Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/323830343a376164383a3a2f33322d3332203d3e20323731333935.roa
File:                     323830343a376164383a3a2f33322d3332203d3e20323731333935.roa (raw, json)
Hash identifier:          2tDwp4FiOhrMZRIl4x7rgk6cJHIk3NxMYiccTc5c9sU=
Subject key identifier:   1B:85:10:DF:E1:D0:B3:70:73:E1:47:EC:43:88:9C:83:F1:14:EA:DF
Certificate issuer:       /CN=F86C970181A2EA77E7BA82EC8C2F9D699CB790BA
Certificate serial:       27952AFF1011B1EA9400EE954D7B84BD1FC23D30
Authority key identifier: F8:6C:97:01:81:A2:EA:77:E7:BA:82:EC:8C:2F:9D:69:9C:B7:90:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/323830343a376164383a3a2f33322d3332203d3e20323731333935.roa
Signing time:             Wed 12 Jul 2023 01:12:50 +0000
ROA not before:           Wed 12 Jul 2023 01:07:50 +0000
ROA not after:            Wed 10 Jul 2024 01:12:50 +0000
asID:                     271395
IP address blocks:        2804:7ad8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:95:2a:ff:10:11:b1:ea:94:00:ee:95:4d:7b:84:bd:1f:c2:3d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F86C970181A2EA77E7BA82EC8C2F9D699CB790BA
        Validity
            Not Before: Jul 12 01:07:50 2023 GMT
            Not After : Jul 10 01:12:50 2024 GMT
        Subject: CN=1B8510DFE1D0B37073E147EC43889C83F114EADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:f9:bf:57:90:86:09:1e:62:22:fc:be:d0:
                    08:e8:81:20:f9:c7:b5:ad:db:5c:ff:d4:c5:37:f2:
                    38:91:96:af:0a:98:c8:97:82:7b:e2:d7:d4:62:d8:
                    66:ef:2d:2e:8f:a8:20:ba:b9:97:4f:9b:f5:c7:59:
                    53:33:67:b7:60:f2:a6:e9:0a:c3:4e:e3:df:5c:39:
                    26:2d:36:93:a5:45:e5:00:ab:61:e3:78:c5:08:fd:
                    15:2a:49:9a:71:02:dc:a0:e6:68:85:87:4e:7c:8b:
                    bb:80:e4:26:0c:a5:6a:09:ee:27:b8:5b:ab:b6:5e:
                    0d:a6:ca:30:fd:a0:aa:09:29:f5:08:b8:19:10:8e:
                    32:5b:cb:2d:62:e3:9e:49:d1:d5:58:2d:75:95:38:
                    c7:bb:8f:ba:0f:4c:b3:9d:3d:e3:06:09:b0:3e:dd:
                    cc:f4:f9:65:b5:e8:35:56:4e:35:c9:65:8f:65:ad:
                    15:84:b8:82:d5:14:57:67:a9:5d:21:04:0c:ce:98:
                    6f:cc:e6:4a:fd:e5:09:de:2c:ba:e8:d3:91:cf:50:
                    00:dc:2d:6a:73:42:e2:b7:93:94:0b:b4:c2:86:13:
                    68:1f:e5:a5:70:6c:1d:fd:b6:92:12:33:b5:b7:c7:
                    3a:d7:f2:fd:b8:8d:be:57:a9:17:d9:f9:cc:3d:e1:
                    a8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:85:10:DF:E1:D0:B3:70:73:E1:47:EC:43:88:9C:83:F1:14:EA:DF
            X509v3 Authority Key Identifier:
                keyid:F8:6C:97:01:81:A2:EA:77:E7:BA:82:EC:8C:2F:9D:69:9C:B7:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/323830343a376164383a3a2f33322d3332203d3e20323731333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ad8::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:b4:e5:e4:ca:51:20:10:73:02:1f:8b:a5:a3:dc:67:4a:31:
         75:f2:4a:8c:f4:7c:19:0e:0e:cf:41:c0:ee:41:2f:f7:7c:33:
         e4:bb:e1:2c:30:a4:71:42:a1:3b:30:8b:71:f6:9c:14:30:21:
         75:a1:e2:4c:8b:a6:46:8b:2d:14:05:95:ec:4e:1c:c4:d2:e8:
         cd:50:68:b0:9b:63:57:fa:ea:92:54:58:8f:08:79:c6:11:eb:
         23:12:a0:80:6b:03:fa:5b:3c:54:7b:7c:50:6d:2c:72:6b:a3:
         bf:8e:51:8b:67:22:db:a9:d5:0d:f6:06:82:3e:ff:2d:96:a0:
         5b:6b:87:23:f6:1f:ae:b9:06:6f:d5:a5:a1:a9:bc:0a:9d:79:
         66:84:99:d5:c3:af:34:87:29:40:fd:f9:94:b4:90:d4:76:a2:
         aa:62:7c:0c:4e:cf:7e:20:e8:6f:f3:86:37:9c:7f:41:71:0f:
         07:06:42:35:97:6a:70:5d:8e:38:2c:7e:4a:51:19:6e:b1:77:
         b2:b6:d2:61:55:ec:31:9e:82:12:ce:79:db:52:a4:8b:11:f3:
         d0:33:6a:4c:cb:22:37:ec:a4:1d:b8:49:fe:61:0b:41:ac:33:
         c3:a8:6e:c6:1a:fa:b2:4a:42:bc:cf:9b:93:d7:13:6f:d7:9e:
         8d:03:1d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----