Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/323830343a323236343a3a2f33322d3334203d3e20323634303936.roa
File:                     323830343a323236343a3a2f33322d3334203d3e20323634303936.roa (raw, json)
Hash identifier:          Q+T/fX9t9Dug+kEkdGu1sdLAXT1M+M+UazZ7MG4QSg8=
Subject key identifier:   3F:BD:CE:49:FD:2F:D0:71:DB:FF:08:D5:89:99:94:9D:20:34:11:D4
Certificate issuer:       /CN=BD9063ADADF748EEA58A242F1668AF322657ABD1
Certificate serial:       3431D52FCE61DF1CF98607FE6FBE3D9A103BFE9B
Authority key identifier: BD:90:63:AD:AD:F7:48:EE:A5:8A:24:2F:16:68:AF:32:26:57:AB:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/323830343a323236343a3a2f33322d3334203d3e20323634303936.roa
Signing time:             Fri 28 Jul 2023 20:00:00 +0000
ROA not before:           Fri 28 Jul 2023 19:55:00 +0000
ROA not after:            Fri 26 Jul 2024 20:00:00 +0000
asID:                     264096
IP address blocks:        2804:2264::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:31:d5:2f:ce:61:df:1c:f9:86:07:fe:6f:be:3d:9a:10:3b:fe:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9063ADADF748EEA58A242F1668AF322657ABD1
        Validity
            Not Before: Jul 28 19:55:00 2023 GMT
            Not After : Jul 26 20:00:00 2024 GMT
        Subject: CN=3082010A0282010100E2C0CC7EF40C08AE4D95B02DC6CEE86C8B368E8FB7D0B2BA004E91D1CE992B5050AA4C2459DE5484820800A9478F4CDA7D62C42A11BF965E2BFA52B97286D254DF1C0443E3E39BE5A6D3D192A64C153EB0197536E0580175C92A41C7E2713E4F9A70D248BC2402FFD2CBC683051317CB65214B78B354C48EE68A219F246515060F9645C5EB2BD25E0E3234737CA86D24BE47ED6191787C84B615B395D98CA54680404B4CEEFE83BA3BF1D8825555893F2C88AE510869F66D106C295E2DC895D1F41D1A569A9DC99A2B78A4F64E695D71EF88C20153F0E2AFC048746CC277B05EB23206AF830E463F8CEC356C2B4721491671026E8FF610CB1CA4E4E1C6B849CD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c0:cc:7e:f4:0c:08:ae:4d:95:b0:2d:c6:ce:
                    e8:6c:8b:36:8e:8f:b7:d0:b2:ba:00:4e:91:d1:ce:
                    99:2b:50:50:aa:4c:24:59:de:54:84:82:08:00:a9:
                    47:8f:4c:da:7d:62:c4:2a:11:bf:96:5e:2b:fa:52:
                    b9:72:86:d2:54:df:1c:04:43:e3:e3:9b:e5:a6:d3:
                    d1:92:a6:4c:15:3e:b0:19:75:36:e0:58:01:75:c9:
                    2a:41:c7:e2:71:3e:4f:9a:70:d2:48:bc:24:02:ff:
                    d2:cb:c6:83:05:13:17:cb:65:21:4b:78:b3:54:c4:
                    8e:e6:8a:21:9f:24:65:15:06:0f:96:45:c5:eb:2b:
                    d2:5e:0e:32:34:73:7c:a8:6d:24:be:47:ed:61:91:
                    78:7c:84:b6:15:b3:95:d9:8c:a5:46:80:40:4b:4c:
                    ee:fe:83:ba:3b:f1:d8:82:55:55:89:3f:2c:88:ae:
                    51:08:69:f6:6d:10:6c:29:5e:2d:c8:95:d1:f4:1d:
                    1a:56:9a:9d:c9:9a:2b:78:a4:f6:4e:69:5d:71:ef:
                    88:c2:01:53:f0:e2:af:c0:48:74:6c:c2:77:b0:5e:
                    b2:32:06:af:83:0e:46:3f:8c:ec:35:6c:2b:47:21:
                    49:16:71:02:6e:8f:f6:10:cb:1c:a4:e4:e1:c6:b8:
                    49:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BD:CE:49:FD:2F:D0:71:DB:FF:08:D5:89:99:94:9D:20:34:11:D4
            X509v3 Authority Key Identifier:
                keyid:BD:90:63:AD:AD:F7:48:EE:A5:8A:24:2F:16:68:AF:32:26:57:AB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/323830343a323236343a3a2f33322d3334203d3e20323634303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2264::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:85:bd:5a:21:68:85:22:fe:59:6a:a4:7b:9b:ef:40:ef:b1:
         f0:71:b0:36:b5:36:ee:c8:06:1e:ac:de:24:ff:23:d8:cd:ff:
         98:6f:22:42:66:8e:70:fc:0e:b8:f6:f8:99:c8:ae:62:d3:70:
         50:d6:08:1b:94:21:21:18:6e:55:d2:31:b5:c3:9d:06:28:fa:
         39:47:03:62:be:64:06:85:11:23:89:11:8f:fe:29:02:d2:db:
         8d:64:a5:7f:93:f0:dd:81:c5:94:11:94:a4:f7:58:75:c5:ee:
         ad:c4:5a:9d:fe:f3:16:4c:f7:80:09:42:ea:02:b3:dd:fc:ff:
         15:cc:85:4d:1a:8e:4d:6b:65:b9:a2:33:00:ef:64:2f:17:f2:
         2d:83:38:86:87:e0:f1:a3:a7:94:fe:97:22:47:f5:77:4c:d0:
         a9:79:3d:28:ff:98:c0:24:92:8c:5f:9d:34:c0:22:03:49:68:
         b3:e7:e6:9e:6b:3d:32:2c:cc:d8:2c:6f:e8:73:86:e9:f4:dd:
         2d:b4:72:97:87:97:f7:76:80:bd:a4:88:17:65:cb:63:0c:8b:
         f7:ef:da:6c:ca:4f:48:7c:ce:f6:b1:40:41:a1:d6:ca:23:70:
         6c:d2:aa:1d:fd:4d:14:e5:f6:41:b6:7e:51:68:18:9e:8a:f4:
         0b:ad:ac:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----