Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a343030303a3a2f33342d3334203d3e20323634333131.roa
File:                     323830343a323566303a343030303a3a2f33342d3334203d3e20323634333131.roa (raw, json)
Hash identifier:          foSqAcvPvMGk5hDrjjC1tapPPol/eQelRj26hR6z5Xg=
Subject key identifier:   09:85:BD:33:2D:ED:95:1B:30:46:55:60:6D:55:06:7E:04:D7:39:64
Certificate issuer:       /CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
Certificate serial:       76AAF5E293E16470F6CC80F0771D7A3CE694C032
Authority key identifier: 41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a343030303a3a2f33342d3334203d3e20323634333131.roa
Signing time:             Fri 08 Sep 2023 13:00:02 +0000
ROA not before:           Fri 08 Sep 2023 12:55:02 +0000
ROA not after:            Fri 06 Sep 2024 13:00:02 +0000
asID:                     264311
IP address blocks:        2804:25f0:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:aa:f5:e2:93:e1:64:70:f6:cc:80:f0:77:1d:7a:3c:e6:94:c0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
        Validity
            Not Before: Sep  8 12:55:02 2023 GMT
            Not After : Sep  6 13:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fb:a3:cc:ec:b2:59:9d:ef:7a:7f:42:ba:6d:
                    7e:00:b9:1a:2d:c8:11:67:e5:a7:cb:80:df:a8:9d:
                    3d:7e:52:4a:e1:a3:ba:29:f9:b7:82:7b:0d:9a:12:
                    57:d4:ba:20:f7:b3:ce:d3:17:51:07:de:10:b2:6d:
                    d3:d3:dc:75:2e:c6:b1:84:8b:d3:d4:55:b3:d4:97:
                    3f:b0:82:65:f3:c9:ea:3c:77:20:98:cb:65:a6:3d:
                    5b:46:30:ee:22:1f:11:fd:47:fe:fd:77:59:9d:3d:
                    c1:2e:cc:2c:63:ea:be:fe:5d:40:ab:d0:b9:54:16:
                    8e:ba:00:08:03:f0:5c:55:a1:42:70:b6:fe:6d:75:
                    aa:ee:5f:74:15:6d:fb:12:82:8f:af:ad:e6:8d:f6:
                    7f:0b:ac:b2:ac:f4:20:d4:e6:5b:ac:61:e0:de:35:
                    50:e2:ad:03:0d:65:7f:87:7a:da:c2:c8:52:49:2d:
                    b6:68:47:0c:ee:cf:40:a0:31:ab:0e:11:fa:1b:f1:
                    a8:c3:f4:da:ff:90:2e:10:90:5f:34:21:45:9a:4c:
                    dd:01:2b:d5:2a:39:51:a1:be:13:52:72:ad:30:24:
                    de:53:e2:cf:d3:38:c3:97:e7:3e:cb:e8:48:56:c1:
                    34:14:86:a6:a5:38:94:ec:e6:b7:83:fe:a5:fd:39:
                    90:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:85:BD:33:2D:ED:95:1B:30:46:55:60:6D:55:06:7E:04:D7:39:64
            X509v3 Authority Key Identifier:
                keyid:41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a343030303a3a2f33342d3334203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         60:a3:03:d9:4c:0b:50:d4:b9:b8:e6:97:fe:cd:32:86:ae:0f:
         aa:6d:08:43:85:b6:2e:5f:ce:b5:7b:49:84:44:c5:80:01:ca:
         6a:75:38:c1:67:39:e1:17:6a:66:b4:0e:ec:ca:96:ec:ad:46:
         f1:81:86:ba:92:87:34:4f:f6:89:3b:95:ba:80:93:68:22:e0:
         8b:8e:3f:6a:95:ee:43:d0:ae:2b:de:be:c0:d8:dd:f3:04:06:
         a6:11:38:7f:4e:32:b7:ff:f1:03:60:74:99:88:ab:6f:a1:53:
         60:11:04:58:60:98:59:17:cd:da:83:be:c4:73:d4:08:77:bb:
         c0:91:3b:8e:a5:cb:7e:1f:78:d8:98:ff:91:d8:31:8f:08:46:
         8b:03:6b:fc:f1:cb:31:d8:26:e4:19:42:b5:73:18:28:eb:d6:
         8b:3c:b3:1b:f5:3b:90:aa:eb:48:21:ef:6f:9f:d9:8e:d3:cd:
         61:fc:fc:6f:21:d0:ff:63:18:2f:02:b4:96:a0:b4:08:f7:3b:
         05:3c:dc:4f:fb:04:b6:f6:7f:19:82:79:b2:16:74:cf:4a:4e:
         a3:8c:ef:42:4f:7d:28:89:31:86:9a:a2:d1:f0:ba:fb:f2:c6:
         54:08:85:aa:24:7f:5d:e2:fb:a9:46:e0:44:e1:0b:01:a7:83:
         ce:c7:ec:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----