Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3637303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a3637303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          6hbXKuetzX0wFhBXcc4ZF/sUAV/PNdqTlMoKVWaMVm4=
Subject key identifier:   A7:C4:ED:E6:67:D6:F0:3B:1D:50:6C:6C:D3:96:FE:59:63:67:8E:90
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       26C91A30A10365E5F87A2F8C0D001DEBC9EE5CA9
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3637303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:51 +0000
ROA not before:           Tue 20 Dec 2022 15:04:51 +0000
ROA not after:            Tue 19 Dec 2023 15:09:51 +0000
asID:                     262468
IP address blocks:        2804:e94:670::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c9:1a:30:a1:03:65:e5:f8:7a:2f:8c:0d:00:1d:eb:c9:ee:5c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:51 2022 GMT
            Not After : Dec 19 15:09:51 2023 GMT
        Subject: CN=A7C4EDE667D6F03B1D506C6CD396FE5963678E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c3:98:05:34:fd:aa:8f:82:8b:c9:c0:57:a1:
                    62:97:6c:11:27:f3:90:0f:17:9f:4b:dd:03:85:ca:
                    32:36:e7:a6:0e:4a:07:b9:43:9b:28:5b:7b:4c:dc:
                    e4:65:76:9c:b2:bf:a9:49:e2:ef:20:cd:f8:1e:25:
                    8f:62:40:d9:f8:27:f3:b1:72:0d:df:9e:a6:bb:14:
                    58:d9:20:29:b9:39:16:be:9e:93:93:ec:20:11:98:
                    95:bb:09:09:58:f2:7d:f5:c0:c2:5a:62:fb:4a:d4:
                    e0:1d:d7:c8:50:96:40:58:6f:dc:66:4f:1b:b4:05:
                    f6:a3:7c:f5:51:0f:a8:59:e1:e6:60:df:b7:ed:b4:
                    66:b9:aa:45:40:fa:ac:f9:1e:1e:d5:67:fc:6c:a5:
                    81:48:6f:0c:89:da:b2:c0:cf:3d:dd:7b:6b:5d:68:
                    85:ec:1e:8d:7a:22:21:76:c2:e3:61:0c:03:94:03:
                    70:d3:bc:c1:b7:3b:b0:d2:a2:2a:e3:9d:7c:be:7d:
                    1b:f3:66:1e:85:9b:3f:2c:70:d4:fb:b0:d0:83:c6:
                    6c:2f:34:9a:82:25:6a:f6:ff:bd:ff:49:89:db:8e:
                    49:28:ef:c6:7e:4c:9a:59:c0:86:e1:ca:f7:0b:8d:
                    8e:26:cf:1e:29:14:2a:34:a0:6e:ff:d0:d6:97:e6:
                    94:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C4:ED:E6:67:D6:F0:3B:1D:50:6C:6C:D3:96:FE:59:63:67:8E:90
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3637303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:670::/44

    Signature Algorithm: sha256WithRSAEncryption
         85:b0:dc:4b:26:da:f0:99:9c:c5:36:05:67:e4:17:23:fe:49:
         1a:91:c5:d9:a3:ff:22:de:30:57:68:e7:68:d2:42:36:21:ad:
         2a:f3:fc:6f:bd:0a:ce:20:06:e5:d5:54:6c:31:0c:fa:ad:f5:
         54:4a:17:38:0d:aa:65:fa:9e:8b:7d:91:54:be:99:29:86:f0:
         3c:a5:69:aa:4e:21:dc:e6:47:14:f5:1c:0f:43:bc:15:58:45:
         32:21:27:da:99:5a:87:62:b1:22:e7:42:4b:7d:9e:94:98:95:
         c8:ea:bb:27:13:cf:67:53:8a:1a:64:00:d8:2d:ff:25:ce:74:
         d7:28:8b:03:45:d3:63:5e:b3:39:b6:e5:cd:f5:ce:32:37:74:
         e3:06:41:26:38:e1:28:3a:29:68:a0:08:ec:fd:2c:ed:8d:f8:
         a4:22:6c:95:31:69:9a:67:a1:14:e5:54:c3:e3:79:f5:b4:47:
         5d:cb:fb:6e:c4:3a:87:dd:ce:02:d1:4f:7e:b0:44:c6:b2:6d:
         7b:71:2e:b8:58:28:bf:51:48:47:49:1e:e4:f3:97:92:dc:dc:
         0b:5e:33:fe:b6:51:40:b5:ad:79:7c:86:c9:4e:69:ea:6b:3b:
         30:28:13:2f:25:45:86:bc:95:86:b4:cb:8b:67:06:48:4a:66:
         5f:32:bf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----