Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3531303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a3531303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          CwimqoCR0zcNbiHI1RPihn45kXvbb8V1ApdPWpH6gOw=
Subject key identifier:   61:E7:22:D6:C8:01:4F:E9:98:AA:21:06:A3:0F:58:D0:36:A7:66:6F
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       613A9D33574E5084B83E8E5C0B652C9F020963A5
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3531303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:50 +0000
ROA not before:           Tue 20 Dec 2022 15:04:50 +0000
ROA not after:            Tue 19 Dec 2023 15:09:50 +0000
asID:                     262468
IP address blocks:        2804:e94:510::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3a:9d:33:57:4e:50:84:b8:3e:8e:5c:0b:65:2c:9f:02:09:63:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:50 2022 GMT
            Not After : Dec 19 15:09:50 2023 GMT
        Subject: CN=61E722D6C8014FE998AA2106A30F58D036A7666F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6f:11:de:aa:27:c5:c7:e4:55:82:7c:d8:b2:
                    b8:32:e3:98:f1:35:1c:e8:0a:b5:6b:3d:91:b4:c8:
                    fc:81:99:56:fd:8b:fa:dc:14:3a:3c:f0:f6:e7:88:
                    50:c0:05:08:ca:a9:ae:2c:1a:78:8b:67:96:8e:57:
                    e1:a4:23:8b:ec:c8:b3:f6:da:85:cd:60:80:d4:11:
                    9e:d6:e3:e3:fc:c2:70:d3:52:ad:16:fb:f4:36:76:
                    63:66:34:4f:2d:39:2b:27:02:29:08:d1:ce:4f:45:
                    47:d3:3a:2f:57:d0:74:f4:f9:59:8e:b6:f4:10:03:
                    c9:25:aa:68:43:7c:0a:9b:20:5c:66:1f:a4:17:a0:
                    f3:44:ba:af:45:37:5c:7f:1c:88:20:b2:1c:fd:9d:
                    b4:81:43:48:d5:a3:6b:c3:13:c3:35:d9:4b:50:14:
                    c8:71:62:a8:d6:2e:08:46:ea:74:4d:d7:50:ea:ee:
                    69:61:c2:0f:2c:50:f9:ec:c0:f7:de:10:4e:8c:57:
                    ba:c3:ca:ea:5c:7f:41:a9:dd:cf:de:b6:5b:e0:54:
                    1a:1e:25:07:df:c0:42:d8:75:0c:2a:ed:51:2f:3b:
                    ac:14:9f:55:5e:6a:ca:15:42:b6:74:bf:61:95:d7:
                    60:1d:24:e4:d3:ed:fd:70:3e:49:ad:83:14:04:4e:
                    3c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E7:22:D6:C8:01:4F:E9:98:AA:21:06:A3:0F:58:D0:36:A7:66:6F
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3531303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:510::/44

    Signature Algorithm: sha256WithRSAEncryption
         9c:70:b0:6e:55:0a:a7:74:5f:45:22:83:fb:83:eb:73:94:4f:
         c6:cb:b3:37:50:b0:29:77:cd:9b:68:ba:d7:e4:34:76:49:52:
         93:74:6d:4d:51:26:af:8e:1a:cc:44:0c:9a:e2:34:54:53:74:
         1f:e2:42:7a:7f:df:70:f2:50:ce:0f:f3:a2:88:b2:73:7e:d7:
         a8:f8:ca:ca:f1:dd:ec:09:2b:c3:0e:91:80:00:79:2d:9f:80:
         4e:b3:c5:96:4b:c0:c2:14:4d:c3:95:99:49:c2:cc:96:2d:5e:
         cb:a9:e0:5a:56:22:7c:f6:d9:61:9b:1d:b6:0c:ee:b4:0b:dc:
         d5:77:42:80:a7:26:34:80:79:47:ae:b3:aa:64:fe:7e:30:c4:
         02:b8:77:e6:30:e4:d6:7d:38:d2:40:6e:e3:f1:41:3a:42:d5:
         6f:3b:65:6d:d2:aa:e0:35:46:05:74:b8:37:ae:f5:a5:37:31:
         33:ed:52:85:09:61:22:d5:76:36:a0:25:6d:1e:5a:30:8b:61:
         a0:fa:d3:9d:f2:4a:69:90:03:3e:64:c0:9b:60:1e:8a:8c:fe:
         e3:a3:50:d0:ae:0f:0a:96:45:7a:0b:fe:29:65:8d:24:91:03:
         20:18:94:b4:8c:2f:57:bf:60:fd:49:5b:fd:67:9c:01:28:4a:
         8e:85:aa:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----