Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a633030303a3a2f33342d3334203d3e20323633363631.roa
File:                     323830343a313132383a633030303a3a2f33342d3334203d3e20323633363631.roa (raw, json)
Hash identifier:          ZBYnVe8ay7aNp4puwycKk8hTk14GwjLLWmrsAcwsdpQ=
Subject key identifier:   DC:B1:BE:AF:DE:AE:26:97:93:97:F7:AD:94:21:FD:AF:EA:44:4A:8E
Certificate issuer:       /CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
Certificate serial:       34596AF5A1DC73C6D3952058DF3CE4C1E52340D4
Authority key identifier: 43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a633030303a3a2f33342d3334203d3e20323633363631.roa
Signing time:             Mon 06 Jun 2022 14:33:16 +0000
ROA not before:           Mon 06 Jun 2022 14:28:16 +0000
ROA not after:            Mon 05 Jun 2023 14:33:16 +0000
asID:                     263661
IP address blocks:        2804:1128:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:59:6a:f5:a1:dc:73:c6:d3:95:20:58:df:3c:e4:c1:e5:23:40:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
        Validity
            Not Before: Jun  6 14:28:16 2022 GMT
            Not After : Jun  5 14:33:16 2023 GMT
        Subject: CN=3082010A0282010100CD7D8FA99085AFF4B00BCB9499A20ED8A60FCCE6E09328486A8E313222CCEEC553987F49E005795F506FD8C3597839505CFBE8DA4D8739DA90BF155F983ABF11CAB517FDA041E9E71F5F8490B42A2A34517C502884F9549AFD8709D90331A504EB8CF280C9E9941119E072BA9A5A530A03D9E041C207E6130ADC4C33F06F77E155D01AF260CD457FE20CFB72543D86593FB3B7D09FF0E2052733238EAD13AB78E1ACDBF67986FBE139804D2C9D03ECEC342351FA68A16DFE5688CF920BF653CA4D6E733695777BE0C7A433591A3419C087BA45BC0755865D48EB5FB151199CDC513A35E17ADB6A704F87730D13278E0758D2E52C3071F825E69C2335C5D8ADB50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7d:8f:a9:90:85:af:f4:b0:0b:cb:94:99:a2:
                    0e:d8:a6:0f:cc:e6:e0:93:28:48:6a:8e:31:32:22:
                    cc:ee:c5:53:98:7f:49:e0:05:79:5f:50:6f:d8:c3:
                    59:78:39:50:5c:fb:e8:da:4d:87:39:da:90:bf:15:
                    5f:98:3a:bf:11:ca:b5:17:fd:a0:41:e9:e7:1f:5f:
                    84:90:b4:2a:2a:34:51:7c:50:28:84:f9:54:9a:fd:
                    87:09:d9:03:31:a5:04:eb:8c:f2:80:c9:e9:94:11:
                    19:e0:72:ba:9a:5a:53:0a:03:d9:e0:41:c2:07:e6:
                    13:0a:dc:4c:33:f0:6f:77:e1:55:d0:1a:f2:60:cd:
                    45:7f:e2:0c:fb:72:54:3d:86:59:3f:b3:b7:d0:9f:
                    f0:e2:05:27:33:23:8e:ad:13:ab:78:e1:ac:db:f6:
                    79:86:fb:e1:39:80:4d:2c:9d:03:ec:ec:34:23:51:
                    fa:68:a1:6d:fe:56:88:cf:92:0b:f6:53:ca:4d:6e:
                    73:36:95:77:7b:e0:c7:a4:33:59:1a:34:19:c0:87:
                    ba:45:bc:07:55:86:5d:48:eb:5f:b1:51:19:9c:dc:
                    51:3a:35:e1:7a:db:6a:70:4f:87:73:0d:13:27:8e:
                    07:58:d2:e5:2c:30:71:f8:25:e6:9c:23:35:c5:d8:
                    ad:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B1:BE:AF:DE:AE:26:97:93:97:F7:AD:94:21:FD:AF:EA:44:4A:8E
            X509v3 Authority Key Identifier:
                keyid:43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a633030303a3a2f33342d3334203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         40:af:a3:de:51:77:ef:0c:37:fa:4b:cf:34:7f:e3:71:46:cf:
         ef:b5:44:67:b2:28:43:3a:35:e4:c6:5b:d9:7b:ac:0a:44:5a:
         8e:3b:3e:c1:ef:48:81:16:70:91:2b:6e:74:33:9f:85:37:fa:
         f5:17:b4:bf:0f:aa:f9:05:20:ba:58:43:47:42:5d:2c:80:64:
         27:02:a5:49:dc:6f:4d:4d:94:05:58:87:93:19:22:36:78:02:
         80:1e:11:07:f5:dd:ea:ac:1e:93:f7:f6:6f:3d:56:3d:f5:2e:
         e8:e8:8b:b7:0c:e8:d1:b4:23:26:30:42:c3:92:a8:4c:3d:65:
         63:0a:6a:70:cf:99:a6:85:73:0d:af:76:8b:11:ac:79:a6:67:
         f7:fa:3e:b6:56:5d:6d:10:93:01:69:09:d3:d2:02:d3:9a:dc:
         40:6c:64:45:8e:10:05:4b:01:56:59:8e:1b:4d:5d:d8:cb:c4:
         42:fe:a3:24:df:7c:4f:7c:19:98:f4:53:47:20:86:08:0c:76:
         23:7e:e5:a7:d7:69:c3:74:03:ba:ac:c3:e8:2e:d8:03:2f:d1:
         6d:05:74:eb:d8:2c:39:3f:91:59:93:24:a7:3e:a7:a6:c8:9c:
         d8:44:dd:c1:80:13:98:ba:fe:08:37:ac:36:0c:6d:8d:61:ab:
         60:97:6c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----