Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a6130303a3a2f34302d3430203d3e20323632343638.roa
File:                     323830343a6539343a6130303a3a2f34302d3430203d3e20323632343638.roa (raw, json)
Hash identifier:          O8CN+fXVRtlBLvEfXuEIyu7w9UP/uXRWEI56fJeJhDE=
Subject key identifier:   56:C3:8A:F0:AC:AE:8B:4B:9B:E7:13:33:AB:8B:27:75:CB:52:E6:F2
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       5D54C00BD3E8704303FAF405A2EB02425394DA9A
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a6130303a3a2f34302d3430203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:48 +0000
ROA not before:           Tue 20 Dec 2022 15:04:48 +0000
ROA not after:            Tue 19 Dec 2023 15:09:48 +0000
asID:                     262468
IP address blocks:        2804:e94:a00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:54:c0:0b:d3:e8:70:43:03:fa:f4:05:a2:eb:02:42:53:94:da:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:48 2022 GMT
            Not After : Dec 19 15:09:48 2023 GMT
        Subject: CN=56C38AF0ACAE8B4B9BE71333AB8B2775CB52E6F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:6b:fd:be:2c:da:b4:e7:48:96:a3:45:f0:
                    cf:3a:27:a5:88:85:69:a4:ce:f5:47:b8:2b:ea:4a:
                    03:6e:93:8f:bd:65:84:19:2a:85:15:ff:c4:6a:4e:
                    bd:90:88:59:d8:c7:ee:41:ca:53:2c:35:98:7e:63:
                    d4:b9:cd:58:71:88:85:71:5b:26:4d:81:4a:e2:0c:
                    27:f2:aa:19:42:5d:92:37:81:61:05:b4:08:cd:36:
                    7b:56:3c:bc:01:95:07:ad:4d:70:cd:4c:22:b8:a6:
                    67:d8:a9:2c:54:87:9e:d4:6d:a7:f7:18:95:8e:3d:
                    3a:5a:c9:13:2d:36:95:7a:da:de:90:1f:63:af:51:
                    f0:9b:b3:07:ea:d8:28:f7:64:98:cf:84:32:1e:aa:
                    b1:ea:e1:25:a0:ef:8a:2e:7a:9c:d0:54:93:94:df:
                    b6:6f:a1:f2:55:60:37:9d:b9:51:ce:6d:81:88:66:
                    0d:45:34:bc:c7:56:7c:57:fa:a4:98:04:46:09:ea:
                    2b:c8:a7:5f:db:fb:79:94:ae:68:b6:9b:4d:f5:c9:
                    2b:b4:f2:44:03:0a:3c:cb:02:87:6e:b4:47:4c:5f:
                    ab:b3:01:63:c7:81:44:c9:b3:d8:2d:ad:93:6b:9f:
                    33:8d:e2:7c:2d:e6:1a:5b:d3:0d:54:aa:10:8d:f9:
                    fb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C3:8A:F0:AC:AE:8B:4B:9B:E7:13:33:AB:8B:27:75:CB:52:E6:F2
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a6130303a3a2f34302d3430203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:6c:a4:69:fd:5b:25:63:ba:46:84:7f:ce:eb:be:c2:43:44:
         9d:9a:d7:75:f4:b4:0a:d6:dd:c2:49:5e:48:01:a9:98:e8:cb:
         31:0d:c6:2e:54:00:46:40:92:38:a2:4a:c0:7b:3f:14:53:1c:
         f3:c6:f8:29:2b:8e:b5:cb:54:6f:0b:85:70:f3:d3:dd:68:46:
         5a:fc:41:31:87:22:c9:c5:cd:5b:25:ba:96:90:ce:df:a8:b4:
         7e:50:35:a6:9c:3e:03:9f:6e:2b:19:08:b1:7d:ef:84:33:07:
         9c:29:a9:ad:67:06:cd:c3:54:4e:f9:bc:19:81:f2:8e:c3:7f:
         e8:c5:48:f2:74:f0:7a:f8:f7:06:74:04:18:c7:00:43:b6:43:
         b9:0f:3f:d2:22:eb:3a:bb:57:55:01:b3:f4:44:99:8c:81:90:
         be:fe:84:1f:74:ac:29:ae:78:43:76:a0:05:35:9d:9b:b2:77:
         67:53:61:ef:00:fe:f7:c7:bc:71:80:18:1d:58:d7:f4:b1:0a:
         26:28:44:da:ed:24:74:fe:d5:e6:ab:ed:78:a5:21:05:94:f0:
         e6:68:3c:e5:de:cc:4d:c0:c3:a5:8c:85:55:1e:50:7d:64:e2:
         78:b9:d5:b0:99:42:5f:10:69:61:d5:02:94:14:43:40:c1:19:
         aa:55:33:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----