Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/323830343a373036383a3a2f33322d3336203d3e20323730373235.roa
File:                     323830343a373036383a3a2f33322d3336203d3e20323730373235.roa (raw, json)
Hash identifier:          C2Q5nHK8qfkoP2WiMy/GO3wMnOAf2d/dv0kFfOUGvmI=
Subject key identifier:   D9:35:57:25:55:42:48:0A:F2:2D:F5:60:88:B6:55:8E:B1:54:9D:44
Certificate issuer:       /CN=580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE
Certificate serial:       33C7C74959F77820B4E7DACE3370A12D4B7AE44A
Authority key identifier: 58:0A:F0:46:1B:33:6C:9A:8C:2D:F4:7A:3B:A8:1F:DE:F5:4D:80:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/323830343a373036383a3a2f33322d3336203d3e20323730373235.roa
Signing time:             Tue 29 Aug 2023 18:00:00 +0000
ROA not before:           Tue 29 Aug 2023 17:55:00 +0000
ROA not after:            Tue 27 Aug 2024 18:00:00 +0000
asID:                     270725
IP address blocks:        2804:7068::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c7:c7:49:59:f7:78:20:b4:e7:da:ce:33:70:a1:2d:4b:7a:e4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE
        Validity
            Not Before: Aug 29 17:55:00 2023 GMT
            Not After : Aug 27 18:00:00 2024 GMT
        Subject: CN=D93557255542480AF22DF56088B6558EB1549D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0d:ac:3c:e0:1e:19:91:d9:83:a1:8d:2c:28:
                    f8:16:d3:e4:31:2b:1c:85:60:11:f3:18:7f:3a:66:
                    c5:16:a5:cd:74:29:7a:0b:8e:14:b5:7f:61:8b:aa:
                    9b:a1:ce:1d:23:03:57:b5:62:01:8a:cc:45:05:c4:
                    c3:dd:8e:3f:cd:c3:fd:56:99:fb:f3:11:60:85:ab:
                    2e:6e:8d:15:8c:eb:56:f4:c2:2d:d6:65:6e:0d:1a:
                    56:f1:41:83:7f:74:61:0a:b1:75:b5:7c:ab:6c:ca:
                    ac:d5:fc:cc:3a:7d:d2:45:35:04:42:93:35:a5:35:
                    83:89:e2:23:19:ae:76:84:26:8a:eb:2d:6c:da:11:
                    c8:3c:96:06:8e:67:87:63:53:08:15:cf:db:dc:87:
                    49:4d:73:15:c2:a8:57:fe:8a:82:a9:27:02:d0:fe:
                    86:01:03:cb:94:93:e1:38:3e:f6:c1:45:a7:b7:53:
                    c5:c7:69:ed:63:1c:dc:09:65:6a:38:c0:45:8e:40:
                    8d:50:81:5b:f2:6d:11:2c:58:63:03:73:7c:f5:06:
                    99:30:2e:05:b1:9c:7c:6b:46:81:d5:c2:4a:78:e1:
                    23:6b:04:d0:6f:ad:8b:1d:1d:40:8c:68:7b:3d:34:
                    05:57:4c:61:53:7d:5f:11:bf:27:0c:50:a4:31:ac:
                    c1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:35:57:25:55:42:48:0A:F2:2D:F5:60:88:B6:55:8E:B1:54:9D:44
            X509v3 Authority Key Identifier:
                keyid:58:0A:F0:46:1B:33:6C:9A:8C:2D:F4:7A:3B:A8:1F:DE:F5:4D:80:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/323830343a373036383a3a2f33322d3336203d3e20323730373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7068::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:29:fa:89:dc:0c:f4:ee:fb:2c:99:2d:a9:37:d2:52:ff:64:
         c8:5d:53:99:3e:8d:a1:53:4c:7b:05:53:9e:e7:51:32:8c:16:
         d9:a6:f7:e5:4b:9d:b3:52:de:d4:31:07:4d:77:d7:be:0d:de:
         83:74:68:21:fd:78:c9:39:f9:51:1d:46:9f:ce:ee:2d:c3:09:
         1b:15:10:69:ea:d6:fa:63:ec:0d:3a:93:e1:cf:a4:a5:0a:0c:
         b7:fd:98:17:19:42:cc:6c:6a:e2:95:8a:c4:49:64:88:43:b6:
         4d:c4:91:86:8c:59:14:09:df:15:f2:72:75:97:3f:f8:27:69:
         be:8b:52:cf:fd:6e:61:df:19:e1:66:cc:df:3c:54:98:c6:a0:
         54:ce:15:f4:0a:00:70:83:b5:67:05:2b:dd:57:19:b5:d1:09:
         81:c4:87:91:c8:c1:9c:01:c7:c7:ad:af:44:da:c0:a2:82:47:
         16:33:d3:49:b7:81:f0:3a:ee:a7:a9:24:28:39:14:ed:38:7e:
         32:cc:df:06:c1:f8:fc:9b:e3:f9:e4:a1:e0:e5:81:55:20:69:
         30:ae:44:49:8e:7e:01:9d:90:51:c4:89:19:58:a8:9c:b9:60:
         60:d5:eb:57:09:3c:ea:de:62:96:49:5b:15:5d:2f:bf:3e:cb:
         94:5a:1d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----