Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030333a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030333a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          ONUWeWWdhXD75rNfK4W/mQqvsh2lgrkagG9xTZcfOao=
Subject key identifier:   BF:41:13:67:05:57:32:A7:60:BF:1F:1B:5A:8A:D6:D6:4B:29:5E:46
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       6B9472E344B8CA745B67D6FAF41C8CB77753BDA5
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030333a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:39:31 +0000
ROA not before:           Thu 20 Jul 2023 14:34:31 +0000
ROA not after:            Thu 18 Jul 2024 14:39:31 +0000
asID:                     52706
IP address blocks:        2804:c70:6003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:94:72:e3:44:b8:ca:74:5b:67:d6:fa:f4:1c:8c:b7:77:53:bd:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:34:31 2023 GMT
            Not After : Jul 18 14:39:31 2024 GMT
        Subject: CN=BF411367055732A760BF1F1B5A8AD6D64B295E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5c:b2:4d:da:05:d9:ef:b1:c9:60:f3:a9:83:
                    f6:e7:cf:b4:05:01:68:88:bb:cb:6d:b8:15:c4:77:
                    b6:52:91:d0:4d:d1:d7:5d:46:b0:25:87:2d:4a:43:
                    fe:ca:53:0f:fb:f6:4d:90:aa:f3:29:4e:b0:6e:9e:
                    50:ba:7c:48:ea:3c:ca:a7:7b:9f:67:2a:8d:85:20:
                    51:b2:c9:62:24:c2:ff:59:48:f3:17:fc:5d:41:98:
                    60:f6:01:88:5d:41:bf:9a:15:71:2c:e1:4e:05:8d:
                    1e:c8:1e:22:16:81:d0:c7:8d:e6:17:a6:58:15:92:
                    8d:09:90:dd:57:06:ce:0f:27:2a:98:71:c2:23:c8:
                    9f:fe:a6:cc:e4:0e:cf:75:b7:e9:ba:56:fb:5e:39:
                    73:be:56:1d:c7:7b:1f:c2:f0:98:cd:21:70:f6:e0:
                    e4:ce:9d:74:51:b5:9d:f5:14:b4:bc:32:e8:e3:87:
                    53:7c:16:d3:23:3c:ff:1e:48:72:59:e0:e0:62:23:
                    a6:d0:92:ad:25:88:64:75:9a:6b:1d:de:06:ba:e0:
                    32:fe:5b:ae:5f:c2:62:8a:c7:45:bb:91:f0:fd:c1:
                    bf:10:2d:14:d0:5e:27:ab:79:d4:e2:7d:4d:27:3e:
                    da:14:98:13:78:f1:93:4a:3c:64:9b:cc:86:e8:c6:
                    22:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:41:13:67:05:57:32:A7:60:BF:1F:1B:5A:8A:D6:D6:4B:29:5E:46
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030333a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6003::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:9a:e6:c2:af:fb:1e:2a:af:a3:79:cc:4f:35:ad:05:7c:df:
         1b:96:a8:f9:99:d4:82:4d:f0:99:ef:cb:5e:f9:d7:35:8a:da:
         c4:25:b0:ba:5f:df:b0:01:b3:64:3d:83:c6:a5:75:6d:03:c8:
         d7:3e:f8:c2:f2:e5:ca:d4:51:b3:9e:e3:9e:55:83:69:87:5e:
         f1:b4:86:80:8f:89:91:bf:a3:af:53:1a:e2:91:17:84:ce:fc:
         35:84:eb:e1:e7:e6:f9:d3:d3:e2:55:4c:28:ce:27:55:8e:18:
         63:29:1b:11:28:d6:8c:44:f4:54:50:75:52:d3:c2:1b:ff:9f:
         30:f7:66:e5:54:18:9c:e1:9c:dd:ff:50:5b:60:81:80:11:35:
         04:df:62:45:50:b8:f2:e6:6f:9c:68:5d:7e:63:39:12:6b:21:
         22:99:f6:d9:2c:a5:64:da:fc:33:b9:e1:47:fd:85:c6:d4:2b:
         d4:66:42:04:23:4e:36:be:b9:49:9e:8e:bb:29:0a:6b:34:39:
         29:46:58:0f:38:ae:31:9b:fe:48:ad:16:be:a2:78:8e:9a:36:
         d3:7e:46:66:d7:74:ea:8b:ac:cb:22:6e:32:f8:13:de:99:68:
         49:fa:b8:27:31:91:58:62:92:07:43:67:5a:95:ac:1e:2a:39:
         ec:ab:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----