Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/0/323830343a346231343a3a2f33322d3336203d3e20323637323832.roa
File:                     323830343a346231343a3a2f33322d3336203d3e20323637323832.roa (raw, json)
Hash identifier:          Pqx72Ud3jGdhUbdP6fP04+kztbYiDXmPS5ZeP/beADw=
Subject key identifier:   BE:78:A4:75:89:39:69:C9:F9:6F:AE:B4:9F:C1:83:34:EE:26:22:E1
Certificate issuer:       /CN=65C0206A38267C30F908CE879778BBE0A73D004C
Certificate serial:       0AD026EA9BD829A9D5BE2944A3C5210205FFDFEE
Authority key identifier: 65:C0:20:6A:38:26:7C:30:F9:08:CE:87:97:78:BB:E0:A7:3D:00:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65C0206A38267C30F908CE879778BBE0A73D004C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/0/323830343a346231343a3a2f33322d3336203d3e20323637323832.roa
Signing time:             Tue 15 Aug 2023 20:00:25 +0000
ROA not before:           Tue 15 Aug 2023 19:55:25 +0000
ROA not after:            Tue 13 Aug 2024 20:00:25 +0000
asID:                     267282
IP address blocks:        2804:4b14::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d0:26:ea:9b:d8:29:a9:d5:be:29:44:a3:c5:21:02:05:ff:df:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65C0206A38267C30F908CE879778BBE0A73D004C
        Validity
            Not Before: Aug 15 19:55:25 2023 GMT
            Not After : Aug 13 20:00:25 2024 GMT
        Subject: CN=BE78A475893969C9F96FAEB49FC18334EE2622E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:35:ca:e5:2f:c1:77:33:4f:ba:86:27:0f:
                    4c:0e:63:1d:f9:d5:d9:bc:ff:87:b1:81:02:cc:b2:
                    b8:42:b6:b0:52:2c:58:91:75:10:2c:c5:55:9d:29:
                    16:61:d2:ca:7d:28:06:f2:ec:91:92:6d:42:6e:4b:
                    d3:a6:4d:02:ee:b5:c4:88:75:a2:03:cf:de:4b:d7:
                    54:73:d4:d4:18:8e:14:b9:46:c1:b5:69:60:d8:9a:
                    8b:13:d2:ef:d2:03:2b:e0:77:bd:7a:c6:28:e2:16:
                    5f:7f:ac:5c:db:44:21:30:e0:05:bb:2d:2d:89:dc:
                    cb:e4:77:55:a2:22:7b:49:b0:63:73:c8:84:17:cd:
                    80:d3:e4:f2:cf:c0:c4:c6:e7:15:b7:fa:4b:a2:a9:
                    8b:60:cb:06:54:9d:fe:56:23:f7:dd:60:17:d9:10:
                    c3:6a:62:2f:6a:d8:5f:90:9f:87:20:bc:3c:68:44:
                    48:7b:f0:c2:18:43:3b:ba:b0:bd:21:c3:2b:be:b9:
                    37:06:15:ee:ef:26:32:f1:e3:76:52:6d:d6:8a:82:
                    44:b2:eb:6e:bd:1f:c0:bd:1a:66:b5:b8:09:5f:7d:
                    21:b3:7c:57:0c:00:b7:47:43:76:2c:50:f3:28:49:
                    85:c2:cc:69:03:9b:5b:9b:5f:1a:5e:0a:4c:b6:99:
                    fc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:78:A4:75:89:39:69:C9:F9:6F:AE:B4:9F:C1:83:34:EE:26:22:E1
            X509v3 Authority Key Identifier:
                keyid:65:C0:20:6A:38:26:7C:30:F9:08:CE:87:97:78:BB:E0:A7:3D:00:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/0/65C0206A38267C30F908CE879778BBE0A73D004C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65C0206A38267C30F908CE879778BBE0A73D004C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/0/323830343a346231343a3a2f33322d3336203d3e20323637323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b14::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:25:58:2f:31:4e:1a:eb:df:42:8a:31:46:05:25:41:6d:d3:
         37:37:9a:0d:6b:e4:d2:fd:c0:d3:83:c8:e0:71:0a:67:77:be:
         e8:fd:f2:d2:7e:69:85:65:63:95:0b:3b:1d:bf:d2:8b:da:8b:
         36:db:b7:d5:4c:9b:15:54:de:80:c1:41:3e:15:c9:f2:ed:59:
         88:32:91:f2:68:36:2d:bb:8b:fb:c9:2e:86:52:f5:83:44:31:
         f2:62:87:b6:bc:fe:5a:60:dd:4a:68:6d:3d:f3:5e:6b:59:70:
         ff:68:44:b4:64:25:16:20:0c:69:f0:02:5d:a9:0e:bb:b1:d5:
         cd:2a:94:37:98:b9:08:de:b9:c4:34:ec:f2:a6:60:94:d9:6a:
         6a:e6:d7:e0:d8:66:8b:5b:4e:14:b3:2f:a1:c4:f7:a5:58:d4:
         43:13:7c:b9:ce:5c:80:de:4e:73:63:75:fc:d2:67:e3:dd:45:
         23:5b:5d:60:3a:29:f6:72:98:a8:61:ca:f2:37:ee:52:a5:6c:
         0a:18:83:d5:6b:f1:bc:39:06:fb:ec:5e:79:d0:00:bc:e2:0a:
         52:24:48:2c:f6:88:b1:be:15:7c:7a:be:c0:16:9a:de:fb:ff:
         0f:ca:5d:12:84:d9:b8:5a:c4:ac:52:c7:2e:92:d7:26:ac:34:
         c1:ae:f3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----