Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/323830343a353631343a3a2f33322d3332203d3e20323637353133.roa
File:                     323830343a353631343a3a2f33322d3332203d3e20323637353133.roa (raw, json)
Hash identifier:          i8cUUzGQJw72LT5ZtzsPm+WGyg0AuYTlPTa+uGknl4Y=
Subject key identifier:   AE:15:2A:65:43:A6:3C:32:39:BE:1F:21:1F:03:7A:37:63:97:1A:64
Certificate issuer:       /CN=576C14ED9BA857F93E783A5ABE071846F54CDE21
Certificate serial:       5496CF05ADDD826D353F471661E14DFD5DD0E0A7
Authority key identifier: 57:6C:14:ED:9B:A8:57:F9:3E:78:3A:5A:BE:07:18:46:F5:4C:DE:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/576C14ED9BA857F93E783A5ABE071846F54CDE21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/323830343a353631343a3a2f33322d3332203d3e20323637353133.roa
Signing time:             Tue 25 Jul 2023 19:13:48 +0000
ROA not before:           Tue 25 Jul 2023 19:08:48 +0000
ROA not after:            Tue 23 Jul 2024 19:13:48 +0000
asID:                     267513
IP address blocks:        2804:5614::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:96:cf:05:ad:dd:82:6d:35:3f:47:16:61:e1:4d:fd:5d:d0:e0:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576C14ED9BA857F93E783A5ABE071846F54CDE21
        Validity
            Not Before: Jul 25 19:08:48 2023 GMT
            Not After : Jul 23 19:13:48 2024 GMT
        Subject: CN=AE152A6543A63C3239BE1F211F037A3763971A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:9a:20:28:89:65:4d:23:91:98:b3:33:66:
                    57:e0:6c:70:2d:0c:1f:27:a9:23:da:f9:5f:81:9b:
                    77:7c:ba:d5:b5:0c:91:3f:e9:c3:c6:c3:bb:2a:d2:
                    70:7b:65:1b:41:c2:52:54:e9:48:cb:8e:70:ef:87:
                    1d:2e:6a:fe:00:ca:02:7b:98:d0:d7:87:5a:10:6d:
                    4a:c8:f2:1d:07:d7:a3:b4:8e:00:0c:95:82:a2:5d:
                    01:b1:ee:58:40:27:b9:b5:40:3e:3a:d6:2e:7a:4d:
                    3f:1c:d4:bb:53:4f:0c:f0:25:cd:2c:32:e4:a1:b4:
                    18:78:2f:3c:03:61:23:be:85:cf:cb:6f:78:57:36:
                    7d:13:b2:3d:29:0b:17:65:f2:a5:d5:cb:8c:12:47:
                    ea:55:ca:52:d8:f5:28:ee:0b:be:bd:da:6b:a9:33:
                    ed:96:87:1d:19:12:10:d4:5d:93:78:5a:26:51:b0:
                    61:d2:ad:91:a2:7a:6e:23:52:f7:0b:34:82:95:95:
                    8d:5b:8e:98:6f:a2:1a:16:f0:28:a4:0d:15:8f:a3:
                    e7:3f:56:f5:62:cf:0c:40:23:54:fe:9b:84:19:ec:
                    2a:5f:60:e6:8f:b4:60:e2:24:88:ea:b2:1a:d6:37:
                    d8:6f:4d:9d:cc:ba:fc:62:fe:42:ab:60:14:4f:76:
                    fc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:15:2A:65:43:A6:3C:32:39:BE:1F:21:1F:03:7A:37:63:97:1A:64
            X509v3 Authority Key Identifier:
                keyid:57:6C:14:ED:9B:A8:57:F9:3E:78:3A:5A:BE:07:18:46:F5:4C:DE:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/576C14ED9BA857F93E783A5ABE071846F54CDE21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/576C14ED9BA857F93E783A5ABE071846F54CDE21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/323830343a353631343a3a2f33322d3332203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5614::/32

    Signature Algorithm: sha256WithRSAEncryption
         d1:63:90:06:61:3e:ed:ac:36:a0:5b:08:7c:98:70:d6:4e:1c:
         d5:56:0c:11:4f:b1:2a:85:a8:69:a3:a9:96:ac:1a:9b:93:f4:
         f4:aa:ec:5f:69:64:08:b6:7a:08:db:e4:7d:c3:63:da:b5:b6:
         ec:b4:48:4b:83:5d:7d:ed:72:5a:67:ab:1f:aa:f8:70:91:2d:
         26:43:d9:c2:fa:8a:b5:02:16:07:f0:59:e0:6b:3a:1d:06:74:
         1c:1c:a5:7e:82:e5:f9:ac:eb:d1:1b:b1:a6:3e:f7:7a:97:2a:
         05:dc:be:70:f6:97:3c:38:ce:cc:01:86:e8:95:fd:c5:a6:23:
         7e:9d:db:19:73:0c:d9:8c:ec:8e:c4:c3:d7:08:ab:7c:9e:29:
         13:4c:e0:65:d5:6e:66:45:20:6a:2b:60:3d:14:58:2a:5f:9d:
         c2:d4:66:15:c2:91:da:de:9e:75:d1:49:f8:1e:ff:11:0b:80:
         f2:b2:f3:91:03:4e:ad:fb:33:e9:08:a1:ea:7a:a2:70:be:d7:
         e0:2a:3f:ce:16:8d:6c:74:53:6d:4a:ad:3a:5a:aa:0a:f8:62:
         ec:30:e5:48:28:53:f6:cc:3f:37:f2:9a:6e:4b:b0:b4:51:11:
         f3:94:8e:61:bc:c8:31:59:3d:4b:dd:7b:0b:9c:88:5d:f1:c2:
         53:ff:4b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----