Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a37303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a37303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          cEVO8SBzkbZY4xpgjaBnpYaO/EX0ngHaFSkYjKTiIZM=
Subject key identifier:   03:C9:EA:6B:36:F1:16:75:5D:F7:E3:D6:78:69:9F:BC:1A:60:46:58
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       3FA6A79C98300A40BC9B5CE917D41E0B072B42E5
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a37303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:48 +0000
ROA not before:           Tue 20 Dec 2022 15:04:48 +0000
ROA not after:            Tue 19 Dec 2023 15:09:48 +0000
asID:                     262468
IP address blocks:        2804:e94:70::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a6:a7:9c:98:30:0a:40:bc:9b:5c:e9:17:d4:1e:0b:07:2b:42:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:48 2022 GMT
            Not After : Dec 19 15:09:48 2023 GMT
        Subject: CN=03C9EA6B36F116755DF7E3D678699FBC1A604658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:43:6e:64:0b:bd:a1:a6:ff:ab:17:80:73:
                    68:14:77:4e:63:c7:b8:65:7f:01:be:59:d8:8e:cf:
                    af:fd:fa:d6:a5:13:a0:81:1d:b5:26:6f:8c:9a:cd:
                    a5:38:4a:f3:1f:95:d4:1d:ee:55:a6:74:7c:0b:2c:
                    d1:80:e9:2a:a6:4c:f2:9c:4a:5f:09:36:b0:07:36:
                    42:72:a6:09:ab:25:a1:75:f2:c4:5b:e2:3f:c9:da:
                    f5:84:65:5e:de:4b:45:f7:e4:bc:ec:c0:48:cf:aa:
                    3d:72:7c:50:1d:40:29:bf:fd:15:77:8f:d0:af:da:
                    2b:fb:2e:c5:6d:5f:cd:38:34:cc:65:4f:26:08:cd:
                    31:69:26:e4:11:0e:ce:ac:4f:3d:40:7d:f0:5d:59:
                    67:c4:9b:d6:b8:94:d7:c3:4f:0b:40:9a:af:c8:4c:
                    eb:93:f1:97:f8:7c:1f:58:ee:06:54:65:24:6b:5a:
                    07:a8:0e:72:2a:98:44:4d:30:f9:66:5c:4a:9a:7e:
                    64:b8:0e:26:ca:f3:79:dc:a6:5c:7c:8c:88:47:71:
                    ad:61:9f:b4:7e:fa:a3:ee:48:59:1e:4a:f6:5c:c1:
                    2b:4a:c4:6e:57:d7:75:0a:47:ce:20:e5:48:65:2e:
                    2e:94:b4:12:fc:65:6b:79:be:4c:ca:60:c0:6f:f1:
                    ef:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C9:EA:6B:36:F1:16:75:5D:F7:E3:D6:78:69:9F:BC:1A:60:46:58
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a37303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:70::/44

    Signature Algorithm: sha256WithRSAEncryption
         9e:28:23:d3:02:be:f0:3f:9f:82:96:0e:ea:7d:03:93:a0:ec:
         8f:cd:8b:89:cb:20:cd:d6:28:48:4f:e5:26:0e:1c:ef:37:be:
         f3:22:b1:e0:24:1a:d2:b1:fd:d6:cf:00:ec:89:21:aa:ef:0e:
         01:9e:9c:79:62:8e:01:c9:3e:19:ce:9e:7b:39:f3:bc:e3:43:
         16:9c:0a:9a:b6:07:0e:72:b5:e4:29:9b:77:34:d1:cb:41:a7:
         19:d6:0e:c9:31:ae:98:db:73:21:16:85:e4:d9:83:a5:2b:6a:
         4c:55:33:8a:5b:6d:3e:91:48:94:37:75:ef:fc:2a:1b:7b:f8:
         00:9d:8d:1a:df:e5:7b:ce:5c:9c:53:f7:13:79:30:50:9c:bb:
         05:01:d4:90:a0:1e:44:59:8c:19:db:bb:f4:59:0e:7c:98:69:
         b0:ea:e3:31:81:05:da:20:d9:e1:88:8f:de:a9:33:ee:18:f4:
         fd:cb:08:79:27:77:03:90:66:33:c4:68:7e:a0:55:1e:41:d7:
         83:c5:3f:25:f6:ca:1b:0f:e8:a5:d6:ca:f6:55:c9:64:a4:3e:
         da:50:b5:bc:80:88:9c:c6:cf:bc:cc:52:6f:49:98:11:0a:9c:
         48:0e:0b:55:ee:c1:cc:75:33:09:2b:f8:29:5c:74:29:8e:90:
         ec:8d:58:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----