Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a343030333a3a2f34382d3438203d3e20323633363631.roa
File:                     323830343a313132383a343030333a3a2f34382d3438203d3e20323633363631.roa (raw, json)
Hash identifier:          12nMcU8oaUxOQtJx/ta+ZnutM+ikcHMCYV+Z1YRb3GQ=
Subject key identifier:   9A:51:8F:62:4C:5D:DD:5E:37:57:26:03:E2:00:14:F4:0B:88:6D:F6
Certificate issuer:       /CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
Certificate serial:       6F4F0A2AD8F5392ADD468CD34F5BC01D4B336683
Authority key identifier: 43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a343030333a3a2f34382d3438203d3e20323633363631.roa
Signing time:             Mon 06 Jun 2022 14:32:08 +0000
ROA not before:           Mon 06 Jun 2022 14:27:08 +0000
ROA not after:            Mon 05 Jun 2023 14:32:08 +0000
asID:                     263661
IP address blocks:        2804:1128:4003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4f:0a:2a:d8:f5:39:2a:dd:46:8c:d3:4f:5b:c0:1d:4b:33:66:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
        Validity
            Not Before: Jun  6 14:27:08 2022 GMT
            Not After : Jun  5 14:32:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:5c:d1:9e:f2:9c:66:6e:ba:d0:81:25:6e:
                    00:ca:20:b8:2b:e6:83:98:b0:ff:21:9f:4c:2c:40:
                    a9:76:52:9b:2d:ee:79:78:b4:a7:95:37:2a:23:0a:
                    64:34:16:19:af:04:fd:d8:67:24:c6:77:50:e5:f0:
                    75:2f:b3:a1:53:1c:21:02:35:02:33:5b:1d:8d:cc:
                    b6:d4:dd:d5:3a:dc:2c:fa:31:d4:52:76:d4:9b:f3:
                    15:cc:22:cd:74:e2:03:2a:ec:57:ae:f7:8e:c1:1f:
                    b2:a7:03:bc:8c:4f:d6:50:00:a4:9f:9f:25:4f:25:
                    eb:aa:9a:38:90:b0:9b:46:b3:36:20:43:8b:88:6f:
                    e9:3a:b0:78:f0:c2:b1:e4:97:61:cf:34:27:88:ba:
                    29:4f:9f:5a:01:68:a0:1e:d2:42:26:72:24:d0:16:
                    1a:bc:5d:11:4d:19:6c:2d:dd:5a:68:dd:61:eb:5d:
                    37:36:ca:a5:b1:84:09:6b:20:ed:0e:75:0f:a4:e2:
                    13:f8:a0:29:ef:28:22:7d:59:69:96:46:c2:ed:87:
                    a6:11:22:6e:e0:9c:57:67:46:e9:64:a2:e5:70:70:
                    a8:64:a6:77:80:9f:12:f5:e8:90:96:b1:b8:31:81:
                    50:a3:4d:66:af:3f:c9:4e:49:a4:d4:b5:99:9d:d9:
                    40:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:51:8F:62:4C:5D:DD:5E:37:57:26:03:E2:00:14:F4:0B:88:6D:F6
            X509v3 Authority Key Identifier:
                keyid:43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a343030333a3a2f34382d3438203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:4003::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:55:7e:9e:e8:34:1b:59:e9:47:ad:56:ed:f8:f4:71:4b:8f:
         fe:e8:a6:4a:c7:c8:3a:3f:a9:30:f3:69:0d:48:98:66:8d:d2:
         ba:a1:d5:ce:c2:a1:11:96:28:6e:a7:b3:e7:6d:ff:88:31:e3:
         33:42:cf:07:27:ff:d9:4c:7b:47:a8:82:ad:b1:9b:a9:1f:40:
         3b:9c:e2:b3:6d:69:15:b1:d2:b8:2d:9d:99:f4:0f:2d:65:67:
         f3:be:1c:1a:59:d5:1a:6f:8c:61:85:f7:f9:e0:dc:3f:d7:b9:
         6a:00:49:27:ce:ce:56:e0:9e:29:89:b3:ab:73:71:be:4c:52:
         32:2c:2a:06:67:39:ac:ec:1c:14:aa:e1:fa:73:73:af:36:7c:
         ab:20:fe:5d:01:a1:97:43:b8:87:fb:06:47:57:6b:ca:ac:1b:
         6a:7a:76:83:45:d9:12:37:ad:df:da:c4:24:5c:9d:39:44:a8:
         c0:88:db:cb:84:f1:27:6e:5a:8a:83:ab:e3:a8:1f:6b:59:4d:
         13:c1:4b:bb:a0:7e:20:e3:2f:e6:a7:cd:ca:43:63:a5:cb:23:
         26:0d:d2:f4:83:53:e9:b0:13:16:9d:bc:dc:cf:47:e3:f8:39:
         9a:91:9e:c2:62:d1:6d:12:0b:9b:e1:7e:de:50:9a:e5:7f:3d:
         2d:f9:82:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----