Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/323830343a373065633a3a2f33322d3334203d3e20323730373536.roa
File:                     323830343a373065633a3a2f33322d3334203d3e20323730373536.roa (raw, json)
Hash identifier:          hSZxshmdbcmOvdqmW1X0I44VADY+ZrMIfXsAyp/xoRA=
Subject key identifier:   05:58:B3:F9:81:E6:A3:E0:15:C3:5C:45:46:68:75:1A:96:7D:F4:79
Certificate issuer:       /CN=1F2E84748355FBB127446FF91925D695C155F607
Certificate serial:       39704BD056A96D6B549E0B19D3B2A273F4B82138
Authority key identifier: 1F:2E:84:74:83:55:FB:B1:27:44:6F:F9:19:25:D6:95:C1:55:F6:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2E84748355FBB127446FF91925D695C155F607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/323830343a373065633a3a2f33322d3334203d3e20323730373536.roa
Signing time:             Tue 30 May 2023 19:08:47 +0000
ROA not before:           Tue 30 May 2023 19:03:47 +0000
ROA not after:            Tue 28 May 2024 19:08:47 +0000
asID:                     270756
IP address blocks:        2804:70ec::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:70:4b:d0:56:a9:6d:6b:54:9e:0b:19:d3:b2:a2:73:f4:b8:21:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F2E84748355FBB127446FF91925D695C155F607
        Validity
            Not Before: May 30 19:03:47 2023 GMT
            Not After : May 28 19:08:47 2024 GMT
        Subject: CN=0558B3F981E6A3E015C35C454668751A967DF479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:16:17:c1:51:36:fb:95:88:3f:ae:61:7e:d8:
                    61:64:08:07:57:69:30:88:93:73:a8:70:a9:e5:32:
                    62:f2:1a:a5:d7:ac:50:e9:8d:3a:bc:4a:ac:41:a2:
                    8e:fe:cd:9d:a9:da:c2:ad:99:03:08:87:eb:fb:82:
                    f7:23:db:65:ab:99:dd:b9:f1:e2:49:a2:52:b5:95:
                    9c:88:99:12:e3:5e:e0:dd:bb:9a:84:c6:0a:91:ac:
                    b4:2f:13:7a:ed:75:4b:48:08:45:b2:32:8b:33:6e:
                    0c:9e:f3:1c:c1:5b:b8:08:71:2b:d2:ff:89:0b:bd:
                    5d:67:5b:09:3e:1c:fa:54:d3:70:49:6f:b5:e4:0d:
                    83:62:62:40:81:d7:31:d7:db:bb:1b:c4:7e:fa:be:
                    d8:ab:a5:7b:d8:c2:f6:93:e5:71:30:af:c1:e8:1c:
                    b6:be:e8:f6:95:7b:45:87:a6:85:49:88:6f:e9:32:
                    85:d2:b3:76:5a:97:80:ad:3a:e1:bf:a6:d6:85:fd:
                    59:69:dc:36:31:af:b6:5d:4a:17:18:c8:b6:aa:f7:
                    f2:8d:03:4a:7b:df:f1:86:71:fc:b6:8e:75:90:83:
                    4c:fa:14:ed:a3:19:69:25:f9:85:a8:1f:77:c0:89:
                    80:60:62:4d:9b:32:62:83:d0:3d:8a:30:63:85:48:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:58:B3:F9:81:E6:A3:E0:15:C3:5C:45:46:68:75:1A:96:7D:F4:79
            X509v3 Authority Key Identifier:
                keyid:1F:2E:84:74:83:55:FB:B1:27:44:6F:F9:19:25:D6:95:C1:55:F6:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/1F2E84748355FBB127446FF91925D695C155F607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2E84748355FBB127446FF91925D695C155F607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/323830343a373065633a3a2f33322d3334203d3e20323730373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:75:98:39:1a:68:b6:d1:c7:40:25:10:59:19:5f:ed:57:5f:
         8f:39:7c:4b:aa:99:68:9a:49:bf:42:2e:c2:64:01:32:79:61:
         46:dc:f4:af:26:28:3a:fa:7f:10:5b:43:af:92:5b:79:7f:98:
         fc:fc:36:0f:ee:7e:fc:9a:eb:30:b8:eb:06:cd:60:49:ab:f9:
         51:ce:1e:c9:95:69:90:85:b1:6b:0d:5e:44:40:12:79:1f:27:
         dd:22:41:1f:09:44:75:e4:35:41:dc:4b:29:0c:e8:6b:8f:5d:
         9f:22:89:f3:71:1a:af:fc:7c:6d:c7:0c:6e:a2:8c:2e:25:75:
         9f:bc:a5:a2:5c:a2:64:45:25:60:ad:cc:b9:80:94:51:09:08:
         92:f4:03:c9:45:a3:14:e2:6c:7a:fc:bb:98:3d:16:64:f2:1f:
         88:8b:04:0d:3b:be:c4:5a:8c:6f:07:cf:5b:17:14:76:22:a6:
         2c:3d:c3:ce:08:ad:a9:d4:d2:76:15:6a:20:a7:98:a8:bd:9d:
         b3:8c:0d:86:cc:ca:eb:ae:71:c6:90:f3:27:47:fe:70:d0:bc:
         11:7a:b2:9e:5f:24:5f:06:0b:65:15:12:03:29:58:9e:7b:08:
         13:41:6e:5f:c9:1e:7a:48:0b:b3:f9:47:17:8c:8a:b9:63:8a:
         20:69:8e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----