Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/0/323830343a346461343a3a2f33322d3438203d3e20323638323130.roa
File:                     323830343a346461343a3a2f33322d3438203d3e20323638323130.roa (raw, json)
Hash identifier:          nPcEnrjpkqml3Q/YU1S1XdnQiIJxGBjSK/q6Y00eDco=
Subject key identifier:   7C:65:66:37:56:3F:4F:59:A5:DA:8F:DB:B0:23:25:B4:F8:99:79:0A
Certificate issuer:       /CN=E2B20551EDECFF02154E7D55D93C1E00847390AF
Certificate serial:       3C161087B00966C99F0C757EC7724FD0C36C0BD8
Authority key identifier: E2:B2:05:51:ED:EC:FF:02:15:4E:7D:55:D9:3C:1E:00:84:73:90:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2B20551EDECFF02154E7D55D93C1E00847390AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/0/323830343a346461343a3a2f33322d3438203d3e20323638323130.roa
Signing time:             Tue 20 Jun 2023 20:00:00 +0000
ROA not before:           Tue 20 Jun 2023 19:55:00 +0000
ROA not after:            Thu 20 Jun 2024 20:00:00 +0000
asID:                     268210
IP address blocks:        2804:4da4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:16:10:87:b0:09:66:c9:9f:0c:75:7e:c7:72:4f:d0:c3:6c:0b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2B20551EDECFF02154E7D55D93C1E00847390AF
        Validity
            Not Before: Jun 20 19:55:00 2023 GMT
            Not After : Jun 20 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:28:8f:9c:15:e0:de:49:1a:9b:a3:3c:6b:f0:
                    19:06:fc:1b:36:d0:43:e0:b9:1d:bd:ed:8d:7e:90:
                    0c:b1:3d:47:87:d4:02:2f:7d:08:6c:83:c8:c7:2f:
                    64:4e:74:39:7e:c1:ca:f2:27:f1:d2:d3:d0:2c:fc:
                    fa:42:cd:0a:c7:bd:54:55:b2:59:94:31:10:8d:3f:
                    86:3c:63:fd:b6:ba:34:8c:74:ee:dd:65:7a:a8:34:
                    99:5a:4c:01:3c:f8:81:cc:ea:82:15:56:16:d1:e4:
                    46:ae:6d:24:b0:59:86:7c:c1:f7:fe:05:33:b1:65:
                    97:ef:18:d1:2e:cb:7f:83:fc:b8:8a:26:a8:dc:9d:
                    73:ad:67:37:71:17:33:c3:c5:b6:32:17:8c:2f:51:
                    3e:34:7f:69:d6:d6:c5:6f:8b:f0:ad:f7:d7:c9:8a:
                    bd:36:cd:16:59:8c:8c:6c:bc:18:e6:9e:58:90:a9:
                    a8:ff:02:f2:62:81:4a:0f:78:5b:92:3f:e9:8e:72:
                    c1:38:d2:8a:09:e5:21:31:dc:b4:26:db:b9:70:80:
                    cc:f4:21:05:bf:42:2a:7c:48:36:0c:32:97:ca:04:
                    e2:3c:64:82:15:7a:59:f7:d4:ab:73:44:c1:8a:7d:
                    27:12:c9:e3:78:60:ae:ba:27:25:57:8c:85:ed:93:
                    56:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:65:66:37:56:3F:4F:59:A5:DA:8F:DB:B0:23:25:B4:F8:99:79:0A
            X509v3 Authority Key Identifier:
                keyid:E2:B2:05:51:ED:EC:FF:02:15:4E:7D:55:D9:3C:1E:00:84:73:90:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/0/E2B20551EDECFF02154E7D55D93C1E00847390AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2B20551EDECFF02154E7D55D93C1E00847390AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/0/323830343a346461343a3a2f33322d3438203d3e20323638323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4da4::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:56:da:df:27:2a:14:08:22:88:78:9d:a9:b2:74:0f:bd:b4:
         e6:04:0d:b9:8a:47:28:d2:b1:a7:f3:2f:08:88:32:92:10:09:
         4e:ed:42:6c:f0:fa:50:21:8e:52:6b:28:2e:7a:8a:b8:7b:42:
         57:a9:fe:38:b3:6f:1d:21:40:f7:51:c6:b4:57:37:f7:1f:37:
         82:a2:a1:61:ca:c1:bc:13:b1:1d:ae:a0:f4:f3:cd:9f:f6:ce:
         0b:aa:64:f9:20:e0:53:4d:05:65:92:da:61:17:74:c4:43:25:
         1f:3b:41:d6:a0:fe:50:23:38:9f:74:2d:e8:54:76:b6:cd:c0:
         9f:49:76:0a:b6:a7:4c:59:31:64:c6:f0:5a:bb:56:38:2b:14:
         d6:9c:89:8b:f3:14:a7:ae:11:08:24:36:53:03:c1:d6:06:13:
         d8:ab:62:67:4a:52:8a:e3:51:df:03:fb:ab:0a:c9:aa:17:e7:
         3b:68:dd:40:f6:24:e7:ab:7c:c4:68:04:2a:c8:23:b7:a0:34:
         30:25:1b:fd:97:d1:f4:20:fc:d5:69:f2:63:3a:96:58:34:32:
         b5:2f:a2:d3:c5:b0:b0:53:10:45:fb:41:56:c3:42:fe:ac:d3:
         a6:dc:fa:da:6a:3c:f3:10:d2:90:5f:9b:43:4a:03:e6:a8:b1:
         16:08:b9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----