Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/0/323830313a38303a3231303a3a2f34382d313238203d3e203532393938.roa
File:                     323830313a38303a3231303a3a2f34382d313238203d3e203532393938.roa (raw, json)
Hash identifier:          5BNvk2NyjZ316YGJzRwdGK9ysWh9cmSr+wp7nQTHV0o=
Subject key identifier:   64:CB:18:B0:2D:7B:7E:FB:EF:60:0A:35:CF:75:75:74:5C:19:D2:DE
Certificate issuer:       /CN=62FBF527B426B909C7FD9ADD14F0F50C00209B6D
Certificate serial:       7A2DD0613032AF7D44EE314F10912CAA35A90208
Authority key identifier: 62:FB:F5:27:B4:26:B9:09:C7:FD:9A:DD:14:F0:F5:0C:00:20:9B:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62FBF527B426B909C7FD9ADD14F0F50C00209B6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/0/323830313a38303a3231303a3a2f34382d313238203d3e203532393938.roa
Signing time:             Fri 15 Dec 2023 12:12:49 +0000
ROA not before:           Fri 15 Dec 2023 12:07:49 +0000
ROA not after:            Fri 13 Dec 2024 12:12:49 +0000
asID:                     52998
IP address blocks:        2801:80:210::/48 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2d:d0:61:30:32:af:7d:44:ee:31:4f:10:91:2c:aa:35:a9:02:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62FBF527B426B909C7FD9ADD14F0F50C00209B6D
        Validity
            Not Before: Dec 15 12:07:49 2023 GMT
            Not After : Dec 13 12:12:49 2024 GMT
        Subject: CN=64CB18B02D7B7EFBEF600A35CF7575745C19D2DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e5:4b:84:63:59:77:84:3a:41:6a:ac:2e:65:
                    ec:dd:78:71:4a:df:68:5b:f3:89:f8:db:e3:f1:f0:
                    8e:7c:4d:70:e6:33:20:bd:bd:e1:68:02:6a:c8:ee:
                    73:7e:f8:08:b5:1b:ff:fe:eb:37:dd:23:23:7e:ac:
                    b3:81:92:63:fb:38:b7:bf:e4:b5:61:28:53:45:8f:
                    ea:c7:20:07:59:df:f2:aa:2a:fb:65:1f:df:8c:a7:
                    a5:18:78:f7:f8:69:bc:c6:d0:40:8f:36:57:31:da:
                    e2:82:09:20:c0:0c:23:82:e0:ba:33:f5:d2:29:77:
                    d7:6c:04:46:bc:1e:e2:e1:bc:47:c1:1a:10:56:19:
                    61:51:21:a2:a7:ec:50:d4:79:8a:70:3a:8d:82:38:
                    19:ac:bb:f6:50:f9:fd:ad:bf:02:12:58:3c:b7:f7:
                    09:21:a2:53:07:40:1b:22:d7:78:43:8b:c7:f5:a0:
                    c0:6b:7d:53:a5:05:31:db:45:74:a3:24:3e:70:0d:
                    81:ea:a0:58:c6:e4:bb:18:a2:43:5b:f4:63:6b:fd:
                    ed:ec:a1:ee:0b:fe:80:f9:ea:7b:0c:00:c8:4e:7e:
                    52:c6:b8:3c:98:25:1e:58:4b:b2:42:82:68:98:4c:
                    2c:d0:a1:d6:37:be:52:74:b5:53:ef:b3:0a:3c:18:
                    3a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CB:18:B0:2D:7B:7E:FB:EF:60:0A:35:CF:75:75:74:5C:19:D2:DE
            X509v3 Authority Key Identifier:
                keyid:62:FB:F5:27:B4:26:B9:09:C7:FD:9A:DD:14:F0:F5:0C:00:20:9B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/0/62FBF527B426B909C7FD9ADD14F0F50C00209B6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62FBF527B426B909C7FD9ADD14F0F50C00209B6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/0/323830313a38303a3231303a3a2f34382d313238203d3e203532393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:210::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:26:11:1f:db:22:00:95:b8:39:20:57:ed:ec:5e:ce:d4:c0:
         be:3b:cf:c7:f7:bb:70:18:92:dd:2d:62:9e:fc:0f:aa:97:31:
         75:fe:1d:6b:bf:c6:1d:e6:f2:03:e7:30:dc:21:9e:57:5e:f2:
         72:b6:d6:62:1e:4a:74:d0:6f:d4:c8:5d:75:29:f9:98:d5:3d:
         c4:c9:46:bf:bc:91:a6:9c:a9:99:6a:41:91:69:7b:12:79:db:
         7a:bc:b9:4d:4b:78:1f:5b:c9:fc:ca:9b:7a:24:7c:45:7a:e5:
         67:75:5f:4d:1a:71:09:8c:89:73:03:ae:f8:cf:0b:b0:00:62:
         e0:91:4a:8e:a0:26:84:44:88:8f:fa:a6:3b:57:bc:e8:68:36:
         93:78:09:e6:ac:b7:6c:27:99:71:51:e2:5b:4d:b6:ee:43:a6:
         3d:6a:88:1f:a4:86:fd:9d:b6:93:65:b8:e3:36:2d:01:0c:47:
         01:3f:02:c8:e3:eb:a1:d2:c1:cc:77:9b:f8:7d:50:70:15:31:
         46:06:fa:49:8a:9c:81:80:dd:15:86:c5:d0:42:a3:0a:2f:37:
         73:83:4a:65:65:f8:c1:15:9f:33:f5:b5:57:4e:99:67:63:92:
         13:32:f5:16:5f:9b:ee:6f:3b:2a:10:5e:b4:13:f6:5e:71:39:
         9f:50:06:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----