Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a633030303a3a2f34382d3438203d3e20323633363631.roa
File:                     323830343a313132383a633030303a3a2f34382d3438203d3e20323633363631.roa (raw, json)
Hash identifier:          u3vdpaXZ5Jn5seiSwVdrj0LtGZtTEd2ZO4vs7h4naDE=
Subject key identifier:   0D:E6:54:3F:0B:B9:31:34:87:55:A5:07:77:D1:A7:E4:B2:2F:89:B3
Certificate issuer:       /CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
Certificate serial:       63E519E464CD34FDAB06E143E331C5D8D691AF2D
Authority key identifier: 43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a633030303a3a2f34382d3438203d3e20323633363631.roa
Signing time:             Wed 10 Aug 2022 18:58:00 +0000
ROA not before:           Wed 10 Aug 2022 18:53:00 +0000
ROA not after:            Wed 09 Aug 2023 18:58:00 +0000
asID:                     263661
IP address blocks:        2804:1128:c000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e5:19:e4:64:cd:34:fd:ab:06:e1:43:e3:31:c5:d8:d6:91:af:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
        Validity
            Not Before: Aug 10 18:53:00 2022 GMT
            Not After : Aug  9 18:58:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a0:d8:ce:9e:0c:48:f0:f2:82:a1:8c:39:76:
                    f1:4b:e9:d7:c8:2c:1f:88:49:07:7c:64:b5:c9:58:
                    cc:76:b1:39:16:83:2c:2c:33:5c:d7:5a:e9:3d:d9:
                    11:71:2f:26:19:df:64:e7:ac:62:0c:53:1a:3c:79:
                    13:1b:cb:35:31:c5:a0:cc:ef:8d:32:1d:3d:92:6b:
                    b7:07:d6:66:01:a1:e2:1a:9d:15:f8:44:db:44:32:
                    2c:31:00:cb:ab:1e:10:15:96:61:f0:40:9e:dc:48:
                    31:a1:fe:e9:73:cf:32:ee:0a:68:b1:bb:34:80:9f:
                    97:8b:fe:16:d7:a9:aa:76:68:62:ba:6d:68:00:f5:
                    23:8a:68:74:e4:2b:b9:0e:6b:7b:5b:9f:3f:6b:b2:
                    aa:b7:5e:5e:d8:c2:f4:f3:be:11:22:0a:fe:c2:17:
                    c7:b6:cc:13:3d:6b:cf:f0:d4:38:8a:58:ee:32:9a:
                    1a:06:69:ec:0e:86:d5:0e:4d:a7:86:b8:07:59:6f:
                    cb:85:7c:9a:2d:71:11:1c:6e:1f:03:24:dd:1c:67:
                    9a:75:88:4c:65:f2:f6:bf:e9:c5:80:b0:6f:b7:95:
                    64:4d:9d:c6:ae:2f:42:5d:72:9c:6a:06:93:ee:45:
                    e8:dd:a1:74:9d:d2:80:50:03:e9:de:0c:57:c4:d9:
                    6b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E6:54:3F:0B:B9:31:34:87:55:A5:07:77:D1:A7:E4:B2:2F:89:B3
            X509v3 Authority Key Identifier:
                keyid:43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a633030303a3a2f34382d3438203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:5f:d4:e1:a4:13:29:ec:fa:b2:7c:01:47:07:31:a0:d2:32:
         7e:57:f4:74:83:b6:83:e1:3f:59:c1:29:1f:7b:49:71:27:d5:
         7b:df:a4:04:8e:f1:a9:9a:8a:76:90:99:e2:68:af:9e:71:2d:
         a6:0b:f3:fe:e6:47:bb:86:97:30:6b:5c:29:1f:f8:61:4e:60:
         ac:37:a2:e8:82:82:51:7f:8f:b3:b9:a7:0f:50:2c:d1:1e:86:
         7f:a9:4e:13:78:fb:e7:c5:74:56:f6:e1:0d:83:04:bb:08:4e:
         28:c6:31:b1:88:ad:8b:56:ca:f1:a4:9f:38:85:63:35:f8:58:
         1e:9d:48:9b:04:69:ab:65:20:81:e0:8b:f2:0e:d0:de:fc:dd:
         ad:a7:dc:ec:cc:1d:82:f5:5a:a5:5b:9c:55:a8:f2:36:00:3b:
         de:32:70:df:17:a5:6c:f2:43:ed:a6:57:ce:2f:f5:24:3b:7f:
         d9:23:02:f3:00:f7:58:64:bd:86:e0:cf:af:a8:0f:87:bd:8f:
         c6:34:18:33:56:57:fa:f0:8f:91:95:bc:e4:5a:0c:6d:bd:c1:
         20:4d:51:65:99:9c:97:c5:35:8e:e3:a5:24:af:e0:9a:6b:b6:
         19:60:37:f9:9d:81:f0:40:5e:82:0d:3c:7e:0f:9a:c8:65:f0:
         a3:6d:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----