Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/323830343a6566383a3a2f33322d313238203d3e20323632333032.roa
File:                     323830343a6566383a3a2f33322d313238203d3e20323632333032.roa (raw, json)
Hash identifier:          UqLEDS9rc44ayA280wtto3/3l+ED8VHf3koI1gjkUpc=
Subject key identifier:   52:29:63:46:30:26:16:3F:2E:F9:70:17:65:EE:16:E2:71:CF:A8:58
Certificate issuer:       /CN=F54AF77B19B9B7EB0E281E779779F2742EABB361
Certificate serial:       50E860AB9B07EFDADCF8E19FA8DA04CE049D682D
Authority key identifier: F5:4A:F7:7B:19:B9:B7:EB:0E:28:1E:77:97:79:F2:74:2E:AB:B3:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F54AF77B19B9B7EB0E281E779779F2742EABB361.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/323830343a6566383a3a2f33322d313238203d3e20323632333032.roa
Signing time:             Mon 17 Jul 2023 12:41:01 +0000
ROA not before:           Mon 17 Jul 2023 12:36:01 +0000
ROA not after:            Mon 15 Jul 2024 12:41:01 +0000
asID:                     262302
IP address blocks:        2804:ef8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e8:60:ab:9b:07:ef:da:dc:f8:e1:9f:a8:da:04:ce:04:9d:68:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F54AF77B19B9B7EB0E281E779779F2742EABB361
        Validity
            Not Before: Jul 17 12:36:01 2023 GMT
            Not After : Jul 15 12:41:01 2024 GMT
        Subject: CN=522963463026163F2EF9701765EE16E271CFA858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:86:e4:b3:1f:f5:e1:bf:23:be:c0:00:d1:
                    c8:90:be:79:90:61:9c:b7:4a:88:b1:d5:58:c4:f1:
                    b0:a8:7f:80:38:a0:6c:af:4a:e5:64:33:25:ff:30:
                    61:aa:da:f4:b3:04:60:f4:a6:98:df:2a:ab:d9:7e:
                    5b:9b:70:09:8b:d4:d5:85:17:47:5e:6d:f5:70:eb:
                    94:f7:c6:f7:84:0c:3c:04:e4:03:64:6b:52:15:85:
                    64:30:28:14:e1:c0:cb:b0:03:7d:23:ea:82:22:f6:
                    98:f4:e6:9e:2a:44:1e:e5:77:23:f5:28:4e:82:b1:
                    a2:70:01:13:5c:b5:5a:0a:8b:2f:31:56:9e:46:ad:
                    11:0d:ae:c8:4a:37:b9:42:00:b4:a0:ea:0b:e4:44:
                    fe:8a:b0:47:0e:6c:39:6b:1f:59:c5:3d:c8:ae:f7:
                    1f:e6:a1:39:89:26:c5:32:ce:e3:be:53:8a:4b:ce:
                    73:e3:2f:5a:69:2c:0c:a6:8c:01:72:80:ac:f1:07:
                    a1:74:1e:45:38:b2:c6:44:6f:6a:94:45:23:e6:10:
                    41:1f:99:ca:ab:64:a5:f8:70:7a:38:4e:19:e4:6d:
                    54:bb:fc:eb:6f:1d:ed:f2:46:51:4f:f7:18:83:1b:
                    b2:44:73:41:4e:ef:f0:05:86:51:7f:9e:b3:2d:5c:
                    e1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:29:63:46:30:26:16:3F:2E:F9:70:17:65:EE:16:E2:71:CF:A8:58
            X509v3 Authority Key Identifier:
                keyid:F5:4A:F7:7B:19:B9:B7:EB:0E:28:1E:77:97:79:F2:74:2E:AB:B3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/F54AF77B19B9B7EB0E281E779779F2742EABB361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F54AF77B19B9B7EB0E281E779779F2742EABB361.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/323830343a6566383a3a2f33322d313238203d3e20323632333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ef8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:87:4d:cb:d8:b5:d2:84:eb:ec:0f:6e:28:da:69:ef:1d:fb:
         6f:19:97:44:5f:d9:93:ab:a8:de:bd:4b:28:32:c4:5d:d7:4b:
         31:8c:44:89:a4:e6:50:e9:f4:11:82:aa:ba:8c:52:00:8d:da:
         84:f6:33:7a:47:88:a4:18:bf:44:8c:c9:9d:dd:0d:12:4f:90:
         ff:d1:e1:d6:68:64:08:ad:34:31:cb:a3:2b:c1:c1:23:8c:86:
         f4:7a:26:a2:8f:5e:cb:07:ab:1c:3e:56:e3:3a:ed:4f:b5:f4:
         08:32:f4:5c:77:e8:97:19:24:54:84:f0:d3:9a:6a:a8:b1:2e:
         e6:ba:83:2d:7d:d9:43:63:1a:23:87:0a:4f:91:2b:84:84:59:
         1c:ca:ef:a8:73:5f:60:67:ec:58:38:e4:18:35:dd:61:de:67:
         23:bf:3c:e8:0f:64:a6:3c:45:e7:f1:ef:f2:a6:c4:e9:85:18:
         17:5d:2c:ee:00:40:e8:6e:42:0f:26:8c:8c:ff:04:ab:4c:55:
         94:b2:d8:fb:4d:58:64:d9:55:f1:a8:3d:47:75:ab:8b:2f:e5:
         f8:9e:29:0d:ce:c7:85:21:d1:5c:a5:a2:fc:c6:3d:78:7e:70:
         be:35:db:ef:73:3c:98:e3:eb:77:eb:2a:50:39:47:ca:c0:cd:
         5d:b5:19:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----