Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a3a2f33322d3332203d3e20323730323735.roa
File:                     323830343a363938343a3a2f33322d3332203d3e20323730323735.roa (raw, json)
Hash identifier:          tnuZmZZcrs0Yhb/OSHg2iHRlH4GKYUxYC6cgGfEO2gU=
Subject key identifier:   4E:D1:5B:B8:19:AC:ED:C4:0A:F3:05:B3:14:D9:E3:53:CF:D9:11:52
Certificate issuer:       /CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
Certificate serial:       1FBC1CBC78622E270EDB8D506AACE313E07D38B6
Authority key identifier: AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a3a2f33322d3332203d3e20323730323735.roa
Signing time:             Mon 26 Jun 2023 16:15:00 +0000
ROA not before:           Mon 26 Jun 2023 16:10:00 +0000
ROA not after:            Mon 24 Jun 2024 16:15:00 +0000
asID:                     270275
IP address blocks:        2804:6984::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bc:1c:bc:78:62:2e:27:0e:db:8d:50:6a:ac:e3:13:e0:7d:38:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
        Validity
            Not Before: Jun 26 16:10:00 2023 GMT
            Not After : Jun 24 16:15:00 2024 GMT
        Subject: CN=4ED15BB819ACEDC40AF305B314D9E353CFD91152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:56:21:e5:47:2f:a4:83:05:f9:7b:ae:21:93:
                    24:82:53:5c:d5:68:42:cd:51:72:89:3a:44:aa:a3:
                    e6:01:a1:be:7e:2d:21:35:86:48:6b:f0:e8:67:17:
                    df:4a:04:f7:ac:3d:53:42:a1:78:85:54:ce:7f:0b:
                    cb:4f:46:c6:1d:88:5f:e1:e6:c6:4a:72:07:d4:33:
                    9a:04:4b:6b:dd:47:b3:61:52:6e:0f:cf:72:20:b2:
                    28:d5:83:53:f0:63:91:af:1b:35:04:19:d0:9d:1c:
                    c8:2a:58:10:9b:ca:78:74:7d:f3:a6:d8:76:5b:35:
                    50:06:fd:81:b7:b3:74:56:b5:2f:0b:4c:bf:4f:4a:
                    d2:06:d0:d3:1b:78:eb:f5:38:81:5b:ee:26:11:28:
                    8a:c3:ce:92:41:4d:31:68:0f:57:bf:ed:29:cc:ba:
                    17:72:e4:d4:d8:21:2c:cb:f1:07:5f:f6:41:5a:e5:
                    7a:dc:ca:e4:8e:ab:4e:88:49:78:b2:92:af:e9:58:
                    d1:1d:f6:fe:4e:08:fa:60:2a:e8:df:ff:d3:4e:62:
                    34:fc:ff:19:8e:6a:53:b5:f5:9e:ad:87:26:a8:20:
                    24:25:0c:14:13:1b:ad:3e:27:ae:a7:5c:d9:96:35:
                    28:51:78:df:e3:8f:23:8b:3c:7a:1c:bc:8f:a8:3f:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D1:5B:B8:19:AC:ED:C4:0A:F3:05:B3:14:D9:E3:53:CF:D9:11:52
            X509v3 Authority Key Identifier:
                keyid:AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a3a2f33322d3332203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6984::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:5e:30:68:b3:80:6c:e9:ad:d4:aa:3f:74:72:e4:de:74:ee:
         48:76:1c:4c:15:8f:ef:43:e5:78:87:75:99:98:03:df:73:ef:
         a5:5c:6a:94:d4:0e:41:9a:83:b8:b4:69:2b:f3:ff:2c:fd:10:
         1f:51:44:8e:e7:da:53:74:b8:3f:d5:41:e3:b5:82:6d:c2:21:
         c7:78:90:03:c2:e7:18:91:b2:1b:77:33:a2:33:18:56:d6:cf:
         98:92:d8:7d:92:bf:7e:79:5f:e8:76:6c:ad:28:3e:4d:49:a1:
         e1:89:0c:0d:72:24:1f:9f:9b:3c:33:4d:3b:28:99:19:86:99:
         cd:14:7b:42:fc:95:41:45:14:da:e5:e5:c4:f9:0b:a7:f0:25:
         ba:e2:e1:e9:d6:19:6b:21:d8:00:ca:b2:c3:9a:53:3b:1a:5f:
         85:52:73:d6:43:a8:dc:ef:84:6a:5d:fa:eb:0c:c3:08:5b:5e:
         79:d2:4f:bf:c6:b8:89:7c:74:70:f0:91:f5:c0:90:c6:1f:9e:
         8b:95:08:6f:8a:75:18:4e:3b:52:f8:f4:a9:79:b6:52:8a:89:
         04:10:50:68:53:82:e2:14:ab:28:2a:6b:84:61:69:ed:d9:a4:
         63:37:eb:bc:13:2c:98:80:95:15:24:e5:b6:3b:4d:c4:d4:05:
         6a:a1:6e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----