Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383830303a3a2f34302d3430203d3e20323633363631.roa
File:                     323830343a313132383a383830303a3a2f34302d3430203d3e20323633363631.roa (raw, json)
Hash identifier:          pq5Rte0j6AoN/CyFt8g+E3ZTmMNd1KTgXmQobLa54dk=
Subject key identifier:   20:05:AB:ED:87:05:E8:D8:E3:5F:F4:5E:7E:A8:AF:F8:F2:5C:03:39
Certificate issuer:       /CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
Certificate serial:       34382406BD5FA3F68229579BF7FD5775C9B79D95
Authority key identifier: 43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383830303a3a2f34302d3430203d3e20323633363631.roa
Signing time:             Mon 06 Jun 2022 14:32:33 +0000
ROA not before:           Mon 06 Jun 2022 14:27:33 +0000
ROA not after:            Mon 05 Jun 2023 14:32:33 +0000
asID:                     263661
IP address blocks:        2804:1128:8800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:38:24:06:bd:5f:a3:f6:82:29:57:9b:f7:fd:57:75:c9:b7:9d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
        Validity
            Not Before: Jun  6 14:27:33 2022 GMT
            Not After : Jun  5 14:32:33 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:78:d4:68:59:52:48:e6:02:52:f6:64:c8:4a:
                    af:80:74:22:70:16:19:7a:ef:71:91:aa:4c:60:6c:
                    eb:e4:0c:cc:9a:0e:75:7b:d5:c9:26:c5:76:c8:e8:
                    96:8a:24:23:c0:b9:63:d8:12:21:2f:af:c5:d0:55:
                    3a:c7:ec:fc:b6:6a:a2:9e:d9:11:fa:3e:ef:b6:0f:
                    5b:ad:4a:e7:90:94:e0:18:bb:af:98:c0:f4:fc:5c:
                    35:d1:4b:d9:26:2e:5f:86:22:5e:34:1c:f2:d5:69:
                    b0:2a:b9:3e:b9:15:2f:65:e8:0e:24:be:58:10:4c:
                    ca:7e:cb:07:06:92:d8:f6:a8:6a:3b:67:75:d5:59:
                    a5:37:5a:34:5d:22:29:5e:9f:fa:94:d8:f8:30:a3:
                    f2:80:0c:a1:4f:82:8b:9b:1f:2e:38:0f:c7:70:8e:
                    8d:40:33:6c:30:2e:8a:b5:ab:f8:8e:74:f9:df:75:
                    ef:5b:0f:db:2f:09:f5:38:23:f1:ff:99:e6:42:41:
                    4f:23:b2:ef:8e:21:a9:32:0e:ea:16:32:95:e1:f5:
                    d4:d3:82:d6:31:b8:77:34:3d:1e:c3:24:04:13:16:
                    19:2b:36:b8:1a:c6:12:bb:58:f3:f1:0f:68:4a:ca:
                    c0:b3:cd:8b:9c:6d:ec:02:a1:9f:ce:8a:57:35:f7:
                    71:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:05:AB:ED:87:05:E8:D8:E3:5F:F4:5E:7E:A8:AF:F8:F2:5C:03:39
            X509v3 Authority Key Identifier:
                keyid:43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383830303a3a2f34302d3430203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:2a:e9:95:aa:c2:44:23:57:c7:f5:86:06:73:31:1b:06:b2:
         9d:a9:94:7c:77:78:f5:31:82:3c:51:76:35:49:3e:d7:ba:f4:
         cc:79:1d:4f:7c:33:a5:5f:42:58:75:0e:06:ee:02:70:c4:2b:
         6b:d2:1a:d1:3d:4f:c1:ed:0c:80:d1:6a:c3:45:31:6c:d7:d6:
         09:dd:96:d0:a5:9a:0d:3d:d7:84:7b:28:a8:0b:0c:4d:c2:95:
         cd:52:ed:9e:1c:28:a8:6c:bc:37:c0:ef:44:40:25:42:0f:2c:
         d3:b7:8d:6b:54:ba:4e:33:c4:bb:81:38:e3:b3:9a:58:64:72:
         a4:fc:67:39:ff:b3:2c:bd:89:0a:fb:f9:16:85:ba:b9:ce:74:
         90:76:58:7f:3e:2f:40:af:60:bd:bf:d2:d7:99:20:47:be:4b:
         c7:70:c5:b1:67:63:fa:58:8a:a4:53:0f:75:d3:b7:0d:8f:e1:
         a4:2c:ec:10:13:69:d4:b5:4a:bf:ab:77:83:33:be:b3:4e:3b:
         1b:8c:53:ce:af:5f:51:94:4d:97:f6:73:fc:2d:e8:25:5f:fa:
         7b:aa:df:30:9f:42:4f:5c:65:b8:fa:8e:80:77:00:8d:d3:ff:
         40:36:90:e0:18:92:1a:33:bd:be:5b:be:6e:d4:90:f1:e9:fb:
         a7:55:1a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----