Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/323830343a3132383a3a2f33322d3336203d3e203238363334.roa
File:                     323830343a3132383a3a2f33322d3336203d3e203238363334.roa (raw, json)
Hash identifier:          tWPi425Hw+IbK+LGDWzJ6hJ5fRAVaSOklSo6NH9oKvY=
Subject key identifier:   56:25:FC:74:3E:6B:11:21:6F:70:6C:30:E5:E1:88:B3:9C:18:86:AB
Certificate issuer:       /CN=340ACAF4BB7C69A19CD2DF14C25907BAD0892B92
Certificate serial:       6B76AD896065052EF1FF24BE83CE6CD46A402C16
Authority key identifier: 34:0A:CA:F4:BB:7C:69:A1:9C:D2:DF:14:C2:59:07:BA:D0:89:2B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/340ACAF4BB7C69A19CD2DF14C25907BAD0892B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/323830343a3132383a3a2f33322d3336203d3e203238363334.roa
Signing time:             Sun 06 Feb 2022 00:00:00 +0000
ROA not before:           Sat 05 Feb 2022 23:55:00 +0000
ROA not after:            Mon 06 Feb 2023 00:00:00 +0000
asID:                     28634
IP address blocks:        2804:128::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:76:ad:89:60:65:05:2e:f1:ff:24:be:83:ce:6c:d4:6a:40:2c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340ACAF4BB7C69A19CD2DF14C25907BAD0892B92
        Validity
            Not Before: Feb  5 23:55:00 2022 GMT
            Not After : Feb  6 00:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b8:7a:a0:27:2d:3b:1e:4d:bd:77:1e:fe:ae:
                    54:61:82:0f:f4:6a:15:09:54:da:df:9b:8c:af:7f:
                    39:97:72:c3:89:4e:08:4a:a5:5d:12:52:46:8a:fe:
                    85:33:4d:13:00:90:f6:45:08:b7:11:27:94:7c:14:
                    9c:dd:2f:1d:5d:b7:02:71:63:9e:55:2c:1c:44:aa:
                    b4:bf:6a:93:58:95:e8:cb:21:97:db:2c:20:0a:97:
                    f3:65:a3:98:ad:a2:ea:b1:db:47:cc:f9:a0:49:73:
                    ae:e3:ce:bd:a8:30:14:6b:c5:a2:f5:fc:63:ee:8f:
                    1d:d6:68:f5:8d:ef:e5:41:67:9d:01:ef:68:1e:bc:
                    1c:f1:b9:41:d9:52:6b:4c:14:d5:fd:94:ff:86:90:
                    8c:c9:ab:02:1b:d6:43:65:5b:33:6b:ea:cc:7f:30:
                    1c:f9:0c:82:22:48:88:cc:67:b2:8a:66:e5:20:2b:
                    ce:5d:a9:53:fd:98:fd:3f:cb:db:31:ba:f7:45:6c:
                    03:93:f3:d9:5c:c6:19:7f:91:6a:66:54:19:d7:16:
                    91:1e:ad:d0:17:ca:2f:aa:df:c5:2a:e1:f9:78:33:
                    37:7f:e6:7a:13:0d:24:12:90:e6:90:52:4e:d6:3d:
                    4f:66:ab:b6:bf:3e:a0:c5:48:8e:22:84:37:d3:e7:
                    e4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:25:FC:74:3E:6B:11:21:6F:70:6C:30:E5:E1:88:B3:9C:18:86:AB
            X509v3 Authority Key Identifier:
                keyid:34:0A:CA:F4:BB:7C:69:A1:9C:D2:DF:14:C2:59:07:BA:D0:89:2B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/340ACAF4BB7C69A19CD2DF14C25907BAD0892B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/340ACAF4BB7C69A19CD2DF14C25907BAD0892B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/323830343a3132383a3a2f33322d3336203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:128::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:15:97:e3:9d:de:5e:17:e1:c4:56:1e:a8:3b:d8:81:b6:9d:
         5e:54:f3:7c:29:66:33:2c:76:60:ae:cb:2b:24:b2:1a:82:c5:
         9a:b5:dd:5b:aa:7a:14:1b:c5:2f:7d:58:6a:15:a4:ca:8a:93:
         f3:e5:8a:28:9f:15:2e:a9:a8:ea:15:43:5b:2a:a9:65:44:b9:
         c6:48:d4:43:34:49:c7:8b:a7:f1:d2:aa:0b:b1:38:b5:9a:67:
         a1:68:8d:1b:b4:fd:1d:8c:ab:fb:c5:2f:77:94:22:25:58:f1:
         7f:02:0c:bb:12:be:54:9b:4e:95:8c:21:60:b1:9b:b9:77:6e:
         9e:88:fe:b1:dd:8b:cb:7b:a6:bb:1d:68:a0:08:11:da:09:5f:
         78:84:5d:49:e1:d5:36:d1:8e:9c:18:47:50:9d:ed:3b:b1:fe:
         9e:e3:eb:a0:3a:b5:93:45:ce:82:1c:23:7d:94:36:bb:4c:13:
         37:ce:3c:11:b0:ad:c6:17:32:47:a2:a5:53:55:a7:9b:23:da:
         2b:e9:04:1d:02:c8:31:65:e2:49:f9:3f:84:bd:0d:69:ca:77:
         7f:e1:81:2d:52:de:24:88:9e:e1:94:5b:92:d2:8e:23:35:84:
         04:d0:4f:6e:93:27:b5:eb:72:22:18:84:7d:94:bd:56:c7:fd:
         d4:b8:dc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----