Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/323830343a3964303a3a2f33322d3438203d3e20323632393935.roa
File:                     323830343a3964303a3a2f33322d3438203d3e20323632393935.roa (raw, json)
Hash identifier:          M+5kR6598X7nwu2PmVqPfJmN4FqBjKQ+7pfjek2MWEk=
Subject key identifier:   37:60:78:F4:C4:04:75:94:10:70:5B:F4:E6:53:E2:33:80:70:71:67
Certificate issuer:       /CN=47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3
Certificate serial:       379C8CE8F168F58BE69A946D491DDA53A538998C
Authority key identifier: 47:50:6C:BC:D7:C9:46:8C:FD:F5:C2:BB:9B:23:94:6F:34:0E:3E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/323830343a3964303a3a2f33322d3438203d3e20323632393935.roa
Signing time:             Wed 17 May 2023 13:42:30 +0000
ROA not before:           Wed 17 May 2023 13:37:30 +0000
ROA not after:            Fri 17 May 2024 13:42:30 +0000
asID:                     262995
IP address blocks:        2804:9d0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9c:8c:e8:f1:68:f5:8b:e6:9a:94:6d:49:1d:da:53:a5:38:99:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3
        Validity
            Not Before: May 17 13:37:30 2023 GMT
            Not After : May 17 13:42:30 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:04:9a:b0:16:10:dd:05:1c:3a:00:9a:7a:
                    1d:e8:6b:fd:74:37:04:2e:fc:9a:54:d9:d1:e1:cd:
                    4e:08:e8:6b:6b:cb:23:e1:2b:3e:e6:c5:65:38:48:
                    fe:02:52:d7:95:a1:32:41:02:8b:4e:f9:f1:fe:da:
                    26:fd:0f:50:13:8d:fd:73:c5:b0:c7:a1:f1:2f:62:
                    bf:12:53:c4:ee:99:47:ae:22:5b:7c:16:68:85:33:
                    ea:1e:7f:b9:09:32:32:b1:49:b8:cb:3d:da:1e:0f:
                    74:42:8d:a1:a5:13:2c:1f:ac:7b:8b:97:f1:54:f9:
                    63:69:28:3e:6f:6f:f6:aa:39:7a:db:e4:f8:31:8e:
                    8a:6f:94:16:5d:84:5d:0f:1c:03:ad:9b:e0:40:3b:
                    a3:0e:67:10:fb:50:4e:71:3a:66:f4:e2:61:b8:a8:
                    52:93:1a:ae:e0:3d:80:b7:f1:a1:ba:92:f0:81:ee:
                    3d:70:bc:ae:0c:47:d9:96:7c:c3:07:91:51:ed:01:
                    f5:d6:49:27:17:84:29:9e:7b:03:ed:d2:99:b6:17:
                    46:0d:cd:7f:93:ee:0d:31:6f:99:37:98:34:11:f0:
                    8f:b3:bf:67:0f:11:d4:29:a8:ce:c8:c0:83:e5:78:
                    8f:ce:5d:8d:9a:65:0f:11:43:7d:0d:37:1c:76:9c:
                    12:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:60:78:F4:C4:04:75:94:10:70:5B:F4:E6:53:E2:33:80:70:71:67
            X509v3 Authority Key Identifier:
                keyid:47:50:6C:BC:D7:C9:46:8C:FD:F5:C2:BB:9B:23:94:6F:34:0E:3E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/323830343a3964303a3a2f33322d3438203d3e20323632393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:7e:57:78:51:26:ac:5c:36:d5:e4:20:25:c0:68:52:27:cd:
         b0:db:fb:a2:2e:52:38:49:49:81:be:48:de:33:34:8d:c0:02:
         13:ab:89:86:6e:d4:7c:11:03:ce:e7:8d:e1:b6:4a:53:18:7b:
         f7:bd:84:81:4e:ec:86:34:d2:38:a6:b1:cd:d1:fe:04:4f:d1:
         9a:e0:95:c4:77:d0:2b:1e:1a:be:d6:a8:35:f1:f6:17:5e:8c:
         6d:39:5e:ab:a7:2f:f8:36:c0:63:94:a0:8a:f6:56:95:f7:42:
         4d:b4:4c:0a:6c:a4:c7:ad:00:20:4a:f0:f6:38:e6:ed:34:30:
         1f:30:f0:81:aa:8e:5d:c6:d0:6b:25:7c:8c:52:a5:dd:f1:d3:
         89:9a:6f:e8:dd:f0:ae:78:11:fd:dd:a4:dd:21:fa:d8:1e:13:
         71:5c:7a:83:2b:5a:a4:0d:a1:9a:5a:cb:09:eb:11:da:00:f1:
         57:96:cf:87:b3:ee:86:99:b1:1a:f5:1e:0a:a7:7b:48:7d:dc:
         77:a0:a7:9a:d4:7d:51:c7:8a:9b:1d:3e:34:e6:d1:24:20:f7:
         6c:ed:e5:99:ca:e2:10:76:5f:24:29:56:c4:5b:89:b3:df:40:
         a1:3a:11:16:36:b7:cf:cd:18:8c:6e:75:d8:c3:80:f1:5b:02:
         84:9d:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----