Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a633030303a3a2f33342d3334203d3e20323634333131.roa
File:                     323830343a323566303a633030303a3a2f33342d3334203d3e20323634333131.roa (raw, json)
Hash identifier:          a3kJIlZtk7UjB7rBV9UQWiC3ELgfanO29JcjrCkZink=
Subject key identifier:   DB:32:79:F0:90:1C:56:34:C2:3D:AE:6E:BA:C5:3B:AD:91:35:B3:A4
Certificate issuer:       /CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
Certificate serial:       4F4C5CFA70DD793B1E757EE9B9DBD7499E6C4107
Authority key identifier: 41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a633030303a3a2f33342d3334203d3e20323634333131.roa
Signing time:             Fri 08 Sep 2023 13:00:03 +0000
ROA not before:           Fri 08 Sep 2023 12:55:03 +0000
ROA not after:            Fri 06 Sep 2024 13:00:03 +0000
asID:                     264311
IP address blocks:        2804:25f0:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4c:5c:fa:70:dd:79:3b:1e:75:7e:e9:b9:db:d7:49:9e:6c:41:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
        Validity
            Not Before: Sep  8 12:55:03 2023 GMT
            Not After : Sep  6 13:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:88:4d:9b:e1:27:08:fb:09:7d:5f:4c:4c:
                    a6:77:69:f1:be:e6:75:9e:a8:d1:54:0f:db:79:8a:
                    2a:fe:9e:69:5a:e5:ff:5c:03:45:af:5a:02:5b:23:
                    65:5a:10:32:ad:7d:7e:11:20:80:1b:dd:86:90:ef:
                    c4:d3:9f:08:c7:53:40:08:cd:7a:d8:30:af:ef:50:
                    10:a3:43:01:51:a8:27:0e:af:91:ff:16:b5:e0:49:
                    8b:c0:83:a5:d1:38:9f:ee:5a:d5:82:1b:c1:cd:61:
                    c5:cd:b6:42:95:6e:50:5b:3a:b1:db:e3:42:91:89:
                    27:1b:24:36:0a:27:0b:11:96:52:a8:fe:9c:16:2d:
                    21:3d:5a:31:3d:85:ce:6e:71:58:70:63:93:d2:a9:
                    b2:84:9c:44:40:af:20:89:b2:74:4e:cb:93:36:f5:
                    ce:31:65:47:86:de:97:be:bf:af:75:d0:27:f8:db:
                    1f:26:68:c6:53:b4:ee:18:23:79:39:7c:3b:94:13:
                    9a:54:30:d7:54:9d:cf:f2:ea:8d:45:af:a0:da:0a:
                    d1:c9:20:20:f4:9b:10:65:04:80:9e:c6:ea:50:79:
                    ee:64:ff:cc:78:0f:d2:33:0b:82:a1:77:cb:6c:a2:
                    e1:3b:70:57:21:7a:1b:27:95:ce:0c:9a:1a:ed:3b:
                    45:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:32:79:F0:90:1C:56:34:C2:3D:AE:6E:BA:C5:3B:AD:91:35:B3:A4
            X509v3 Authority Key Identifier:
                keyid:41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a633030303a3a2f33342d3334203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8c:cc:30:f3:1f:6b:99:0a:20:7a:e0:aa:1e:5b:43:e5:ba:f2:
         5a:d3:53:4d:2b:a7:2e:ca:75:b8:83:69:29:2e:79:28:3a:17:
         de:c0:c5:cd:f3:d3:74:2a:2a:8e:f7:b5:39:3e:76:ce:33:6e:
         2e:32:7a:a4:66:86:da:2a:fa:1e:d4:69:27:2f:91:96:29:e1:
         19:50:40:58:b8:c6:a9:c5:9d:a6:c6:a9:f3:cb:d0:26:25:04:
         70:b7:44:df:9f:5f:3a:26:d1:db:dd:06:2c:8a:67:7d:79:74:
         b0:64:4c:64:ea:b1:a7:b1:92:b2:1b:c0:c4:55:98:73:bf:3c:
         df:1f:4d:0c:c1:7f:2e:3f:91:2d:25:96:98:6d:d1:44:3d:b8:
         2a:74:40:e8:27:91:9f:9f:7e:7c:f3:8a:cd:9c:af:01:91:08:
         62:e7:50:39:33:5f:ae:d3:20:96:68:9e:74:86:03:68:f2:c7:
         ac:23:72:2e:f3:f4:ac:f1:78:a6:f6:08:9a:0e:98:26:b8:93:
         26:be:39:05:28:e2:11:1a:4f:24:2e:c7:c0:bf:2d:d8:ef:32:
         1b:7d:6e:cd:be:8b:19:f2:44:9c:d3:52:d3:5b:44:f3:ab:d5:
         59:97:fa:44:48:77:5f:39:6d:57:55:ae:1b:7e:b7:a8:58:41:
         ba:b4:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----