Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030353a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030353a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          xlm8214Sken6n+iAgzCtUenzfNzR+fHPbhrOW2jn+aw=
Subject key identifier:   DA:65:18:0C:C2:D6:4A:25:5E:81:2D:FF:0F:ED:89:67:AA:90:AA:0C
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       575B0DB5C3CF4ED6780E7548D921539A0F4E9423
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030353a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:41:13 +0000
ROA not before:           Thu 20 Jul 2023 14:36:13 +0000
ROA not after:            Thu 18 Jul 2024 14:41:13 +0000
asID:                     52706
IP address blocks:        2804:c70:6005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5b:0d:b5:c3:cf:4e:d6:78:0e:75:48:d9:21:53:9a:0f:4e:94:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:36:13 2023 GMT
            Not After : Jul 18 14:41:13 2024 GMT
        Subject: CN=DA65180CC2D64A255E812DFF0FED8967AA90AA0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:20:2d:0e:6f:4c:45:c5:77:61:88:c5:b2:
                    15:34:ae:32:13:d0:e3:90:76:6d:ce:ac:da:97:a7:
                    03:e5:79:a1:71:36:b4:9d:89:0b:92:a5:a0:67:30:
                    32:fe:ab:cb:1f:2a:19:7c:67:f7:0a:b5:70:e7:03:
                    59:08:7f:2e:23:8c:2a:6b:4e:a6:0b:f6:92:69:c0:
                    d3:ef:20:8e:17:49:97:42:f2:6b:cf:b6:4e:5b:43:
                    af:a8:0e:5a:1c:32:2e:22:d4:8f:6a:46:81:d6:43:
                    20:bd:bf:08:e2:a7:90:f0:01:b6:c9:fb:7a:a3:97:
                    af:09:8a:b3:e4:ce:ae:92:84:76:5e:7e:72:ed:b6:
                    ee:9e:8d:fc:b9:5f:36:56:ff:4b:9a:52:2b:e0:f7:
                    9f:d3:57:52:35:36:bb:ee:83:5b:d6:5a:17:1e:84:
                    0b:6e:34:01:14:31:b1:ed:3e:7d:00:e4:d5:28:a9:
                    11:dd:59:99:4e:80:ba:40:97:cb:99:d2:8e:c3:18:
                    11:7d:eb:5c:f5:7e:de:9e:a7:15:7a:1a:e8:9c:71:
                    34:e0:02:87:32:13:85:c0:d5:88:a3:4c:95:00:c6:
                    75:c7:d2:41:35:24:93:79:ce:4e:72:5e:f0:67:c7:
                    2d:16:9d:8e:3d:bf:c0:8b:62:dd:18:bd:a4:8c:79:
                    b5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:65:18:0C:C2:D6:4A:25:5E:81:2D:FF:0F:ED:89:67:AA:90:AA:0C
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030353a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6005::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:7d:65:e4:b2:06:9f:da:c9:ed:98:e3:14:a5:ef:1c:06:5b:
         1f:42:38:c2:e2:14:ba:0a:ad:82:a8:3b:f4:73:67:7d:61:55:
         18:6f:ec:15:9e:0a:86:5c:7d:0e:cd:12:16:0c:86:07:26:54:
         63:a4:1d:be:76:fe:fb:1e:ad:18:d1:e6:88:aa:d9:d8:6a:03:
         c7:7a:64:3b:90:07:ce:6f:47:14:fb:f3:01:de:3f:0d:df:14:
         89:19:a6:d7:4a:05:6a:a4:35:6c:82:d7:9f:cc:0c:52:e7:3e:
         53:8a:0d:62:5b:62:20:d6:a8:c2:07:da:fe:77:db:e4:d0:47:
         48:5c:3e:e9:39:c7:25:c2:6d:db:00:a1:9d:11:b2:81:fb:60:
         84:c0:c7:d0:db:9f:90:bd:1a:2d:62:63:b5:9b:b4:e8:a3:65:
         70:50:d9:9e:d7:4e:36:ed:5a:9c:34:03:28:df:f8:54:c5:eb:
         b8:b0:bb:8c:fd:6e:e5:bc:c1:ed:b9:fc:ba:12:2a:24:6c:ce:
         0e:89:12:34:56:13:d1:4d:a9:20:67:fe:53:86:fe:a6:37:33:
         6d:ce:4b:66:b1:22:1e:11:80:d2:86:7a:f7:9c:9f:28:f0:76:
         d0:99:d6:93:5b:06:2f:4e:3d:88:ef:a7:82:61:47:b1:a1:21:
         6f:91:d1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----