Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383030303a3a2f34312d3431203d3e20323633363631.roa
File:                     323830343a313132383a383030303a3a2f34312d3431203d3e20323633363631.roa (raw, json)
Hash identifier:          Cv++J07qjXt4lBTOrIVz0a3bAtCp3IwWcYFfczcr7w8=
Subject key identifier:   AE:DF:EB:2C:DF:59:42:B8:F8:A7:BB:07:BE:B3:F1:65:2E:87:4E:89
Certificate issuer:       /CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
Certificate serial:       2FA4F5474BCAB11ADDEEDFA99660CB680CA3CB6D
Authority key identifier: 43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383030303a3a2f34312d3431203d3e20323633363631.roa
Signing time:             Fri 14 Jan 2022 14:12:00 +0000
ROA not before:           Fri 14 Jan 2022 14:07:00 +0000
ROA not after:            Fri 13 Jan 2023 14:12:00 +0000
asID:                     263661
IP address blocks:        2804:1128:8000::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a4:f5:47:4b:ca:b1:1a:dd:ee:df:a9:96:60:cb:68:0c:a3:cb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
        Validity
            Not Before: Jan 14 14:07:00 2022 GMT
            Not After : Jan 13 14:12:00 2023 GMT
        Subject: CN=3082010A0282010100DF87C2AE82B7807F9CF73B1478577364FE017B3BB39B8778DC5BFCE2E5C1168393F27062651D177BA64BFCE2766D14B8AFE3A2B4D8F2B0227F29D9D738C6E38AF4D893EC5F71ED739ACE1D7CECE18FAA7BA21E4F7A1F942AE803959C69445AB28387903038522C27233DED81DADC5341872B0D2968D6DFF85DED437C1DC0ABCCD29F7B72F185D2E0093C74FE83EAACE42DD4012D9450EC1F28EDAA07A5116E2D03883A8BA6A7DBB474BBE0260A529E5271EBAE301AA1A110B40F619A3017A5C5B88F67C27058559F407436106AEFF4C2C23E3680562E25CC8CC7B094AA899587CAF53EBDF6FF8C1E53D0C6AFDD24E3440E3728CBAC1AD411A3EBC7DE1BF14C850203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:87:c2:ae:82:b7:80:7f:9c:f7:3b:14:78:57:
                    73:64:fe:01:7b:3b:b3:9b:87:78:dc:5b:fc:e2:e5:
                    c1:16:83:93:f2:70:62:65:1d:17:7b:a6:4b:fc:e2:
                    76:6d:14:b8:af:e3:a2:b4:d8:f2:b0:22:7f:29:d9:
                    d7:38:c6:e3:8a:f4:d8:93:ec:5f:71:ed:73:9a:ce:
                    1d:7c:ec:e1:8f:aa:7b:a2:1e:4f:7a:1f:94:2a:e8:
                    03:95:9c:69:44:5a:b2:83:87:90:30:38:52:2c:27:
                    23:3d:ed:81:da:dc:53:41:87:2b:0d:29:68:d6:df:
                    f8:5d:ed:43:7c:1d:c0:ab:cc:d2:9f:7b:72:f1:85:
                    d2:e0:09:3c:74:fe:83:ea:ac:e4:2d:d4:01:2d:94:
                    50:ec:1f:28:ed:aa:07:a5:11:6e:2d:03:88:3a:8b:
                    a6:a7:db:b4:74:bb:e0:26:0a:52:9e:52:71:eb:ae:
                    30:1a:a1:a1:10:b4:0f:61:9a:30:17:a5:c5:b8:8f:
                    67:c2:70:58:55:9f:40:74:36:10:6a:ef:f4:c2:c2:
                    3e:36:80:56:2e:25:cc:8c:c7:b0:94:aa:89:95:87:
                    ca:f5:3e:bd:f6:ff:8c:1e:53:d0:c6:af:dd:24:e3:
                    44:0e:37:28:cb:ac:1a:d4:11:a3:eb:c7:de:1b:f1:
                    4c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DF:EB:2C:DF:59:42:B8:F8:A7:BB:07:BE:B3:F1:65:2E:87:4E:89
            X509v3 Authority Key Identifier:
                keyid:43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383030303a3a2f34312d3431203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:8000::/41

    Signature Algorithm: sha256WithRSAEncryption
         51:d8:3f:74:d4:4a:59:20:6a:c9:8d:dd:8a:68:20:21:dd:e2:
         9e:2a:14:0a:60:e9:f6:f1:2f:cc:bd:65:84:da:ec:b4:eb:a6:
         89:45:4f:28:05:00:6a:c5:2b:4b:82:f0:b5:99:fd:c4:2b:f9:
         b2:fb:1b:b9:78:0e:68:73:f4:d8:a5:04:30:51:16:82:12:fa:
         60:00:4d:4a:26:9e:c9:36:3f:39:90:99:dd:31:3c:f3:fd:22:
         31:99:bb:e0:14:84:56:98:b7:9d:42:87:2c:82:be:4e:15:20:
         7a:fe:e1:a4:44:0b:14:86:ec:e6:8b:9e:ed:9b:01:41:4c:56:
         18:ed:0e:85:75:19:2a:d0:e8:00:00:ca:3e:48:67:39:b0:20:
         ce:b8:2e:b7:bf:4c:d5:43:25:b9:dc:5a:dd:14:fe:f6:ac:d4:
         ec:f7:37:64:69:ad:55:ac:25:7b:cc:2a:9c:3c:56:a8:79:5c:
         35:21:cd:80:d4:b1:18:e2:c2:4c:c5:ed:d8:27:2b:9a:4d:11:
         66:c2:12:f0:56:18:6c:33:d2:4f:cc:08:44:0a:c1:21:05:31:
         d9:98:4c:69:db:62:66:43:34:61:39:33:d7:0a:60:ed:27:71:
         af:f4:23:ae:70:68:7e:c2:78:a3:68:9b:44:b5:50:55:f8:16:
         79:ef:1a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----