Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/323830343a356162383a3a2f33322d3334203d3e20323638373931.roa
File:                     323830343a356162383a3a2f33322d3334203d3e20323638373931.roa (raw, json)
Hash identifier:          LiVpmz9Qvh5WBuyX37UbJnbZVE+sOKDG0E7SHksuTq4=
Subject key identifier:   27:18:A2:5D:D1:68:96:4B:0E:17:1A:35:4B:67:76:D5:E1:F1:30:8B
Certificate issuer:       /CN=AF919E5DD91249FEC8AC8474B557DF7E72490802
Certificate serial:       1075FBDE1E234F6F4FA7E91A5536933C31A9EBED
Authority key identifier: AF:91:9E:5D:D9:12:49:FE:C8:AC:84:74:B5:57:DF:7E:72:49:08:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF919E5DD91249FEC8AC8474B557DF7E72490802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/323830343a356162383a3a2f33322d3334203d3e20323638373931.roa
Signing time:             Wed 05 Jul 2023 01:00:00 +0000
ROA not before:           Wed 05 Jul 2023 00:55:00 +0000
ROA not after:            Fri 05 Jul 2024 01:00:00 +0000
asID:                     268791
IP address blocks:        2804:5ab8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:75:fb:de:1e:23:4f:6f:4f:a7:e9:1a:55:36:93:3c:31:a9:eb:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF919E5DD91249FEC8AC8474B557DF7E72490802
        Validity
            Not Before: Jul  5 00:55:00 2023 GMT
            Not After : Jul  5 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:be:f7:aa:62:80:19:54:d1:39:aa:5f:11:
                    fa:97:69:60:f8:be:71:04:91:f9:5d:f0:32:d1:75:
                    4f:92:3d:c2:fb:e7:c7:35:ec:8c:9b:6d:53:16:b8:
                    53:46:6e:78:3f:bd:bd:32:44:78:b4:a1:cf:39:50:
                    ac:02:25:b9:b8:a6:1a:5b:23:75:e4:ff:e8:ef:42:
                    36:67:34:48:49:78:a7:0f:0b:ea:f6:c0:db:d7:81:
                    11:60:36:37:87:b4:9d:94:d4:ed:ca:23:d6:91:09:
                    39:b7:a1:f7:e2:8c:1c:40:ba:f1:f1:71:72:96:51:
                    f3:59:7a:64:21:db:12:74:88:bc:c4:fe:28:5b:50:
                    66:23:7d:37:4c:5f:4c:28:71:42:bc:05:4f:4a:ce:
                    2a:d5:7f:93:0d:f8:c0:2c:91:47:c5:93:74:2c:59:
                    97:45:5d:a0:b5:db:c5:09:14:a4:d9:99:e3:bd:70:
                    6f:26:3b:d3:eb:1e:bf:7c:e3:cf:05:79:84:e8:77:
                    46:48:7f:fa:10:2f:39:55:61:02:c9:4b:a9:02:d0:
                    8f:d1:2f:34:ad:dc:37:e4:e8:66:83:19:2b:53:7f:
                    45:72:31:4b:06:0a:30:c8:96:45:bb:41:07:9a:a1:
                    bc:18:fa:50:a6:7f:a2:0c:ef:25:fa:3e:5f:65:de:
                    9a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:18:A2:5D:D1:68:96:4B:0E:17:1A:35:4B:67:76:D5:E1:F1:30:8B
            X509v3 Authority Key Identifier:
                keyid:AF:91:9E:5D:D9:12:49:FE:C8:AC:84:74:B5:57:DF:7E:72:49:08:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/AF919E5DD91249FEC8AC8474B557DF7E72490802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF919E5DD91249FEC8AC8474B557DF7E72490802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/323830343a356162383a3a2f33322d3334203d3e20323638373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab8::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:b1:44:fa:b2:6b:5f:64:ce:3e:5e:ab:6b:cd:90:a2:b4:9c:
         e2:9e:59:e8:81:3d:12:3a:eb:ab:cd:10:19:91:b0:5d:ff:77:
         72:51:51:29:16:5c:f0:f6:c6:fc:4c:f7:33:b8:3d:9b:68:5f:
         e7:7b:0a:1a:a5:f6:64:85:4a:02:f1:a4:09:7f:a0:fa:95:51:
         7f:da:ad:43:1b:63:1f:e9:17:14:33:a9:4e:78:bd:4d:06:e9:
         b3:6f:e0:4b:b5:45:aa:c6:76:d9:96:37:1c:5a:cc:82:3c:6e:
         47:c9:50:45:6a:e5:c7:72:29:38:a8:37:a5:7e:cf:00:70:ea:
         d8:b0:de:46:59:14:31:f5:19:25:77:bc:6d:9d:dc:f2:f0:be:
         fd:bb:79:0b:38:e8:51:d8:de:ab:c0:62:f6:02:22:f6:34:0e:
         5b:be:e9:b5:10:e1:37:5b:0e:8e:f8:cf:2f:a5:6a:f0:eb:91:
         7d:18:b8:0c:43:b4:cc:01:58:5c:29:9f:b6:b0:2e:f7:9b:e0:
         c9:d0:05:30:68:49:45:5a:d2:d1:d7:f3:96:69:c0:98:1a:23:
         8a:02:03:ab:fe:0b:7a:64:55:fb:7d:cc:e4:42:68:2d:5f:62:
         f4:f3:ea:1a:a1:80:fd:78:85:01:15:11:f1:1c:b4:a9:76:03:
         89:5f:b1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----