Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383238353a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383238353a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          PF0/n0O6ekExQKzYrkgYIWCBGZ0L8MVdZUIJnlvNh7o=
Subject key identifier:   D3:B9:02:6B:03:66:45:21:24:7E:B5:7F:AE:14:09:58:15:22:F5:55
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       54C273E873FD190C4CA1C5CF5782B20E486EBBC3
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383238353a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Fri 07 Jul 2023 22:00:00 +0000
ROA not before:           Fri 07 Jul 2023 21:55:00 +0000
ROA not after:            Sun 07 Jul 2024 22:00:00 +0000
asID:                     262494
IP address blocks:        2804:ad8:8285::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c2:73:e8:73:fd:19:0c:4c:a1:c5:cf:57:82:b2:0e:48:6e:bb:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Jul  7 21:55:00 2023 GMT
            Not After : Jul  7 22:00:00 2024 GMT
        Subject: CN=3082010A0282010100CE8365FA336DAB980844D9439848AF44909FAE553B4717852F160555600CB0FCFB4FFD3BDD4D372EEA36394237E574DB7552E4035DE9238918779CF507053C2C69AEC3DD2B00F48FE17D3242BCFD5534236E3B773D36CBEBBBDEE359071509B9DFAB0E8CF668F5DAF4959E2A1B6D670B63FCE9C09F0E3FD46674B0C358D04CC3BA4100CF1AEEE9D2EED1BA59D37D1A5801C7281B6CB796CD4E578764E6BC34669D018BE5C7F4A0BE829D9E21374EEF15CF81D2170C18A0401892693F842E47518A1B0E649CBAD368C76560D6A1EA810EFC62A7147F0EAB8C83B82814022F462F94CB41C30C302D60ABF7BD82086A1468A66CDC3234A9004D422B6D6A41D915BB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:65:fa:33:6d:ab:98:08:44:d9:43:98:48:
                    af:44:90:9f:ae:55:3b:47:17:85:2f:16:05:55:60:
                    0c:b0:fc:fb:4f:fd:3b:dd:4d:37:2e:ea:36:39:42:
                    37:e5:74:db:75:52:e4:03:5d:e9:23:89:18:77:9c:
                    f5:07:05:3c:2c:69:ae:c3:dd:2b:00:f4:8f:e1:7d:
                    32:42:bc:fd:55:34:23:6e:3b:77:3d:36:cb:eb:bb:
                    de:e3:59:07:15:09:b9:df:ab:0e:8c:f6:68:f5:da:
                    f4:95:9e:2a:1b:6d:67:0b:63:fc:e9:c0:9f:0e:3f:
                    d4:66:74:b0:c3:58:d0:4c:c3:ba:41:00:cf:1a:ee:
                    e9:d2:ee:d1:ba:59:d3:7d:1a:58:01:c7:28:1b:6c:
                    b7:96:cd:4e:57:87:64:e6:bc:34:66:9d:01:8b:e5:
                    c7:f4:a0:be:82:9d:9e:21:37:4e:ef:15:cf:81:d2:
                    17:0c:18:a0:40:18:92:69:3f:84:2e:47:51:8a:1b:
                    0e:64:9c:ba:d3:68:c7:65:60:d6:a1:ea:81:0e:fc:
                    62:a7:14:7f:0e:ab:8c:83:b8:28:14:02:2f:46:2f:
                    94:cb:41:c3:0c:30:2d:60:ab:f7:bd:82:08:6a:14:
                    68:a6:6c:dc:32:34:a9:00:4d:42:2b:6d:6a:41:d9:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B9:02:6B:03:66:45:21:24:7E:B5:7F:AE:14:09:58:15:22:F5:55
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383238353a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:8285::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:99:dc:c7:01:3b:9a:77:56:dc:dd:6a:cd:62:34:9a:77:ad:
         21:60:c4:1e:72:1b:e4:00:bb:b0:5c:f8:6d:d3:f6:dd:1d:81:
         8b:56:85:cc:b5:73:76:0a:82:9a:f6:5b:46:2a:02:b7:e2:5a:
         f9:84:74:71:ff:39:a8:37:ae:d1:34:41:d8:b7:93:ad:27:e6:
         1a:c3:43:45:e8:76:15:ee:b7:c7:15:0c:bc:5d:11:a8:ac:ce:
         68:fc:3a:e8:07:f3:63:c5:59:18:38:21:c6:6f:d4:cf:ac:ec:
         83:10:42:ba:da:4c:07:31:c1:da:56:e1:36:58:86:27:5a:5d:
         c6:75:c9:8c:18:c1:87:ff:db:a3:a5:9b:3d:15:eb:5a:32:0b:
         d9:73:ad:9b:7e:84:b7:11:a2:a5:ff:a5:21:df:03:03:a2:50:
         62:ec:f6:08:9d:33:2c:00:f1:97:5b:3b:e0:d4:ef:f6:f4:26:
         0b:8e:b1:55:7b:16:cd:46:7e:6e:ab:08:ce:e0:36:19:32:18:
         85:c8:68:e5:00:fa:9e:d2:32:e7:89:7f:9c:4d:f5:09:08:e2:
         df:2a:ce:a2:60:3a:62:b3:cd:22:7e:37:d3:d8:8f:f4:b8:f5:
         89:a4:24:c8:86:2d:32:cc:e6:4c:76:c5:bb:54:44:a2:06:64:
         8a:50:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----