Subject key identifier:   EC:EC:F8:1F:77:D3:43:A7:0B:52:37:89:A0:9B:3B:0B:48:51:EF:DA
Certificate issuer:       /CN=35A17F819978A69078DA4DF98EC0B003271A57B3
Certificate serial:       06425DBF11D551D29F7600F8C938ED48E478187E
Authority key identifier: 35:A1:7F:81:99:78:A6:90:78:DA:4D:F9:8E:C0:B0:03:27:1A:57:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35A17F819978A69078DA4DF98EC0B003271A57B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/323830343a356565343a3a2f33322d3432203d3e20323639303633.roa
Signing time:             Thu 21 Jul 2022 17:05:11 +0000
ROA not before:           Thu 21 Jul 2022 17:00:11 +0000
ROA not after:            Thu 20 Jul 2023 17:05:11 +0000
asID:                     269063
IP address blocks:        2804:5ee4::/32 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:42:5d:bf:11:d5:51:d2:9f:76:00:f8:c9:38:ed:48:e4:78:18:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35A17F819978A69078DA4DF98EC0B003271A57B3
        Validity
            Not Before: Jul 21 17:00:11 2022 GMT
            Not After : Jul 20 17:05:11 2023 GMT
        Subject: CN=ECECF81F77D343A70B523789A09B3B0B4851EFDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:45:58:44:43:1e:85:63:80:f7:3a:d5:1d:
                    61:f5:17:76:6d:02:93:ca:e2:9a:b8:36:d6:09:e5:
                    e1:f2:ba:83:23:ff:6d:3f:76:64:c6:a4:37:dc:a0:
                    21:8b:d1:c9:00:90:a6:ce:e1:82:af:66:0e:5e:e4:
                    9a:50:cd:d7:e5:ad:61:a6:a8:e3:ef:a6:7f:e6:4a:
                    8b:e5:c5:e1:18:5f:d4:f9:b1:ca:9a:d2:39:71:ec:
                    2b:10:bf:75:ff:ad:ac:e4:a2:47:5d:22:d9:70:52:
                    60:73:8d:2e:89:76:7a:7d:7b:33:87:42:63:e5:28:
                    b4:cc:33:5b:9e:ed:ff:57:35:a1:e4:ce:22:49:72:
                    d6:bf:99:cd:14:8b:6b:13:23:bf:f5:aa:68:51:cc:
                    b6:c2:90:3c:3a:4a:b4:93:e2:d0:51:7d:24:6f:4d:
                    89:7f:00:24:f0:33:52:4c:62:cb:b6:81:ea:7c:ce:
                    bf:9b:93:cd:34:f4:1d:54:0d:2a:60:fa:50:86:53:
                    b3:48:0e:c4:23:de:a5:ad:2a:4a:b6:51:a9:2b:47:
                    ec:8f:27:15:4e:44:ff:3c:bc:f2:a2:10:58:8b:11:
                    0c:90:51:d6:1a:c0:8a:a1:aa:fd:39:0a:9c:71:19:
                    22:e5:bb:72:c6:91:59:4a:c8:a4:70:3e:7d:9e:03:
                    93:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EC:F8:1F:77:D3:43:A7:0B:52:37:89:A0:9B:3B:0B:48:51:EF:DA
            X509v3 Authority Key Identifier:
                keyid:35:A1:7F:81:99:78:A6:90:78:DA:4D:F9:8E:C0:B0:03:27:1A:57:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/35A17F819978A69078DA4DF98EC0B003271A57B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35A17F819978A69078DA4DF98EC0B003271A57B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/323830343a356565343a3a2f33322d3432203d3e20323639303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ee4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:5c:c6:c0:23:8f:0a:c7:83:29:cf:91:1e:1e:84:f5:59:20:
         fc:f5:28:43:c8:72:a8:9a:c5:a7:a4:15:06:a0:ed:f6:27:31:
         1a:54:5b:ca:96:a4:76:f2:9e:e1:3d:2c:a2:91:56:f4:e7:58:
         8c:2c:58:8c:49:6c:26:c8:8d:ca:c8:7d:a8:68:89:3f:e0:e3:
         0c:b2:f4:1f:37:cb:34:4e:a6:9c:f3:bd:b3:ab:81:74:a3:c3:
         4a:84:7f:31:61:75:81:33:9c:b2:db:bf:16:fd:c7:8b:ff:89:
         a7:0e:64:1f:83:7c:c1:19:f9:78:20:8d:b2:3b:c4:c3:7f:c6:
         1d:a8:3b:a1:23:75:53:1d:1f:b9:49:d8:99:bf:1e:d4:4d:f0:
         e3:ee:03:17:84:a6:b0:b8:0e:3f:9d:67:83:37:fc:0a:aa:78:
         da:7b:5c:ac:50:9b:f7:bb:b2:93:51:de:d3:64:f1:f4:7f:be:
         25:94:ff:e8:d5:82:d3:4f:75:87:ca:04:c4:c4:ec:fd:e0:2d:
         ff:ae:2b:e8:e2:cf:c2:22:8f:7c:03:42:1f:ea:ea:5d:61:d1:
         45:9c:78:ed:59:e4:66:0f:24:7e:2e:3a:14:d3:0a:5b:15:83:
         c3:85:df:12:21:bb:1e:87:39:f1:4f:04:53:fb:3a:f3:4c:96:
         63:07:03:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----