Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/323030313a313263343a3a2f33322d3634203d3e203238323632.roa
File:                     323030313a313263343a3a2f33322d3634203d3e203238323632.roa (raw, json)
Hash identifier:          4JVJeEwp8UsTq5arPblvoUsfzquumrdL528iLICGv78=
Subject key identifier:   AE:D5:FA:BD:C9:C7:E7:F6:02:98:8C:D6:A5:C9:4D:05:DC:F2:B7:60
Certificate issuer:       /CN=FE065568C2BF6018DC4CD6D9D669AB6DB63A901F
Certificate serial:       4659E22A0B6FFF55408DA9243C99B25DADED8ED3
Authority key identifier: FE:06:55:68:C2:BF:60:18:DC:4C:D6:D9:D6:69:AB:6D:B6:3A:90:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE065568C2BF6018DC4CD6D9D669AB6DB63A901F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/323030313a313263343a3a2f33322d3634203d3e203238323632.roa
Signing time:             Fri 22 Sep 2023 12:47:19 +0000
ROA not before:           Fri 22 Sep 2023 12:42:19 +0000
ROA not after:            Fri 20 Sep 2024 12:47:19 +0000
asID:                     28262
IP address blocks:        2001:12c4::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:59:e2:2a:0b:6f:ff:55:40:8d:a9:24:3c:99:b2:5d:ad:ed:8e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE065568C2BF6018DC4CD6D9D669AB6DB63A901F
        Validity
            Not Before: Sep 22 12:42:19 2023 GMT
            Not After : Sep 20 12:47:19 2024 GMT
        Subject: CN=AED5FABDC9C7E7F602988CD6A5C94D05DCF2B760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6b:fb:14:8b:9c:8f:aa:31:fc:1d:36:4b:fd:
                    4f:2f:cf:c8:d6:8a:60:6f:f7:8c:62:e0:3f:c6:0e:
                    d5:4a:b8:41:f9:f1:d5:64:55:2c:9c:7a:09:03:cf:
                    c0:d5:a3:53:f7:2d:9b:d7:09:e0:32:7e:e6:c0:58:
                    90:51:74:75:86:a4:7f:03:eb:ba:ce:76:9d:68:e8:
                    3f:06:ea:cd:33:84:23:01:42:93:48:a3:39:5f:f0:
                    85:a8:cb:c6:8e:82:78:e1:5e:52:59:c0:b1:a0:3b:
                    75:02:a2:07:a7:d4:0b:c2:80:1e:4c:59:a0:7e:ee:
                    1f:65:19:fe:89:4f:50:9b:98:c0:6d:e9:56:22:6f:
                    77:96:c8:8d:10:31:58:64:60:e6:cd:74:16:02:27:
                    e9:9e:6e:16:4d:9b:30:bb:58:d7:00:9b:0a:6a:65:
                    94:49:ef:1c:17:34:d4:2c:94:b0:5f:b5:d7:dc:97:
                    e2:1b:4f:6c:81:25:cb:f8:05:e9:66:98:92:2d:f1:
                    e7:50:ea:a2:5b:b8:93:00:0b:f9:72:2a:30:1f:2b:
                    77:5a:81:3c:77:d2:e1:53:ea:85:fa:0f:6f:30:92:
                    e7:d5:64:94:d4:e3:ec:88:36:4d:6a:18:05:71:69:
                    be:b3:de:1e:78:71:c1:38:30:78:95:5a:ad:a8:eb:
                    4a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D5:FA:BD:C9:C7:E7:F6:02:98:8C:D6:A5:C9:4D:05:DC:F2:B7:60
            X509v3 Authority Key Identifier:
                keyid:FE:06:55:68:C2:BF:60:18:DC:4C:D6:D9:D6:69:AB:6D:B6:3A:90:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/FE065568C2BF6018DC4CD6D9D669AB6DB63A901F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE065568C2BF6018DC4CD6D9D669AB6DB63A901F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/323030313a313263343a3a2f33322d3634203d3e203238323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:4b:13:76:4f:99:2f:9c:43:2e:2f:15:73:d0:59:04:39:6a:
         f8:ff:f5:67:01:1f:a9:1b:ec:ac:c4:fc:fb:37:e7:47:aa:1b:
         24:2b:e0:29:8f:ca:ac:e1:64:ab:9e:6a:4b:f1:52:3b:c2:7c:
         62:e5:14:59:4f:74:e1:1a:18:e9:de:29:eb:b0:d5:cf:a4:10:
         57:6b:4a:5b:83:22:f0:1d:e9:7a:0b:48:11:a4:22:f6:9c:62:
         9b:46:4d:0c:55:a1:7f:91:b5:ac:97:90:f3:77:5b:e8:33:48:
         a5:3a:ba:8c:e9:ac:db:14:d8:1b:48:ce:66:e1:42:e6:00:bd:
         70:6a:fe:c9:2f:f3:8e:66:52:71:51:91:e3:ed:ce:cc:2e:84:
         6c:a2:9f:a2:9b:47:97:db:de:36:73:da:3d:bc:d2:cf:f6:9f:
         1d:01:75:1a:e2:7c:7e:df:6a:a3:f0:48:64:8c:ba:6c:4c:bb:
         eb:ba:e8:e6:a9:dd:2e:c8:ce:5e:00:6b:f7:f9:6f:93:7f:2d:
         66:b9:35:1c:52:6b:37:6b:70:fb:32:3c:65:6b:34:cf:f9:39:
         ae:be:6e:4c:2e:e7:c5:a8:e7:47:20:c5:47:14:5b:d4:01:5a:
         e7:3d:3e:64:3d:0a:52:47:4a:70:33:5e:b8:c4:30:61:bf:0a:
         45:e8:03:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----