Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3137303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a3137303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          W+9OGKDEr2pz5h55TvmZT/UW//grObwI6u6J3XYK1fw=
Subject key identifier:   5C:96:F2:54:D3:4C:82:4A:BA:C1:CC:94:67:8E:E2:45:B8:F3:FD:6D
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       1D81C84909094D1A278FBF1BDDFDF93561F5000F
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3137303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:40 +0000
ROA not before:           Tue 20 Dec 2022 15:04:40 +0000
ROA not after:            Tue 19 Dec 2023 15:09:40 +0000
asID:                     262468
IP address blocks:        2804:e94:170::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:81:c8:49:09:09:4d:1a:27:8f:bf:1b:dd:fd:f9:35:61:f5:00:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:40 2022 GMT
            Not After : Dec 19 15:09:40 2023 GMT
        Subject: CN=5C96F254D34C824ABAC1CC94678EE245B8F3FD6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c3:97:fd:2f:04:12:ca:4a:c0:8b:54:37:3c:
                    93:2e:98:9a:68:c2:1c:e8:a6:6d:e1:86:4c:85:e8:
                    19:72:09:cd:aa:5b:24:e0:85:3f:9f:5c:75:c1:03:
                    a6:db:b5:e4:35:f5:e0:fa:d7:0d:24:e2:7e:09:75:
                    b4:fa:26:9b:c7:88:eb:39:08:3d:4d:dc:3f:6b:c0:
                    2b:8c:d5:bf:c8:17:2e:22:56:fe:bf:b7:64:f0:59:
                    a8:31:7d:d4:09:74:11:ec:e3:f1:69:33:e4:18:b2:
                    1f:23:2a:10:e8:d3:fb:b7:85:e7:17:df:c0:02:e6:
                    a7:72:71:29:fa:ee:6a:15:88:1a:0a:53:8d:15:05:
                    19:43:3c:c4:21:e9:69:b8:59:5e:c8:ec:63:81:c0:
                    94:d9:36:8d:83:0a:cc:75:3a:5e:ac:e2:7e:ee:7c:
                    26:30:6a:f7:28:c5:3f:57:f6:19:29:52:c3:12:11:
                    70:ab:dd:1c:db:5d:2f:0d:cb:16:f3:18:e6:a4:ca:
                    12:23:45:bc:0e:d1:6f:6f:4a:79:0f:58:73:ca:68:
                    d6:6c:07:8e:3c:91:e5:9d:2f:1a:d1:c5:be:c1:b7:
                    ff:e5:b1:95:0d:13:44:a6:84:c4:c4:0f:85:56:0b:
                    fb:66:3b:fd:7c:df:e9:5d:37:35:4e:ff:76:fc:18:
                    c4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:96:F2:54:D3:4C:82:4A:BA:C1:CC:94:67:8E:E2:45:B8:F3:FD:6D
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3137303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:170::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:f3:e1:4b:12:83:29:0a:94:b0:50:92:03:5d:7f:cf:0f:9e:
         8a:9c:b7:01:9c:ff:04:3d:db:05:ed:82:1f:4f:8f:dc:e4:c5:
         0d:e0:d3:4c:41:82:3a:02:07:e3:49:71:f0:22:45:71:11:1f:
         92:89:2e:44:9b:d2:ad:60:29:07:a4:63:25:92:9b:00:6a:d3:
         5b:5a:a9:96:42:29:94:d8:04:c3:26:1c:b5:de:d6:98:3e:4e:
         ae:f8:d7:25:2f:50:16:28:ec:ba:2c:0b:80:ad:b8:a6:1e:0b:
         98:dc:f5:60:11:cc:7b:d0:38:54:02:cb:e3:66:45:61:ed:e5:
         1a:80:54:df:76:12:73:aa:0c:9c:89:99:6e:24:03:10:86:83:
         2f:a1:11:76:91:17:9c:57:a0:99:28:16:73:e4:b7:9c:f2:2c:
         21:f5:b0:f7:53:c0:b8:63:ce:05:40:33:c6:fb:b3:26:6a:e3:
         48:d3:22:6e:1b:a1:c7:d1:e8:21:0d:e6:b8:32:6f:dd:fb:ea:
         02:49:d0:3e:a7:fc:3c:e3:7b:d4:4f:99:d1:d1:d2:4c:f4:63:
         74:a6:06:8a:8e:47:04:71:16:3a:e3:2f:fe:89:6b:ea:ea:8f:
         94:0c:86:d8:47:3b:55:32:71:0f:32:fa:96:4c:2f:f9:fb:df:
         66:2a:ee:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----