Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a3a2f33322d3334203d3e20323637323134.roa
File:                     323830343a346130383a3a2f33322d3334203d3e20323637323134.roa (raw, json)
Hash identifier:          RdZElfuqDKRnLbtJHjwspHraSkEyYZEbAmsdUtgN9bY=
Subject key identifier:   55:B6:0D:31:2E:53:D8:4E:06:4F:1A:5E:0C:21:57:CE:64:0A:E5:10
Certificate issuer:       /CN=A56E8A92F7DB96FA288D623B1F7EDE10694759CE
Certificate serial:       6F23C64BF6962ABB272A23DE86F40811FE808530
Authority key identifier: A5:6E:8A:92:F7:DB:96:FA:28:8D:62:3B:1F:7E:DE:10:69:47:59:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a3a2f33322d3334203d3e20323637323134.roa
Signing time:             Thu 20 Jul 2023 15:08:21 +0000
ROA not before:           Thu 20 Jul 2023 15:03:21 +0000
ROA not after:            Thu 18 Jul 2024 15:08:21 +0000
asID:                     267214
IP address blocks:        2804:4a08::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:23:c6:4b:f6:96:2a:bb:27:2a:23:de:86:f4:08:11:fe:80:85:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56E8A92F7DB96FA288D623B1F7EDE10694759CE
        Validity
            Not Before: Jul 20 15:03:21 2023 GMT
            Not After : Jul 18 15:08:21 2024 GMT
        Subject: CN=55B60D312E53D84E064F1A5E0C2157CE640AE510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:81:cf:31:eb:0a:8a:9b:a1:07:7d:12:dd:
                    23:be:c4:e5:b0:b1:4b:e6:47:a8:1c:e3:26:04:ae:
                    7c:5b:b8:a0:10:56:20:9d:d4:5c:2b:b2:a0:bc:20:
                    2a:95:9f:54:f9:72:0c:de:f6:22:9e:0d:27:42:5c:
                    74:db:76:4b:64:23:83:36:02:35:2a:33:26:9b:d3:
                    fa:e8:76:61:66:24:41:b1:7c:c0:83:9d:ac:8a:7e:
                    80:95:1b:4d:36:c4:a8:ab:b4:d4:c5:ee:be:a2:0d:
                    dd:6e:d0:bf:5f:eb:76:a5:67:9c:db:47:5b:06:62:
                    12:09:56:7d:bb:1c:8c:aa:7a:4b:0a:dd:7a:78:89:
                    4a:24:d2:4f:aa:98:58:f3:a6:43:cf:a1:2d:08:27:
                    5a:44:f7:8a:f2:48:57:f1:4a:d5:d8:ef:f4:78:6d:
                    22:1c:86:f4:05:ae:1e:34:8e:df:b0:53:85:0e:0d:
                    f7:fd:70:64:87:e7:ea:55:83:8a:a5:55:10:ec:c5:
                    ed:e5:f2:00:2f:85:ac:cd:cb:f8:cb:ad:16:64:23:
                    34:e6:ac:2d:7f:fa:3b:24:9b:50:e7:e9:a4:9b:18:
                    77:eb:a0:b4:5d:4c:80:2e:65:40:f8:89:85:2b:fd:
                    82:73:ae:5a:af:94:2c:33:80:a0:ca:3d:cd:0a:b2:
                    52:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B6:0D:31:2E:53:D8:4E:06:4F:1A:5E:0C:21:57:CE:64:0A:E5:10
            X509v3 Authority Key Identifier:
                keyid:A5:6E:8A:92:F7:DB:96:FA:28:8D:62:3B:1F:7E:DE:10:69:47:59:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a3a2f33322d3334203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a08::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:53:56:21:96:87:1c:a6:f2:72:ae:97:fe:ce:f7:8a:49:
         39:43:3b:5e:f8:7c:30:31:82:5f:68:4a:58:f3:77:d7:6e:e2:
         36:27:1d:0c:b6:77:a3:21:dc:0b:cf:bb:8e:63:bd:52:0b:27:
         cd:5a:ba:75:87:7d:1a:ef:31:b9:05:e2:f5:59:55:40:4d:12:
         5b:5e:5e:e9:3d:2e:73:c9:97:3f:2d:86:30:30:a8:87:40:af:
         9c:b2:a7:8f:23:d6:73:6f:87:64:30:e7:31:b1:e9:34:ca:1b:
         aa:80:b2:df:cc:97:e8:fb:64:e5:6c:f4:18:c6:ca:e8:38:08:
         41:c7:0a:4b:fa:0d:40:7a:9d:4c:77:1f:f2:95:c6:d1:f8:97:
         89:58:43:24:a8:2b:0d:ea:87:c9:a4:80:7a:5b:39:44:c5:ee:
         35:26:dd:25:ba:9b:52:61:c7:40:f1:9f:53:80:d4:91:c1:28:
         76:96:62:dd:01:72:14:59:58:15:c8:86:9e:f5:59:38:92:21:
         3e:90:15:e2:55:4e:bc:2f:66:e6:d5:17:39:65:e0:b8:1b:54:
         76:9c:1d:23:66:c1:b5:3d:70:67:b7:14:a7:36:19:c1:14:4d:
         a7:a4:61:53:a6:3a:70:29:ae:47:b3:c2:0b:09:56:9c:94:ae:
         5b:75:a1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----