Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/323830343a313434303a3a2f33322d3334203d3e20323633333231.roa
File:                     323830343a313434303a3a2f33322d3334203d3e20323633333231.roa (raw, json)
Hash identifier:          lxzulD/cJ0vj7TBlEAHTX0/av5qI3Pw+xNRcFRdaFaE=
Subject key identifier:   CF:5D:CF:9A:B4:F8:7D:62:AF:47:81:A2:07:A5:8C:B4:1A:C6:55:BC
Certificate issuer:       /CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
Certificate serial:       73466E06B8DB733F2E9C9931DDE2DBD51B38EF2E
Authority key identifier: D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/323830343a313434303a3a2f33322d3334203d3e20323633333231.roa
Signing time:             Wed 13 Sep 2023 13:18:14 +0000
ROA not before:           Wed 13 Sep 2023 13:13:14 +0000
ROA not after:            Wed 11 Sep 2024 13:18:14 +0000
asID:                     263321
IP address blocks:        2804:1440::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:46:6e:06:b8:db:73:3f:2e:9c:99:31:dd:e2:db:d5:1b:38:ef:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
        Validity
            Not Before: Sep 13 13:13:14 2023 GMT
            Not After : Sep 11 13:18:14 2024 GMT
        Subject: CN=CF5DCF9AB4F87D62AF4781A207A58CB41AC655BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d4:09:cb:06:8f:18:00:40:e4:c4:5d:e1:08:
                    b1:ca:04:92:b2:18:3a:8f:6b:ef:45:14:39:05:a8:
                    6b:f0:07:96:84:f8:c4:a9:db:b5:08:d8:89:11:cf:
                    eb:12:e3:04:d2:e0:fa:20:55:13:92:d0:2f:36:ed:
                    1f:6f:66:d7:ae:e9:35:c5:50:f8:7a:e9:7c:7b:d4:
                    69:13:08:dc:b5:8c:db:51:b0:8e:da:d3:69:40:14:
                    24:46:6e:12:d3:a2:39:57:46:00:b5:a1:62:b1:9b:
                    ee:b3:61:1a:2b:2b:30:7a:75:e8:f9:e8:9c:79:c9:
                    4e:d8:87:a4:60:0c:a6:63:f6:2d:6e:33:b3:35:e5:
                    44:fe:8b:2d:a6:79:a5:13:ee:36:a9:cc:7d:c5:07:
                    1f:70:11:cf:b7:43:f4:4b:53:88:8b:05:1b:d7:00:
                    ba:52:93:b5:00:47:bc:72:e4:38:41:b9:89:96:55:
                    53:c2:ec:14:97:08:de:39:63:bb:72:3e:88:8e:69:
                    6f:5f:50:6c:26:8a:61:4a:54:42:55:6a:ba:01:9b:
                    8e:53:f7:9b:d5:92:bc:1f:45:2f:bc:1a:48:61:a8:
                    cb:69:e6:b4:8f:cb:97:29:ef:1b:ff:ca:e9:8a:b4:
                    5e:9f:4f:cc:aa:84:53:9e:ab:4d:de:54:74:1a:14:
                    9a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5D:CF:9A:B4:F8:7D:62:AF:47:81:A2:07:A5:8C:B4:1A:C6:55:BC
            X509v3 Authority Key Identifier:
                keyid:D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/323830343a313434303a3a2f33322d3334203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:40:cb:6a:a0:0d:e2:23:1e:83:49:72:0e:bc:49:e8:49:86:
         23:42:eb:c3:15:04:ca:39:06:b5:c2:04:ee:dd:d7:a6:e7:4d:
         f9:4c:8a:71:60:c1:3d:89:17:06:0f:bc:8f:8f:8f:8e:ef:e8:
         e2:2c:08:4b:d1:73:1c:09:62:2f:d3:28:c9:73:0b:bf:7c:98:
         d8:0f:97:bc:09:a0:91:92:e1:a7:49:d4:f8:18:a0:69:3d:c7:
         b4:6b:56:14:8b:3a:ab:07:76:2b:d0:a3:1a:3b:2a:0d:b6:78:
         a5:4f:72:51:99:c8:5b:a9:82:fd:18:f0:36:20:87:b8:3d:2d:
         92:94:54:5a:c8:85:cb:64:bc:aa:1a:a0:2f:fb:20:b4:57:0f:
         41:3d:21:72:73:77:24:09:df:36:48:fe:95:b1:21:5f:9a:a9:
         20:2e:af:66:e8:94:92:c5:51:a9:cd:0b:0d:68:ad:8b:55:60:
         09:d9:4b:0f:70:f8:3e:21:cb:7f:cf:24:bf:b5:7d:7c:1f:e0:
         b3:e4:ec:f8:93:9f:68:aa:61:0e:39:21:b4:70:2d:d9:11:04:
         6b:ba:b2:c2:fd:c4:7d:a9:a6:be:18:93:b9:68:d8:6e:03:25:
         da:da:df:07:50:fb:14:e9:f8:e6:e3:fd:40:46:2e:ba:b3:be:
         9c:37:4b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----