Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/323830343a313434303a3a2f33322d3332203d3e20323633333231.roa
File:                     323830343a313434303a3a2f33322d3332203d3e20323633333231.roa (raw, json)
Hash identifier:          wqbuKwuRh7seVmSkDnJ1lSdxJVaZJfDB5J9PyKaY6sU=
Subject key identifier:   D6:39:B8:81:05:46:2A:48:29:7F:CB:51:C9:54:80:21:47:19:B7:A3
Certificate issuer:       /CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
Certificate serial:       71591FD535C231B2ED729A5FDB16CB91D1556B73
Authority key identifier: D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/323830343a313434303a3a2f33322d3332203d3e20323633333231.roa
Signing time:             Thu 20 Jul 2023 12:43:12 +0000
ROA not before:           Thu 20 Jul 2023 12:38:12 +0000
ROA not after:            Thu 18 Jul 2024 12:43:12 +0000
asID:                     263321
IP address blocks:        2804:1440::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:59:1f:d5:35:c2:31:b2:ed:72:9a:5f:db:16:cb:91:d1:55:6b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
        Validity
            Not Before: Jul 20 12:38:12 2023 GMT
            Not After : Jul 18 12:43:12 2024 GMT
        Subject: CN=D639B88105462A48297FCB51C95480214719B7A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:aa:e2:22:67:a3:fb:31:85:d8:b5:ad:9c:
                    13:8f:64:15:08:5f:8d:16:fb:6a:5c:66:5d:32:fb:
                    2e:bb:77:84:14:b1:8f:0b:fd:53:22:3a:0d:dd:e6:
                    a7:4d:ba:eb:fe:8a:f5:da:51:ec:a1:ba:0d:00:e7:
                    07:c2:11:f1:ca:a8:bf:91:b0:31:19:71:bc:6d:db:
                    be:e8:ce:89:d4:16:3a:d2:da:92:78:43:71:14:7a:
                    b8:2a:6e:d9:2b:f8:59:70:54:c1:0b:bf:2a:45:d8:
                    43:da:c9:df:ae:a7:84:09:52:6e:6c:05:64:6c:a7:
                    06:e1:c2:d3:eb:39:68:d9:76:9f:55:68:aa:e1:ae:
                    55:c8:a1:b7:c7:5b:9c:f5:ea:fb:ee:95:90:6b:70:
                    88:58:87:ca:b1:8a:a5:81:65:40:ca:58:6e:7a:98:
                    23:fc:01:30:73:9c:7c:11:03:98:20:1c:be:c8:1a:
                    81:68:ab:c4:d0:c5:6c:41:db:1e:43:5c:52:6c:fb:
                    1e:57:f8:9b:b4:68:16:53:13:56:1a:5f:28:66:84:
                    01:38:60:8e:28:3a:48:b1:d3:44:b5:20:6a:3e:a7:
                    1d:83:20:1d:16:ee:c0:4b:73:87:95:bd:30:7d:d4:
                    a6:83:e6:d6:e8:f1:73:ab:98:3a:60:5e:59:4f:b7:
                    49:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:39:B8:81:05:46:2A:48:29:7F:CB:51:C9:54:80:21:47:19:B7:A3
            X509v3 Authority Key Identifier:
                keyid:D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/323830343a313434303a3a2f33322d3332203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:3d:1a:45:f7:18:17:52:28:94:9b:a4:34:08:59:1c:f7:fd:
         fb:b7:22:e6:c3:b1:4c:4f:e5:d9:cc:c4:00:a9:aa:3a:2a:07:
         c2:bb:bb:04:59:4f:6f:e3:34:16:14:5f:5c:96:f7:4c:d2:41:
         1b:99:bc:b2:e6:07:97:81:e5:78:bb:1e:51:86:e4:6c:79:1f:
         0e:73:90:77:ac:95:bf:52:e6:f3:3b:60:98:05:66:83:90:9e:
         6a:e8:e5:e0:97:5a:0f:d0:78:34:b0:31:ac:7c:6f:9e:55:5a:
         39:57:b5:2b:f5:0d:04:a7:e6:d9:76:e6:a0:7b:3c:af:c7:ae:
         11:c4:bc:db:34:3f:3b:18:38:f1:c1:69:d1:06:3e:e3:89:7c:
         fd:af:88:20:38:ac:65:ff:5c:cc:69:b7:f3:a7:12:90:bb:26:
         2b:07:7a:b9:51:6d:04:c0:53:86:74:5f:c3:55:a2:f1:a4:6a:
         db:dd:da:52:ef:53:26:5e:8d:b7:7c:ca:fa:e8:28:e3:75:43:
         cc:a0:07:21:33:29:db:d2:56:c1:84:0f:91:77:2d:07:38:39:
         38:a9:4f:b0:f6:fb:ea:f2:bf:01:91:01:ed:23:27:36:19:64:
         9d:f8:de:d8:aa:9a:a3:df:7a:e2:27:f9:93:f4:3d:e4:ee:a4:
         df:26:03:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----