Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/323830343a326637633a3a2f33322d313238203d3e20323634383934.roa
File:                     323830343a326637633a3a2f33322d313238203d3e20323634383934.roa (raw, json)
Hash identifier:          KzeN5PRVQ15T9WV+EjoxwiHzVuzTxb21lXsmTXuPPSs=
Subject key identifier:   95:7C:52:F9:78:DC:BD:84:FC:72:FD:EF:9B:EC:6F:AD:5B:75:B1:2F
Certificate issuer:       /CN=8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53
Certificate serial:       280C39312322C7AC899F09D9AC67E803653D9D1F
Authority key identifier: 8B:36:FE:55:A9:D7:FA:60:24:3F:74:A2:0F:15:ED:B4:DC:E0:4B:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/323830343a326637633a3a2f33322d313238203d3e20323634383934.roa
Signing time:             Wed 05 Apr 2023 20:23:02 +0000
ROA not before:           Wed 05 Apr 2023 20:18:02 +0000
ROA not after:            Wed 03 Apr 2024 20:23:02 +0000
asID:                     264894
IP address blocks:        2804:2f7c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0c:39:31:23:22:c7:ac:89:9f:09:d9:ac:67:e8:03:65:3d:9d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53
        Validity
            Not Before: Apr  5 20:18:02 2023 GMT
            Not After : Apr  3 20:23:02 2024 GMT
        Subject: CN=957C52F978DCBD84FC72FDEF9BEC6FAD5B75B12F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:db:ca:f0:94:bd:a3:37:74:03:a8:05:17:
                    64:d8:ca:71:1b:e1:33:24:dc:e3:d7:10:53:86:4c:
                    a4:94:65:7a:19:ec:ed:16:22:a6:02:1c:8d:b2:fe:
                    06:ce:d0:00:75:f1:8c:23:8b:f1:32:24:52:4f:18:
                    02:21:0c:9d:dc:7b:b1:c6:d0:ff:f1:23:45:4e:61:
                    8f:f2:76:b7:f1:90:84:da:0c:68:9a:18:9e:ac:01:
                    ce:bf:3f:60:2c:fc:16:c9:03:1a:66:c5:ed:6d:82:
                    99:61:66:f5:89:97:bd:1e:15:e2:b0:a5:18:a3:fe:
                    77:73:cf:be:13:c2:0b:e0:05:ab:72:94:da:0a:83:
                    28:70:d2:37:cf:63:97:28:ff:ff:a9:63:01:de:19:
                    ce:81:96:32:6e:a5:07:95:50:71:0d:6a:d4:b3:e2:
                    f4:d5:9f:13:f1:6f:8e:5d:5a:f0:57:4c:f0:41:17:
                    1b:d8:f6:b6:ee:f3:e9:11:44:2d:6b:71:ec:b2:ee:
                    60:b7:ed:48:a1:7f:af:20:29:6d:0d:fc:fc:09:66:
                    e1:df:d2:a7:9d:e9:33:84:fd:dd:c6:64:5f:d4:0b:
                    ca:63:28:82:24:8a:1e:91:4d:8c:3a:00:37:3e:22:
                    0b:8d:c5:02:aa:a0:1d:57:cd:f2:df:98:41:fe:2d:
                    b6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7C:52:F9:78:DC:BD:84:FC:72:FD:EF:9B:EC:6F:AD:5B:75:B1:2F
            X509v3 Authority Key Identifier:
                keyid:8B:36:FE:55:A9:D7:FA:60:24:3F:74:A2:0F:15:ED:B4:DC:E0:4B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/323830343a326637633a3a2f33322d313238203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:45:09:49:14:d9:43:b6:20:c3:8f:55:63:a2:8f:d3:9d:cd:
         ce:ef:54:1b:4e:07:88:b9:4a:5a:11:c3:df:73:92:6a:18:91:
         b9:2a:5d:e3:df:3b:a5:7e:a5:e8:1c:30:b5:32:da:59:31:dc:
         5e:19:19:c1:4f:f6:74:e0:bc:aa:58:d4:2b:b2:b3:e7:a0:81:
         ba:54:86:b2:56:75:61:31:c5:53:c1:a7:5a:15:c7:c4:b2:44:
         60:ef:76:86:0f:10:00:d7:cd:24:4a:91:a0:da:20:6b:f6:95:
         55:1f:da:b3:fe:fc:c1:43:be:cb:4a:82:b1:29:f9:36:3d:b2:
         01:90:c6:04:73:71:99:5c:e9:17:78:f6:c7:54:fa:a6:3e:38:
         c5:df:c5:a0:fe:d1:e9:06:9b:f3:14:58:c5:62:df:f7:96:f3:
         db:81:d1:e7:98:f5:69:48:0f:5d:23:6a:38:5b:5d:8e:7b:ae:
         87:b6:74:ce:63:9c:a6:c7:89:d6:80:69:0e:e5:64:ca:d0:25:
         97:ba:de:61:11:bc:5a:25:4f:ff:14:a8:fa:18:7f:57:39:bd:
         7c:50:5f:90:15:84:43:a4:84:31:b4:82:12:c3:fb:20:86:81:
         d0:68:0b:dd:23:e5:de:a0:b0:75:88:6d:bd:79:30:77:71:6c:
         e8:4c:25:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----