Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/323830343a356237383a3a2f33322d3438203d3e20323638383437.roa
File:                     323830343a356237383a3a2f33322d3438203d3e20323638383437.roa (raw, json)
Hash identifier:          mgi0y3Za0TaZMSmTSpClKy/QvytM8mmz4vBoO8rik+s=
Subject key identifier:   FC:F9:51:13:78:43:03:D9:80:C0:B2:B0:55:EF:70:F9:0D:1F:55:C5
Certificate issuer:       /CN=07461AF10ECF1C93F0D86652694C336908EF8DE7
Certificate serial:       4AC799EA2242C56949C9E3F8BD23F1D0F989E2B3
Authority key identifier: 07:46:1A:F1:0E:CF:1C:93:F0:D8:66:52:69:4C:33:69:08:EF:8D:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07461AF10ECF1C93F0D86652694C336908EF8DE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/323830343a356237383a3a2f33322d3438203d3e20323638383437.roa
Signing time:             Fri 17 Nov 2023 18:15:00 +0000
ROA not before:           Fri 17 Nov 2023 18:10:00 +0000
ROA not after:            Fri 15 Nov 2024 18:15:00 +0000
asID:                     268847
IP address blocks:        2804:5b78::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c7:99:ea:22:42:c5:69:49:c9:e3:f8:bd:23:f1:d0:f9:89:e2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07461AF10ECF1C93F0D86652694C336908EF8DE7
        Validity
            Not Before: Nov 17 18:10:00 2023 GMT
            Not After : Nov 15 18:15:00 2024 GMT
        Subject: CN=FCF95113784303D980C0B2B055EF70F90D1F55C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:ac:2e:c2:02:df:ca:33:26:30:a9:d1:34:
                    6e:f4:68:f0:0a:d8:39:c4:38:17:99:27:6f:a2:cf:
                    c3:83:89:66:d5:86:b1:7f:92:dd:06:a3:19:7d:f5:
                    79:1e:88:58:83:7a:db:fb:dd:38:e2:d1:cd:7f:a6:
                    2e:fe:0f:24:15:57:5c:53:f8:ec:6a:ae:dc:19:40:
                    ac:2d:25:18:2c:88:51:0e:fe:20:c1:aa:a3:9e:ec:
                    09:d0:77:3b:5d:b3:1e:62:4e:27:25:64:3f:93:7f:
                    cd:8c:bf:b4:2a:1d:3c:e3:4c:0e:9f:c7:04:4e:3a:
                    47:f3:88:1d:1c:39:ae:83:dd:2b:1d:57:9d:4c:91:
                    39:6e:b8:65:dd:f7:57:a2:53:f2:bc:fe:81:f2:09:
                    df:e7:f9:a9:d6:04:7a:cf:0a:69:0e:46:38:19:b4:
                    b3:c5:99:64:69:71:b6:a3:ac:ca:05:35:b1:d1:a4:
                    17:94:72:e8:64:52:f3:96:74:9f:94:2d:e7:01:2e:
                    17:20:a7:30:0b:14:e2:fb:05:97:53:20:9f:12:e1:
                    dc:71:b1:f6:cd:ed:70:5a:a0:12:4f:7e:34:db:16:
                    0d:9c:a6:79:35:07:05:00:9b:42:af:5c:90:92:1f:
                    03:89:34:93:e7:30:81:2d:88:f8:0b:fa:1f:53:78:
                    cd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F9:51:13:78:43:03:D9:80:C0:B2:B0:55:EF:70:F9:0D:1F:55:C5
            X509v3 Authority Key Identifier:
                keyid:07:46:1A:F1:0E:CF:1C:93:F0:D8:66:52:69:4C:33:69:08:EF:8D:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/07461AF10ECF1C93F0D86652694C336908EF8DE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07461AF10ECF1C93F0D86652694C336908EF8DE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/323830343a356237383a3a2f33322d3438203d3e20323638383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b78::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:2f:2d:b0:a2:f3:f3:b2:f9:32:d4:5a:db:c0:8a:6d:c8:a9:
         ab:16:50:9b:e5:cb:b7:79:ba:38:41:92:ee:87:c5:98:88:53:
         cb:2e:ce:08:65:31:bf:33:2f:b8:25:27:45:ff:85:de:44:ca:
         15:83:40:1f:12:4c:40:8c:c3:db:63:7f:1e:fd:50:68:0f:03:
         c2:fe:ea:c9:c4:00:17:d8:ca:8a:ae:9e:14:77:3f:f4:d3:6e:
         2c:a3:9e:8b:2a:11:73:69:93:8c:68:8d:b2:9e:41:12:96:e9:
         e5:4b:f7:df:fa:95:9d:47:a1:36:a3:7f:67:e1:51:b2:5a:f4:
         54:ba:c3:4a:ce:c2:7e:47:a8:0c:65:65:d3:8f:08:41:b2:fb:
         ed:bc:5f:91:25:7d:02:cf:cc:cd:ab:1b:e8:1e:0c:45:e0:f4:
         ae:e8:cb:b0:2f:f4:fb:d6:16:f4:33:45:ae:8e:21:22:a1:99:
         76:e5:7b:c3:50:10:58:af:e6:1a:69:58:02:d5:fa:fb:21:4c:
         06:cb:47:d5:09:d0:cc:c9:71:ea:f7:b4:6b:bc:0c:bf:eb:bf:
         2f:1e:c9:8b:e5:75:f4:f7:88:6a:44:f3:24:93:b7:b1:cc:dd:
         ba:2e:f9:c3:80:83:49:5c:f6:2b:fd:0a:7d:63:94:50:5b:c7:
         c3:ff:59:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----