Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a383030303a3a2f33332d3333203d3e20323638303335.roa
File:                     323830343a353666383a383030303a3a2f33332d3333203d3e20323638303335.roa (raw, json)
Hash identifier:          H4I9YD3snpb2jHaEjiidhjf1QE/tLx3AJQFCIjhs/l8=
Subject key identifier:   E0:DA:9A:C7:1C:27:11:E7:9B:14:58:0D:40:6B:64:AE:0C:5B:9F:95
Certificate issuer:       /CN=2FB412543B856F996765C01B679EECB97CE613A2
Certificate serial:       77AC0EA3FF792098FEB6BDC3615DF528904B19D2
Authority key identifier: 2F:B4:12:54:3B:85:6F:99:67:65:C0:1B:67:9E:EC:B9:7C:E6:13:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FB412543B856F996765C01B679EECB97CE613A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a383030303a3a2f33332d3333203d3e20323638303335.roa
Signing time:             Tue 20 Dec 2022 11:46:28 +0000
ROA not before:           Tue 20 Dec 2022 11:41:28 +0000
ROA not after:            Tue 19 Dec 2023 11:46:28 +0000
asID:                     268035
IP address blocks:        2804:56f8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ac:0e:a3:ff:79:20:98:fe:b6:bd:c3:61:5d:f5:28:90:4b:19:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB412543B856F996765C01B679EECB97CE613A2
        Validity
            Not Before: Dec 20 11:41:28 2022 GMT
            Not After : Dec 19 11:46:28 2023 GMT
        Subject: CN=E0DA9AC71C2711E79B14580D406B64AE0C5B9F95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5d:1a:1f:cb:b1:2b:83:56:a9:09:09:5b:cb:
                    1a:44:75:e8:ae:a4:50:33:f5:5c:3a:25:1d:78:85:
                    44:25:30:ac:06:38:e5:ed:65:2d:b9:26:85:c8:e5:
                    b7:02:d3:4d:25:40:ae:10:b8:41:c5:23:6f:57:b7:
                    87:ce:19:dd:4a:7d:11:fb:02:fc:af:0e:f0:e9:07:
                    d6:7a:06:53:9a:e5:04:93:84:77:9c:f2:8e:21:d1:
                    43:1a:85:6e:fe:6d:79:2c:7e:1d:7b:c9:30:fc:f8:
                    e2:4e:92:aa:a9:63:b3:f1:92:46:1d:f7:12:d1:b0:
                    50:b9:2f:be:55:43:a7:f5:3f:53:f3:2d:42:b7:77:
                    0a:8b:4f:dc:13:5f:d0:96:0a:eb:b9:a7:b3:1a:e3:
                    e3:44:7c:e5:b1:f1:3a:f6:62:52:ac:95:6b:61:85:
                    e7:bd:eb:81:06:1f:51:64:4d:87:d8:b2:fa:fe:de:
                    26:1b:ce:90:8d:57:8c:65:ff:ea:fe:f8:af:f4:82:
                    4f:54:b3:2a:f7:29:08:7e:98:aa:2c:19:38:19:10:
                    2e:4c:39:3e:72:99:12:f5:b1:a7:9f:59:5b:f7:7e:
                    72:06:c7:4f:51:bd:21:01:5d:9f:f7:0f:d1:2f:4f:
                    cc:34:c6:fa:15:c2:04:38:2a:1a:5d:11:3c:bf:6c:
                    31:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DA:9A:C7:1C:27:11:E7:9B:14:58:0D:40:6B:64:AE:0C:5B:9F:95
            X509v3 Authority Key Identifier:
                keyid:2F:B4:12:54:3B:85:6F:99:67:65:C0:1B:67:9E:EC:B9:7C:E6:13:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/2FB412543B856F996765C01B679EECB97CE613A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FB412543B856F996765C01B679EECB97CE613A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a383030303a3a2f33332d3333203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         00:98:03:9c:ed:f9:b1:20:af:70:22:de:56:5f:8b:86:4d:79:
         3f:5c:f7:8e:73:d9:dd:f3:54:11:66:64:86:f1:69:8d:5a:5f:
         18:f7:b4:16:8d:0a:f9:e5:af:95:3a:47:50:d3:55:2d:e0:ac:
         c7:62:01:ff:a7:9a:4e:a5:a0:30:63:09:c3:d9:fb:71:dc:06:
         21:76:0b:8c:86:71:77:ee:e3:0b:1e:ab:29:6a:de:42:68:db:
         b5:b3:41:98:88:b0:5a:ce:e1:7f:9a:a1:17:8f:55:68:6f:6a:
         f4:17:94:9b:0b:04:51:2a:1b:e2:ad:87:71:ba:33:84:82:f3:
         ee:2a:1c:5b:a7:b1:73:64:28:2a:d6:ec:47:f0:84:ee:ed:5b:
         97:93:36:ee:13:61:af:16:6a:69:9f:99:de:4f:ae:61:4d:fc:
         45:df:4a:d7:5a:b4:49:04:3a:bd:50:44:ef:91:47:4d:52:25:
         ca:c1:84:ad:33:df:8a:dd:7f:31:49:b9:3c:bf:85:29:29:4d:
         d8:c7:ab:24:08:e2:00:75:87:c5:f3:87:81:0a:a0:1b:70:da:
         2e:72:fb:b4:2a:41:95:56:f5:39:4a:da:5e:2c:5a:c6:90:01:
         b5:e0:87:ea:98:0b:11:d9:36:67:39:cd:58:25:3a:4c:83:e3:
         cd:42:1a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----