Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/323830343a363538633a3a2f33322d3332203d3e20323639343939.roa
File:                     323830343a363538633a3a2f33322d3332203d3e20323639343939.roa (raw, json)
Hash identifier:          L55Ra6v8nrMO47/XhbkwvZbty8cqDgURkeytmnzPv2U=
Subject key identifier:   CC:8D:FF:A9:FE:68:F0:AA:C8:64:B5:1D:DB:EC:E5:3D:7C:AE:FE:2F
Certificate issuer:       /CN=916FD9730F0BACC36DBD00036190270822F848B7
Certificate serial:       16E67AE975FB8F4094AC1AC42A81C026DC55AFCF
Authority key identifier: 91:6F:D9:73:0F:0B:AC:C3:6D:BD:00:03:61:90:27:08:22:F8:48:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/916FD9730F0BACC36DBD00036190270822F848B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/323830343a363538633a3a2f33322d3332203d3e20323639343939.roa
Signing time:             Mon 15 Aug 2022 18:36:34 +0000
ROA not before:           Mon 15 Aug 2022 18:31:34 +0000
ROA not after:            Mon 14 Aug 2023 18:36:34 +0000
asID:                     269499
IP address blocks:        2804:658c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e6:7a:e9:75:fb:8f:40:94:ac:1a:c4:2a:81:c0:26:dc:55:af:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916FD9730F0BACC36DBD00036190270822F848B7
        Validity
            Not Before: Aug 15 18:31:34 2022 GMT
            Not After : Aug 14 18:36:34 2023 GMT
        Subject: CN=CC8DFFA9FE68F0AAC864B51DDBECE53D7CAEFE2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:16:3c:0b:c2:19:54:50:34:e3:66:a1:95:
                    26:e7:e9:ec:e7:b5:75:22:4c:4a:85:a9:1d:4a:36:
                    e2:fa:6e:99:02:19:21:9a:11:cd:a7:47:f0:61:26:
                    fc:16:c6:e6:52:5d:bd:fe:17:4d:75:4f:54:8a:c6:
                    da:59:0f:87:05:db:0a:16:da:be:26:d4:02:3d:9c:
                    61:a4:58:7d:23:0b:d2:20:32:3f:5a:19:a9:07:70:
                    e7:6a:e6:88:cf:e3:e4:f8:b4:c7:28:77:15:ac:26:
                    22:1f:87:99:fa:71:7e:1c:26:a1:76:cb:ac:29:de:
                    01:8c:ff:10:fb:7d:ab:33:b6:e9:16:14:4c:82:fc:
                    3c:21:f4:00:54:e4:6c:a2:83:43:1d:6a:6a:c9:1e:
                    0a:d0:49:d0:aa:e3:7c:ca:87:3f:cb:5f:24:ba:bf:
                    99:11:3f:3d:05:64:e0:05:a4:a6:be:ce:a3:6f:20:
                    b3:e7:68:9b:00:6e:95:8a:32:38:00:b6:73:ca:5c:
                    69:39:6b:aa:ea:fb:35:c1:3c:33:9d:3b:75:06:21:
                    d2:fe:63:27:05:0d:d8:33:26:95:1b:84:3d:de:cd:
                    8e:05:37:89:7e:38:56:49:b1:32:4b:d5:ed:4a:e8:
                    1d:3b:72:5e:38:39:0e:41:c9:c5:f3:a5:a9:35:c7:
                    0d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8D:FF:A9:FE:68:F0:AA:C8:64:B5:1D:DB:EC:E5:3D:7C:AE:FE:2F
            X509v3 Authority Key Identifier:
                keyid:91:6F:D9:73:0F:0B:AC:C3:6D:BD:00:03:61:90:27:08:22:F8:48:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/916FD9730F0BACC36DBD00036190270822F848B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/916FD9730F0BACC36DBD00036190270822F848B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/323830343a363538633a3a2f33322d3332203d3e20323639343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:8f:52:19:a3:d8:8e:66:28:a9:07:2f:fa:5d:cc:ee:e2:29:
         4f:f4:ab:42:76:02:f4:2e:00:84:2d:e6:c5:21:9f:f3:87:de:
         bb:59:11:a0:a6:f3:0b:72:d2:45:25:86:ff:68:72:7d:88:fd:
         37:b2:ad:09:fd:98:e5:6f:cb:1d:e9:ee:0a:d6:a9:18:4f:90:
         af:44:02:f3:c1:67:ae:3a:0c:9f:91:b5:e1:1f:c6:3c:5b:18:
         91:81:15:bd:b2:8e:1b:95:21:a2:ee:c4:d0:c0:91:f2:ff:0a:
         17:55:c4:a0:c1:07:26:df:46:79:08:ba:ce:df:85:a6:6c:8f:
         25:f2:d2:21:c3:01:53:5f:92:fa:48:dd:07:3c:63:da:35:2e:
         70:e3:8a:1f:67:43:7a:cb:61:78:fd:0e:6f:05:58:27:c2:27:
         d6:0f:62:2c:ef:1e:e4:99:9b:4d:dc:d6:2c:31:f2:99:2b:6c:
         6e:19:c2:61:c7:bb:0e:13:34:22:93:ef:20:d3:d9:99:ee:eb:
         58:3a:39:65:00:0a:b4:83:20:f2:da:56:6e:8c:7a:cd:e9:81:
         33:b0:38:c9:75:8f:f0:25:28:aa:b8:cd:be:8a:5d:c6:2b:c8:
         90:c8:a1:7f:71:45:b1:0c:3a:90:3f:96:49:6b:90:1e:51:66:
         d8:1e:b6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----