Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a343030323a3a2f34382d3438203d3e20323633363631.roa
File:                     323830343a313132383a343030323a3a2f34382d3438203d3e20323633363631.roa (raw, json)
Hash identifier:          q2zDZdEMXJWN10rOGEHdhZB7Vk7i0gROneZRjSKmt+4=
Subject key identifier:   58:73:46:FB:01:EB:40:32:BA:E9:21:8D:5D:F3:00:62:87:C5:7B:45
Certificate issuer:       /CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
Certificate serial:       5F9B68CA9D2F3699FDEC896CA744F508A736A311
Authority key identifier: 43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a343030323a3a2f34382d3438203d3e20323633363631.roa
Signing time:             Mon 06 Jun 2022 14:31:55 +0000
ROA not before:           Mon 06 Jun 2022 14:26:55 +0000
ROA not after:            Mon 05 Jun 2023 14:31:55 +0000
asID:                     263661
IP address blocks:        2804:1128:4002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9b:68:ca:9d:2f:36:99:fd:ec:89:6c:a7:44:f5:08:a7:36:a3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
        Validity
            Not Before: Jun  6 14:26:55 2022 GMT
            Not After : Jun  5 14:31:55 2023 GMT
        Subject: CN=3082010A0282010100A0BD5E59497E66DA67E933275C4702AB53913FFB17259B2CC5732894C3F4982246AD9C1E049E9ADCCBDDBC9C80970D982F7F46AAEA36CFFC1AE7877E7F1EFA95C6761EB0A9F322AA01ACC5D715CF69174F341BD1F1D4FCEE846BE1CA7C2C74AAF7B4AFA0F6D468AE3A4D649BB025AFE8ED2DD5AAD0392E04B1A152D85FB43F683BE960BED6DB09FCA5FD3CCFE96E77C8B95C497EC8FDAA9854081005EF81CCFEE6F368E1DABE9033682136FBBF001A14F2AAA9ECB55DF12F72A78FE170453A7EF7E1DB6BC37657C8B180108A7FC1207BDC0FE5F93C36998178A70C413CB312DB6D498FDAED2EA20011433B8465F428FD884718368362D52C4DE372E31B01FAE90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bd:5e:59:49:7e:66:da:67:e9:33:27:5c:47:
                    02:ab:53:91:3f:fb:17:25:9b:2c:c5:73:28:94:c3:
                    f4:98:22:46:ad:9c:1e:04:9e:9a:dc:cb:dd:bc:9c:
                    80:97:0d:98:2f:7f:46:aa:ea:36:cf:fc:1a:e7:87:
                    7e:7f:1e:fa:95:c6:76:1e:b0:a9:f3:22:aa:01:ac:
                    c5:d7:15:cf:69:17:4f:34:1b:d1:f1:d4:fc:ee:84:
                    6b:e1:ca:7c:2c:74:aa:f7:b4:af:a0:f6:d4:68:ae:
                    3a:4d:64:9b:b0:25:af:e8:ed:2d:d5:aa:d0:39:2e:
                    04:b1:a1:52:d8:5f:b4:3f:68:3b:e9:60:be:d6:db:
                    09:fc:a5:fd:3c:cf:e9:6e:77:c8:b9:5c:49:7e:c8:
                    fd:aa:98:54:08:10:05:ef:81:cc:fe:e6:f3:68:e1:
                    da:be:90:33:68:21:36:fb:bf:00:1a:14:f2:aa:a9:
                    ec:b5:5d:f1:2f:72:a7:8f:e1:70:45:3a:7e:f7:e1:
                    db:6b:c3:76:57:c8:b1:80:10:8a:7f:c1:20:7b:dc:
                    0f:e5:f9:3c:36:99:81:78:a7:0c:41:3c:b3:12:db:
                    6d:49:8f:da:ed:2e:a2:00:11:43:3b:84:65:f4:28:
                    fd:88:47:18:36:83:62:d5:2c:4d:e3:72:e3:1b:01:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:73:46:FB:01:EB:40:32:BA:E9:21:8D:5D:F3:00:62:87:C5:7B:45
            X509v3 Authority Key Identifier:
                keyid:43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a343030323a3a2f34382d3438203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:4002::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:a5:dc:39:e6:77:b9:1d:6f:65:a7:54:cc:e1:04:21:c5:ac:
         8c:53:94:96:1e:71:12:4c:a7:fb:c8:51:92:9e:27:fc:1a:b3:
         ea:6e:a7:c3:49:78:d0:7c:ad:76:f4:90:e2:63:0b:91:1f:b3:
         47:59:2b:ec:3a:d4:15:f7:fd:53:2f:19:f8:6e:7a:92:64:1c:
         d0:a2:25:46:a8:d0:f4:7b:f0:6f:ff:e5:85:0f:28:65:f6:eb:
         2c:14:00:ac:6a:de:98:1e:94:3b:69:ee:27:55:7d:5b:1a:88:
         6a:71:d8:ab:4f:f5:5f:a1:11:94:e2:7c:1f:59:54:8c:bb:a9:
         4d:49:0e:8f:ed:3a:bf:ee:f2:82:9a:58:d9:71:ed:3d:60:af:
         3d:79:80:02:ab:ce:56:d7:e5:46:82:8e:08:a4:c3:5c:9b:7f:
         ab:56:85:0f:30:e5:9c:0d:cb:ac:6b:ef:02:14:8f:52:b9:73:
         a7:f6:67:b9:ff:33:bd:66:12:7e:d5:f0:84:4f:b9:3b:5f:bc:
         e5:ff:be:7a:20:c0:bb:24:6f:69:d0:c3:bf:eb:81:8f:a2:8d:
         2e:90:99:55:b0:b5:90:8a:72:2f:9d:e6:14:4c:b8:c2:9a:1f:
         90:87:c8:1b:52:d7:14:f3:f8:83:ea:bb:2e:c8:3a:2e:69:c4:
         d8:25:a6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----