Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030363a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323030363a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          dtE9IVhOikyFHRW659DOw0NWH6Dv38R5Pn0fTIjSjmY=
Subject key identifier:   E1:16:09:08:B5:6B:31:26:66:5E:6D:0E:D3:BD:F2:C4:A7:5E:7A:39
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       1B3107E22F4B54C6EA7A48A04DE7F0A69BE2544C
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030363a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:36:38 +0000
ROA not before:           Thu 20 Jul 2023 14:31:38 +0000
ROA not after:            Thu 18 Jul 2024 14:36:38 +0000
asID:                     52706
IP address blocks:        2804:c70:2006::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:31:07:e2:2f:4b:54:c6:ea:7a:48:a0:4d:e7:f0:a6:9b:e2:54:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:31:38 2023 GMT
            Not After : Jul 18 14:36:38 2024 GMT
        Subject: CN=E1160908B56B3126665E6D0ED3BDF2C4A75E7A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:6d:d0:f2:bd:0b:e3:76:3c:34:7a:95:49:
                    11:76:f8:2f:8e:2e:55:aa:78:6c:c1:eb:a9:65:e5:
                    32:be:14:c9:66:a8:30:10:67:49:fb:54:63:59:6a:
                    91:5b:25:2d:58:d4:15:40:e2:07:9d:36:f4:58:b9:
                    dd:91:01:11:2f:6f:4e:18:1e:8f:46:0a:e0:8e:61:
                    e8:ad:9b:01:ec:4f:4e:a1:a3:33:b8:7f:2a:2e:30:
                    d8:6a:a2:16:59:1d:d1:4c:d0:1f:59:48:84:93:df:
                    12:7b:3a:32:71:21:e4:f8:80:61:c1:77:de:0e:99:
                    5e:67:c6:59:4b:fe:41:34:61:55:b1:35:48:57:cc:
                    ab:38:07:74:18:c3:2e:ca:31:4a:ba:83:a4:6d:d1:
                    ff:d7:9f:dd:19:7d:8d:8f:49:25:a3:ea:14:ea:bb:
                    23:4e:ad:96:0c:0d:35:22:5f:f3:e3:31:6c:47:8b:
                    7a:dc:0f:86:93:7a:4d:93:4d:ee:d9:22:91:a9:88:
                    78:2e:e6:f1:7e:39:96:46:8e:8e:1e:54:d0:b1:dd:
                    0c:70:7a:e2:14:70:26:9c:1d:1e:be:d0:3b:a3:40:
                    cd:a3:b1:61:cb:51:bf:5d:21:07:42:de:d7:02:b7:
                    0d:bc:66:8a:34:1d:44:e7:c5:b8:e5:f3:d7:57:6f:
                    de:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:16:09:08:B5:6B:31:26:66:5E:6D:0E:D3:BD:F2:C4:A7:5E:7A:39
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030363a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2006::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:14:5b:d9:74:a3:39:d8:94:6b:f7:c5:32:4b:f6:8a:d2:3a:
         a3:ef:e3:c8:77:75:f4:c3:8b:9a:9b:9a:c6:38:76:0f:17:0d:
         c8:93:64:82:73:03:c0:f1:3c:72:99:c7:dc:b2:33:8e:6e:91:
         53:3f:40:de:f9:23:d2:29:4f:b1:57:45:84:66:08:ab:1d:06:
         64:8f:06:64:a9:47:c4:a5:08:06:8b:d5:97:fa:cc:24:a0:bc:
         f4:ff:93:db:7b:9d:ca:a2:c9:f3:06:f0:bf:31:5a:6f:82:b6:
         ce:2e:20:7a:16:20:11:43:5c:3c:3b:bf:c0:ba:b9:1d:df:a2:
         c0:be:7c:5a:65:fc:7c:ec:39:30:76:6a:a1:93:68:35:75:6b:
         95:00:e0:01:8b:51:53:5b:b8:2f:20:e1:af:4d:b9:97:e8:50:
         5f:53:42:73:26:e6:1f:6b:36:64:3e:7d:61:71:71:43:2b:f5:
         e0:54:e6:f4:a6:f0:2d:21:20:10:b9:0d:9b:3d:8c:b9:06:16:
         4a:04:c9:5c:5b:45:cd:09:2b:bd:3c:3c:aa:9f:3c:5c:56:02:
         0f:a2:eb:e1:d5:99:c5:d2:d2:b5:d3:54:14:b3:89:ae:c7:6a:
         5d:c9:85:17:7d:bb:76:a2:28:9d:05:d7:58:25:ff:3e:b2:c2:
         34:fd:95:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----