Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/323830343a323231633a3a2f33322d3438203d3e20323634353932.roa
File:                     323830343a323231633a3a2f33322d3438203d3e20323634353932.roa (raw, json)
Hash identifier:          y3i73BcUto+Bi/KqqdcoXZZ6/bHyx/K4mSJU2S1t/0Y=
Subject key identifier:   EE:CD:8F:BC:F0:B3:60:C6:9A:17:C2:B6:A5:FB:55:38:CF:7A:D0:60
Certificate issuer:       /CN=103265AEADC9C654B97AC9BE28D364C7FE429A91
Certificate serial:       523CD6DF96A350B53F248CC44424D04957FC8B25
Authority key identifier: 10:32:65:AE:AD:C9:C6:54:B9:7A:C9:BE:28:D3:64:C7:FE:42:9A:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/103265AEADC9C654B97AC9BE28D364C7FE429A91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/323830343a323231633a3a2f33322d3438203d3e20323634353932.roa
Signing time:             Fri 15 Sep 2023 12:29:05 +0000
ROA not before:           Fri 15 Sep 2023 12:24:05 +0000
ROA not after:            Fri 13 Sep 2024 12:29:05 +0000
asID:                     264592
IP address blocks:        2804:221c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3c:d6:df:96:a3:50:b5:3f:24:8c:c4:44:24:d0:49:57:fc:8b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103265AEADC9C654B97AC9BE28D364C7FE429A91
        Validity
            Not Before: Sep 15 12:24:05 2023 GMT
            Not After : Sep 13 12:29:05 2024 GMT
        Subject: CN=EECD8FBCF0B360C69A17C2B6A5FB5538CF7AD060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c4:22:b7:16:14:04:2f:b2:fb:fc:76:ba:3f:
                    66:7d:f9:b3:d8:4c:c7:41:7f:4f:02:de:6d:1c:65:
                    3e:7c:63:06:31:c9:26:79:e4:b5:2a:42:77:5d:3d:
                    3d:9c:b0:46:ff:3c:a2:b4:4c:48:65:9c:d1:3e:21:
                    5a:f8:4a:83:92:a3:a3:b4:57:03:12:4d:80:f4:25:
                    57:18:0e:df:65:0e:c0:16:e5:8b:1f:ab:ca:a8:e3:
                    9d:b4:7f:be:e2:d5:a4:e5:30:c4:f4:f2:28:b9:a4:
                    68:9d:1e:7b:85:03:41:1f:84:cb:5d:a3:8d:61:ae:
                    41:cc:07:1b:e8:4b:68:22:44:2b:08:fc:dd:d3:2c:
                    15:02:09:23:da:aa:86:0c:f2:42:01:b8:29:c3:ea:
                    89:fe:db:6a:ef:39:87:a6:1e:07:ab:5f:f1:03:83:
                    0b:46:f0:28:1d:5c:92:ce:ae:f4:34:c5:2f:37:32:
                    b9:ca:38:2b:e6:ef:5a:de:46:b7:ee:f6:f6:28:3c:
                    99:64:6f:8f:2a:ed:65:6d:3f:f4:e6:93:d1:79:aa:
                    6d:5d:59:3b:b3:0a:1a:66:38:f1:04:bf:56:57:32:
                    b2:0f:15:78:f5:dc:df:b4:b2:8e:aa:68:f0:34:22:
                    d7:9e:84:19:d1:2e:63:d7:d7:3e:dc:37:24:ad:39:
                    22:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CD:8F:BC:F0:B3:60:C6:9A:17:C2:B6:A5:FB:55:38:CF:7A:D0:60
            X509v3 Authority Key Identifier:
                keyid:10:32:65:AE:AD:C9:C6:54:B9:7A:C9:BE:28:D3:64:C7:FE:42:9A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/103265AEADC9C654B97AC9BE28D364C7FE429A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/103265AEADC9C654B97AC9BE28D364C7FE429A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/323830343a323231633a3a2f33322d3438203d3e20323634353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:221c::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:f0:0c:59:1a:45:cb:f8:96:b6:1b:a5:d8:c4:dd:a9:59:b3:
         c8:96:8d:ae:cd:6d:95:cb:b8:8a:53:5a:09:5d:d0:ba:c0:99:
         0f:d7:3f:6e:59:6b:d4:71:da:b7:e7:50:b2:84:1f:c6:cf:c7:
         5e:7f:a6:6a:ce:bd:57:80:b0:27:5d:9f:bf:c4:88:24:fc:cb:
         88:74:e1:df:fe:07:01:f1:db:7f:8e:d5:f6:41:21:01:3e:da:
         05:23:0c:4b:f4:33:14:75:5f:ac:9f:a4:b1:cd:fc:32:91:26:
         0b:ef:ae:63:20:48:8f:ba:e7:99:fa:3e:2b:0b:03:ae:9d:c3:
         bd:b7:6b:e7:c1:45:61:5b:a1:74:2a:8d:57:1f:36:b1:82:29:
         9d:59:25:1f:e0:77:03:9a:32:a4:ba:09:9f:2d:a9:38:ac:b8:
         a9:34:e0:55:34:d8:c0:72:50:65:b4:8e:81:5b:13:15:21:76:
         61:cc:e4:d7:d1:8c:bc:ed:25:96:95:25:97:a1:47:50:c9:8b:
         d2:2a:72:8e:71:73:e1:19:63:89:f5:11:85:9e:b1:fd:43:a1:
         a5:16:f9:24:a9:37:09:5f:19:bc:d9:95:dd:48:8c:63:47:aa:
         25:b5:a5:2f:f9:f0:ab:8d:5e:89:4c:39:8f:e0:40:58:19:50:
         13:08:01:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----