Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/323830343a353165303a3a2f33322d3430203d3e20323638343832.roa
File:                     323830343a353165303a3a2f33322d3430203d3e20323638343832.roa (raw, json)
Hash identifier:          Ws91A8WNDXaOqZtu6M9suBBAEpiKk3UvlKYPtKyIp7E=
Subject key identifier:   15:B2:2B:E2:A6:58:E5:E9:66:09:4D:CF:C0:82:37:79:CF:66:C2:C1
Certificate issuer:       /CN=94E4D0AA03B0607D73B2212CED372F813315BAAC
Certificate serial:       6784537C147A7F8FEAC9B9B2AB942E423D7A9893
Authority key identifier: 94:E4:D0:AA:03:B0:60:7D:73:B2:21:2C:ED:37:2F:81:33:15:BA:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94E4D0AA03B0607D73B2212CED372F813315BAAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/323830343a353165303a3a2f33322d3430203d3e20323638343832.roa
Signing time:             Wed 17 May 2023 16:51:11 +0000
ROA not before:           Wed 17 May 2023 16:46:11 +0000
ROA not after:            Wed 15 May 2024 16:51:11 +0000
asID:                     268482
IP address blocks:        2804:51e0::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:84:53:7c:14:7a:7f:8f:ea:c9:b9:b2:ab:94:2e:42:3d:7a:98:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94E4D0AA03B0607D73B2212CED372F813315BAAC
        Validity
            Not Before: May 17 16:46:11 2023 GMT
            Not After : May 15 16:51:11 2024 GMT
        Subject: CN=15B22BE2A658E5E966094DCFC0823779CF66C2C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:80:41:d3:b8:16:fc:7a:d7:ed:1e:cc:db:b9:
                    e9:87:44:dd:b2:d1:10:da:c6:ce:c8:e7:89:cc:eb:
                    41:ea:30:00:26:3b:2d:8c:19:4b:9f:b8:ca:41:da:
                    c1:25:ff:15:65:51:80:b8:b1:48:e9:35:5f:23:09:
                    2d:35:5c:73:3e:5d:14:be:e4:c5:89:16:34:68:29:
                    d1:ba:d1:16:df:f8:5b:3c:68:41:9d:eb:34:17:90:
                    2b:37:c9:75:f4:05:7f:a1:de:3b:b0:e2:df:83:c2:
                    c9:39:85:14:76:67:2a:b2:f5:05:01:41:05:2d:4a:
                    e7:4f:71:ff:95:4f:66:f0:34:12:d0:e1:08:b5:c2:
                    02:c5:ff:78:2d:14:67:fc:82:93:8a:f4:85:b3:af:
                    a9:b2:cf:14:9b:43:7a:13:4f:e3:8d:45:cd:a5:b2:
                    ce:89:de:00:6d:ce:c6:df:0a:7c:9f:43:b2:43:0c:
                    d3:0a:08:30:f9:98:e5:67:78:5b:25:0c:e2:88:fd:
                    ab:25:2b:10:b9:2b:4b:a5:5a:6d:a2:91:f9:c7:1f:
                    d6:e4:4a:3f:48:48:56:16:04:63:34:97:e5:60:81:
                    cc:79:4f:5f:25:6a:d6:1b:f3:93:e4:8e:d3:8d:aa:
                    9c:16:17:bb:13:59:5a:07:a5:89:1a:76:9a:0d:7a:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B2:2B:E2:A6:58:E5:E9:66:09:4D:CF:C0:82:37:79:CF:66:C2:C1
            X509v3 Authority Key Identifier:
                keyid:94:E4:D0:AA:03:B0:60:7D:73:B2:21:2C:ED:37:2F:81:33:15:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/94E4D0AA03B0607D73B2212CED372F813315BAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94E4D0AA03B0607D73B2212CED372F813315BAAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/323830343a353165303a3a2f33322d3430203d3e20323638343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:5a:7e:48:b3:09:1a:4c:e8:d8:39:42:47:89:37:2b:f8:3e:
         4d:9b:b7:79:a1:21:74:e5:92:55:56:d4:04:e6:3d:10:3f:aa:
         c4:00:88:0d:a9:e2:97:f4:de:69:95:cb:fd:d4:b6:02:9e:90:
         90:ae:52:55:a4:7e:f7:fa:1d:9a:13:17:fc:75:db:4a:8f:f7:
         23:fc:a1:98:ea:e5:ac:6c:34:fb:3e:6d:bf:67:58:20:49:18:
         d2:17:30:7b:4f:53:45:11:d7:f2:fb:e0:f9:6e:b3:9c:e4:33:
         f2:bd:7b:b6:52:2e:10:aa:4e:1b:57:14:c9:ae:ab:3b:1d:29:
         09:1e:2a:50:0d:58:06:df:b5:02:2c:e7:d3:cd:50:96:eb:b7:
         5a:90:7f:e8:6b:ec:f6:c0:3c:f9:80:41:03:d3:05:41:69:8e:
         a4:d7:fc:c9:8f:06:04:82:65:1d:c6:03:07:b5:24:39:cf:4a:
         65:0e:e5:e8:c1:3e:4e:c4:bc:8f:5a:23:07:68:ac:82:12:1a:
         24:a4:57:05:6e:92:26:4c:01:32:e1:45:24:e0:66:53:03:74:
         70:30:3b:5a:de:27:15:4d:b4:53:2c:c3:15:ca:ca:22:15:32:
         36:8e:af:66:83:3d:85:d5:e6:bb:fa:c7:34:3d:55:b8:2b:26:
         13:63:72:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----