Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/323830343a333366633a653030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a653030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          IH+VmWs1UZHpMai8mrr/uGk0WokBip2pHBzyX3Bsgw4=
Subject key identifier:   72:6D:6A:5C:28:F6:60:F8:D0:CE:C1:3D:85:05:B9:F4:9C:55:8C:6B
Certificate issuer:       /CN=B181A11248DDCC042E5C8D4FBA61452301CB2829
Certificate serial:       1674DA2E68EC0912FCC629227D269227420D6873
Authority key identifier: B1:81:A1:12:48:DD:CC:04:2E:5C:8D:4F:BA:61:45:23:01:CB:28:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/323830343a333366633a653030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 13 Sep 2023 12:16:35 +0000
ROA not before:           Wed 13 Sep 2023 12:11:35 +0000
ROA not after:            Wed 11 Sep 2024 12:16:35 +0000
asID:                     265429
IP address blocks:        2804:33fc:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:74:da:2e:68:ec:09:12:fc:c6:29:22:7d:26:92:27:42:0d:68:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B181A11248DDCC042E5C8D4FBA61452301CB2829
        Validity
            Not Before: Sep 13 12:11:35 2023 GMT
            Not After : Sep 11 12:16:35 2024 GMT
        Subject: CN=3082010A0282010100BA9A48DED782E4699BAECDED83898122222D161ADC9462C5A4A1A386D2127015E08BB59F1EE930C99E7203812DA201441B0F3F59A6B4E77F326BA4AAC0FE357843C45A0E4E45F2075DE08C230FC2F3214AE6D5EFF42340D5CA58445E5E979E3D19AEA60F8DAF765D884BCD928E869B3631B320A3383C5E92CE9DDCD459D35A966CE3ACE689CBA5830C9783F7B4F2EE1FA6D7F1CCADB1C056B8EC81A9FDD50121DF671BEA2C38FF4903B33D9F6690230EC7F09ABC47EF7F5E252361740C29DC48AC674A018D65E794DB36E3FE37048F94DF3D7E9A08954C73034BAB4CA96420DF98868DF69E8F973DBD9A6A15EFFE06E874E3AA34D25104733CB39C903348E48D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:48:de:d7:82:e4:69:9b:ae:cd:ed:83:89:
                    81:22:22:2d:16:1a:dc:94:62:c5:a4:a1:a3:86:d2:
                    12:70:15:e0:8b:b5:9f:1e:e9:30:c9:9e:72:03:81:
                    2d:a2:01:44:1b:0f:3f:59:a6:b4:e7:7f:32:6b:a4:
                    aa:c0:fe:35:78:43:c4:5a:0e:4e:45:f2:07:5d:e0:
                    8c:23:0f:c2:f3:21:4a:e6:d5:ef:f4:23:40:d5:ca:
                    58:44:5e:5e:97:9e:3d:19:ae:a6:0f:8d:af:76:5d:
                    88:4b:cd:92:8e:86:9b:36:31:b3:20:a3:38:3c:5e:
                    92:ce:9d:dc:d4:59:d3:5a:96:6c:e3:ac:e6:89:cb:
                    a5:83:0c:97:83:f7:b4:f2:ee:1f:a6:d7:f1:cc:ad:
                    b1:c0:56:b8:ec:81:a9:fd:d5:01:21:df:67:1b:ea:
                    2c:38:ff:49:03:b3:3d:9f:66:90:23:0e:c7:f0:9a:
                    bc:47:ef:7f:5e:25:23:61:74:0c:29:dc:48:ac:67:
                    4a:01:8d:65:e7:94:db:36:e3:fe:37:04:8f:94:df:
                    3d:7e:9a:08:95:4c:73:03:4b:ab:4c:a9:64:20:df:
                    98:86:8d:f6:9e:8f:97:3d:bd:9a:6a:15:ef:fe:06:
                    e8:74:e3:aa:34:d2:51:04:73:3c:b3:9c:90:33:48:
                    e4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6D:6A:5C:28:F6:60:F8:D0:CE:C1:3D:85:05:B9:F4:9C:55:8C:6B
            X509v3 Authority Key Identifier:
                keyid:B1:81:A1:12:48:DD:CC:04:2E:5C:8D:4F:BA:61:45:23:01:CB:28:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/323830343a333366633a653030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         19:49:8b:13:b4:30:bd:c5:7f:a5:26:2c:cb:ac:23:d0:1c:26:
         5d:86:bb:2f:60:61:79:25:e8:c6:41:58:39:d7:a2:2d:e6:25:
         d9:e8:ba:dd:16:b3:f1:39:c5:01:a3:a2:59:44:02:be:f6:91:
         0d:eb:7b:85:79:ce:89:a3:ff:c9:94:ef:27:3c:ee:c5:42:8c:
         25:31:93:4f:b9:68:df:d4:a3:f3:f0:ee:25:c8:31:dc:9f:82:
         b7:46:92:48:30:94:f1:7c:d4:ef:7a:5a:30:e8:96:7b:13:f3:
         16:9a:a9:f1:51:6a:6d:56:02:9e:28:5f:84:9f:b6:76:68:15:
         28:0c:7e:17:cf:2a:b8:16:b7:6c:60:b8:7d:c1:f7:3e:08:8b:
         e3:97:ae:20:48:5e:d1:bc:0d:df:a4:20:28:fe:ea:96:fe:ed:
         76:82:8b:fd:3f:d1:0a:b4:66:f9:c5:c8:e3:10:86:b1:cd:4e:
         1f:52:ef:64:ae:1e:04:8b:19:8e:e6:89:0d:0f:79:89:dc:ab:
         da:70:bb:ea:da:e4:98:6d:96:6e:0f:8c:12:b6:ac:04:5d:7b:
         36:0a:83:ce:23:43:19:c3:5f:da:c1:15:00:cb:17:b6:7f:d9:
         2e:ee:56:73:c0:2d:1f:b2:ff:d1:0c:76:bd:7e:f0:da:f7:69:
         4b:7b:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----