Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/323830343a3762383a3a2f33322d3332203d3e20323632333135.roa
File:                     323830343a3762383a3a2f33322d3332203d3e20323632333135.roa (raw, json)
Hash identifier:          0ezrTePWyZ+r11prVaPbYHNBbD2Kja+aR2oqp8WPPgE=
Subject key identifier:   50:F6:56:5F:A6:46:5C:AD:05:CC:04:26:85:29:6E:00:56:24:71:B8
Certificate issuer:       /CN=71227233A4C9097DDA2442755C381DEA6E3523C2
Certificate serial:       5628C1C4BE512E14A2A804C3630BDAC653028C0E
Authority key identifier: 71:22:72:33:A4:C9:09:7D:DA:24:42:75:5C:38:1D:EA:6E:35:23:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71227233A4C9097DDA2442755C381DEA6E3523C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/323830343a3762383a3a2f33322d3332203d3e20323632333135.roa
Signing time:             Wed 17 May 2023 14:23:53 +0000
ROA not before:           Wed 17 May 2023 14:18:53 +0000
ROA not after:            Wed 15 May 2024 14:23:53 +0000
asID:                     262315
IP address blocks:        2804:7b8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:28:c1:c4:be:51:2e:14:a2:a8:04:c3:63:0b:da:c6:53:02:8c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71227233A4C9097DDA2442755C381DEA6E3523C2
        Validity
            Not Before: May 17 14:18:53 2023 GMT
            Not After : May 15 14:23:53 2024 GMT
        Subject: CN=50F6565FA6465CAD05CC042685296E00562471B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:e1:f8:5e:d3:87:b6:91:13:9a:cb:3a:1e:
                    5a:00:b6:f6:bb:23:d2:94:d4:f9:ca:b7:cf:e6:b4:
                    1a:b5:d9:23:11:ad:57:37:1d:12:76:f0:1c:0c:1d:
                    0f:58:9d:e8:58:1d:ef:50:04:98:b3:47:11:db:bd:
                    e1:99:42:9d:d2:52:46:30:a2:69:0f:59:d4:47:9f:
                    17:8d:0d:a3:42:41:b5:a1:5c:3d:9b:ac:06:1c:95:
                    ae:a2:8b:ec:8d:dd:1a:96:23:f4:81:59:d2:41:a0:
                    fc:48:84:90:b4:05:6b:2f:f2:85:ac:ef:b7:48:da:
                    c1:95:46:b4:d3:b3:78:e2:54:0b:83:7d:c5:d0:70:
                    1e:10:ed:70:dc:c7:04:ca:fe:37:84:d5:a5:e0:ab:
                    46:25:ef:71:b8:6f:d9:79:6e:ca:0b:e1:8f:cc:e8:
                    9b:ad:6f:6d:48:7c:9b:11:77:b2:cd:dc:7f:2a:d2:
                    1b:8b:b1:67:9d:31:f2:bd:62:de:56:76:8d:b3:68:
                    6b:12:ce:20:e6:dd:f0:17:a8:89:c6:d2:92:fd:ef:
                    d6:e8:df:f7:84:58:a5:3e:f1:53:17:5f:4f:ad:89:
                    20:28:c2:ac:0a:30:e5:dc:ec:87:18:21:c5:f5:0e:
                    8c:11:9c:4d:4e:d3:73:bf:b5:b5:67:4d:be:5d:4e:
                    2f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F6:56:5F:A6:46:5C:AD:05:CC:04:26:85:29:6E:00:56:24:71:B8
            X509v3 Authority Key Identifier:
                keyid:71:22:72:33:A4:C9:09:7D:DA:24:42:75:5C:38:1D:EA:6E:35:23:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/71227233A4C9097DDA2442755C381DEA6E3523C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71227233A4C9097DDA2442755C381DEA6E3523C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/323830343a3762383a3a2f33322d3332203d3e20323632333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:ab:aa:01:48:84:33:f9:bc:40:6c:84:03:a4:3c:ba:07:da:
         c0:0a:ee:26:e0:d5:7f:db:5d:0f:e4:2b:c7:2f:46:13:51:02:
         f4:8c:a7:d4:a4:73:a5:1e:5a:d1:62:26:f2:62:2c:db:cf:53:
         82:02:e6:43:6b:84:a0:0f:b7:d4:37:aa:17:8e:a1:d9:58:42:
         ca:0e:25:83:a2:e8:a1:92:87:ce:dd:fa:d6:66:0d:64:a0:ae:
         af:13:9b:61:d2:e6:0a:d6:c2:9c:2b:b5:a3:2e:ee:da:f6:fa:
         68:58:9f:60:b7:d2:76:0c:66:50:ff:7f:9c:35:cc:a6:a8:5d:
         89:22:84:aa:4c:71:bd:a9:2f:6b:ce:98:46:47:2e:02:ef:51:
         9c:75:b5:4d:cd:aa:17:5c:fc:4b:fd:f3:36:84:bd:4b:fe:00:
         c7:db:a4:e9:37:08:78:f9:aa:31:b0:d6:c8:a3:a5:d6:16:06:
         e6:b0:c2:8b:3a:f0:be:60:1b:85:ad:95:fc:a0:25:11:1f:40:
         ae:9f:11:89:13:02:03:0d:69:15:0b:30:83:9d:ca:f9:59:45:
         c9:4c:1d:20:c2:ca:41:0e:15:f5:2a:66:4d:2a:a8:b1:e8:4a:
         79:5e:0f:d6:64:c9:39:a6:b8:fb:25:a7:99:0f:37:21:50:6e:
         0d:61:de:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----