Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a383030303a3a2f33332d3333203d3e20323634333131.roa
File:                     323830343a323566303a383030303a3a2f33332d3333203d3e20323634333131.roa (raw, json)
Hash identifier:          f/Wnx2ORtznhHY8LVdveouQLTOt02H/VDaNNyqnvAvg=
Subject key identifier:   6D:9D:B6:CD:DA:5A:5F:26:34:2F:2D:71:6A:67:7C:18:20:76:D7:45
Certificate issuer:       /CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
Certificate serial:       2492AC1E99F6FC75B9CB62A9DCE4ED639984BAF9
Authority key identifier: 41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a383030303a3a2f33332d3333203d3e20323634333131.roa
Signing time:             Fri 08 Sep 2023 13:00:03 +0000
ROA not before:           Fri 08 Sep 2023 12:55:03 +0000
ROA not after:            Fri 06 Sep 2024 13:00:03 +0000
asID:                     264311
IP address blocks:        2804:25f0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:92:ac:1e:99:f6:fc:75:b9:cb:62:a9:dc:e4:ed:63:99:84:ba:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
        Validity
            Not Before: Sep  8 12:55:03 2023 GMT
            Not After : Sep  6 13:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:5b:a0:f8:c0:63:d8:81:24:9b:6e:df:56:
                    e1:a6:93:f4:f4:2d:d5:ea:e2:de:1e:50:7f:10:5f:
                    5b:b5:d8:e0:89:7e:0b:bc:e2:c0:99:ed:d8:ef:84:
                    41:1d:8b:83:36:80:b6:c4:59:6e:a3:34:03:0b:2d:
                    db:f5:25:e8:ce:92:28:13:56:0b:64:18:ce:e7:41:
                    82:bb:b5:cf:5d:e2:5e:b7:50:18:8f:d7:89:28:97:
                    17:3e:74:0d:c3:80:71:7d:e5:bd:59:66:32:0e:16:
                    34:67:0d:a4:53:e4:00:df:b9:76:fc:bf:14:36:ab:
                    ff:fe:a5:a7:15:3e:ce:23:02:ff:8e:7d:51:bf:8f:
                    3f:65:d6:21:4b:62:d6:bb:f2:df:c3:48:5c:81:36:
                    2e:9b:35:48:85:92:58:be:7a:bb:04:b0:da:93:ad:
                    56:c7:0e:e0:92:29:91:40:2b:4e:dd:11:61:19:bc:
                    bc:b1:83:1d:f1:eb:fb:b2:93:10:1d:06:56:1f:89:
                    ef:02:f8:dc:d2:bc:69:b4:92:b9:fa:8c:56:37:f0:
                    aa:1b:b8:85:e8:71:2b:d1:ac:ad:3c:69:03:92:50:
                    b4:ff:28:29:29:d8:cb:fd:96:a3:c9:7d:d2:7d:53:
                    6c:64:1b:9f:05:b5:30:70:d2:4d:de:a8:1a:70:ef:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9D:B6:CD:DA:5A:5F:26:34:2F:2D:71:6A:67:7C:18:20:76:D7:45
            X509v3 Authority Key Identifier:
                keyid:41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a383030303a3a2f33332d3333203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1d:91:6e:27:5f:64:df:98:d5:fd:ab:33:47:9c:69:d8:38:36:
         34:b9:2c:48:2b:6a:91:74:0e:ea:1d:e7:65:55:39:92:ff:76:
         d1:cb:74:17:52:e7:7d:98:fc:ae:76:05:38:49:92:81:54:09:
         aa:1c:f0:c1:31:b2:7e:32:a2:c9:a5:8b:b8:5d:c2:7d:4c:36:
         02:1d:b3:90:17:d7:01:8a:eb:a5:ad:8c:6a:d5:e1:23:92:57:
         27:f9:fc:74:9f:3f:ec:25:ec:e0:a3:5e:85:ff:48:74:2c:04:
         61:a5:e9:c1:ab:91:04:5e:d8:59:99:54:00:6a:ab:5b:a6:ed:
         aa:be:91:16:00:60:ba:ae:02:45:dc:bf:b3:d9:3d:e6:34:bf:
         60:ef:25:c2:76:26:8b:4f:10:b6:52:78:9a:5e:82:1e:e4:19:
         f5:b7:dd:64:7c:ad:6a:d4:ea:ad:ee:db:d0:46:e9:3e:e7:f5:
         e1:6f:bc:66:16:02:ba:55:b6:11:02:38:7c:90:77:12:78:41:
         1f:de:15:6d:9e:09:38:d2:d4:35:e1:20:2c:5c:51:7c:3f:f9:
         4a:9d:67:a9:f9:a2:57:98:ad:b1:43:05:06:21:4a:8f:93:89:
         7b:9e:d5:ba:a9:6a:bc:06:98:32:b1:5d:55:1d:2d:b4:ba:e8:
         b4:9d:c6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----