Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a343033643a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a343033643a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          cDn+ioWFEnrf2fWOlI1cw+EVxyb+WWPRe3V82P1iHic=
Subject key identifier:   18:7F:F5:8C:F9:F4:9D:18:91:8F:F9:3D:5C:34:4A:B9:B6:C7:CC:72
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       2E5240F63622C13E5F9CCD6C1EAE1914B586C5D5
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a343033643a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:38:09 +0000
ROA not before:           Thu 20 Jul 2023 14:33:09 +0000
ROA not after:            Thu 18 Jul 2024 14:38:09 +0000
asID:                     52706
IP address blocks:        2804:c70:403d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:52:40:f6:36:22:c1:3e:5f:9c:cd:6c:1e:ae:19:14:b5:86:c5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:33:09 2023 GMT
            Not After : Jul 18 14:38:09 2024 GMT
        Subject: CN=187FF58CF9F49D18918FF93D5C344AB9B6C7CC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1f:dc:bc:61:03:d4:08:67:b4:28:8f:ed:34:
                    6a:de:59:02:ba:ac:59:fa:ce:e1:07:fb:58:3c:0e:
                    aa:7f:31:27:4d:17:35:7d:ec:ff:e2:d9:37:fc:36:
                    07:74:8b:68:d9:e3:66:d3:0c:d0:b8:d6:80:c4:2d:
                    4b:81:b7:ee:d9:96:29:25:95:8e:e5:22:62:32:c3:
                    4c:ed:63:ff:28:54:2b:8c:43:21:60:c3:cd:87:2a:
                    44:02:db:a1:5f:81:b2:9a:9a:05:bc:62:0d:93:83:
                    02:b0:80:8b:06:c7:ba:e3:9d:e8:45:51:d9:47:c2:
                    ca:22:39:79:32:37:fe:09:59:12:80:ea:aa:ab:f0:
                    9e:83:e5:45:c5:42:a0:63:cb:75:09:7d:f8:52:e3:
                    a8:42:cd:fc:b5:a6:68:1e:d5:29:b4:eb:eb:69:ff:
                    f6:d5:90:fd:b3:f0:1a:50:f9:78:fb:a7:fd:bb:c6:
                    98:68:25:d1:af:4c:9a:e3:1d:49:e7:5b:87:7d:56:
                    90:2b:97:57:29:68:2e:28:16:d4:04:19:c1:f0:64:
                    c6:e3:d0:42:89:b6:ac:0a:f1:42:ec:6e:89:59:23:
                    41:24:b2:66:36:28:d9:05:47:1f:cb:6d:6b:54:d6:
                    39:47:d8:ca:de:9f:c5:94:74:ae:02:5c:9e:24:db:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7F:F5:8C:F9:F4:9D:18:91:8F:F9:3D:5C:34:4A:B9:B6:C7:CC:72
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a343033643a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:403d::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:21:7d:1e:9e:9e:29:9d:9e:89:f2:49:c0:c4:e6:9d:fd:05:
         c7:7b:eb:6b:5d:72:57:bf:17:9c:02:c4:e1:9f:2e:ff:6a:dc:
         8e:f9:73:6f:21:a6:fe:b4:ac:0e:d0:2a:a1:51:9b:6a:4e:88:
         43:6a:20:bd:ea:a1:de:9f:e6:52:40:3e:fa:f6:d6:c8:b7:7f:
         b7:62:78:11:73:43:59:d8:e1:75:85:36:47:e8:f6:4b:0c:05:
         a9:72:d7:44:49:b0:7d:bd:fb:81:c2:2e:b0:2e:4e:48:9f:82:
         5a:6e:21:4b:67:2c:56:d6:59:ff:41:87:e3:ee:a2:98:d9:65:
         3e:f2:08:0d:57:9c:d1:7e:bf:16:ac:e5:34:77:23:ee:b1:c5:
         55:05:ef:8f:11:67:27:8e:08:e6:d7:e3:49:24:22:42:db:06:
         2a:ad:94:a6:3b:b7:7d:7a:99:74:ac:df:c6:7c:a5:fa:c0:76:
         8c:62:70:53:ac:63:a5:b2:6b:c3:cb:4e:30:d3:04:bc:93:24:
         57:71:b4:2b:21:a2:e6:3a:12:22:a1:c7:d8:c8:42:e9:88:5d:
         4b:06:25:a4:6a:0b:ab:fc:1b:a2:47:a8:2b:0f:70:21:d5:fe:
         d6:5f:a9:be:b9:53:69:d8:f0:b4:43:0b:d1:1c:5b:f7:53:df:
         50:a5:d0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----