Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/323830343a323163303a3a2f33322d3332203d3e20323634353731.roa
File:                     323830343a323163303a3a2f33322d3332203d3e20323634353731.roa (raw, json)
Hash identifier:          IKEo7IMEy7QRx4Ut66mBSavZfHQSd5D9hMKWBCmGffI=
Subject key identifier:   FE:79:E2:3A:7C:DE:87:7C:CA:D6:28:9F:C2:AC:B6:39:6B:C1:A0:05
Certificate issuer:       /CN=211F2EA499E75BB9BC78B84D5AAA75DDE784939C
Certificate serial:       353511D2B4416F018186CFF4A50E0035CD4F21FF
Authority key identifier: 21:1F:2E:A4:99:E7:5B:B9:BC:78:B8:4D:5A:AA:75:DD:E7:84:93:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/323830343a323163303a3a2f33322d3332203d3e20323634353731.roa
Signing time:             Mon 04 Dec 2023 21:00:00 +0000
ROA not before:           Mon 04 Dec 2023 20:55:00 +0000
ROA not after:            Mon 02 Dec 2024 21:00:00 +0000
asID:                     264571
IP address blocks:        2804:21c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:35:11:d2:b4:41:6f:01:81:86:cf:f4:a5:0e:00:35:cd:4f:21:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211F2EA499E75BB9BC78B84D5AAA75DDE784939C
        Validity
            Not Before: Dec  4 20:55:00 2023 GMT
            Not After : Dec  2 21:00:00 2024 GMT
        Subject: CN=FE79E23A7CDE877CCAD6289FC2ACB6396BC1A005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:fe:5a:a6:b9:1b:c3:07:b3:31:2b:1b:97:
                    29:61:32:5e:ed:c5:2f:c1:f0:42:61:2f:57:4a:76:
                    b0:89:bf:7b:a8:d4:74:b5:23:de:d1:ca:b6:31:a6:
                    d6:c1:95:34:44:49:90:d8:3f:07:71:40:0b:79:8d:
                    af:88:df:8d:22:2b:e9:00:6d:f2:26:84:3c:ae:d2:
                    19:e4:01:df:84:1b:62:44:87:ed:b4:be:2d:1d:47:
                    d2:19:90:78:52:b3:e8:d8:b7:24:3a:af:f3:36:0f:
                    0b:1d:95:04:c0:1c:ce:7d:cd:5a:a2:09:42:69:44:
                    21:6a:8e:d0:ba:d4:d3:37:91:90:58:53:a5:9e:2b:
                    24:14:13:b4:74:6f:5d:1a:5f:02:14:fb:f8:88:41:
                    24:d4:9f:94:bb:7b:fe:a9:8f:d2:6e:a1:18:8f:85:
                    ab:86:9c:f8:6c:ff:fe:8d:a1:83:87:06:5f:33:41:
                    a0:d1:7a:76:33:dc:c7:76:3a:59:81:f6:01:6f:81:
                    a4:f3:30:e5:e8:d0:c3:95:c0:b9:ed:13:43:b0:11:
                    91:59:6b:cf:29:d7:a1:fa:53:b6:c5:4a:55:1d:db:
                    c9:53:56:71:00:8a:11:a6:9d:e0:38:59:db:9e:65:
                    72:3f:ce:ad:2e:64:16:55:6a:89:d7:e3:0e:dd:c8:
                    2e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:79:E2:3A:7C:DE:87:7C:CA:D6:28:9F:C2:AC:B6:39:6B:C1:A0:05
            X509v3 Authority Key Identifier:
                keyid:21:1F:2E:A4:99:E7:5B:B9:BC:78:B8:4D:5A:AA:75:DD:E7:84:93:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/323830343a323163303a3a2f33322d3332203d3e20323634353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:2c:0c:18:f3:69:5c:cb:7e:18:0d:92:36:f9:2d:17:af:1e:
         2e:44:fa:b9:0e:7f:68:72:8b:3f:ff:cf:ea:0c:13:e7:99:5a:
         ed:11:c5:7b:a3:7c:66:e8:61:53:2b:d2:51:90:ed:ce:32:37:
         e1:15:d1:c8:42:8a:2b:86:4c:36:3d:0e:d3:38:3d:f1:b9:84:
         80:b0:d3:3a:74:d5:a0:9e:82:77:6a:54:52:40:97:f1:ec:f5:
         12:e1:78:ae:f5:ef:ec:6b:c5:ef:b2:a8:01:d6:57:45:c6:c9:
         86:73:39:6e:5d:ac:f9:49:b8:05:67:b5:db:cf:ef:0e:25:be:
         45:ec:23:09:67:28:62:1f:b3:d8:e2:98:35:85:0e:a9:34:c5:
         40:ce:40:78:49:a2:67:9b:ec:78:bc:24:d1:23:b7:02:bc:86:
         62:56:41:45:6f:30:17:de:0e:14:d6:9c:c9:f9:b7:82:b1:c0:
         86:9c:34:33:61:9b:c1:71:5f:11:e3:29:4e:93:c8:52:1b:27:
         8b:16:de:82:11:12:c3:8a:ce:82:84:24:e2:5a:7d:66:9d:2d:
         98:77:f2:00:fb:3b:ea:81:39:4c:0e:5d:17:67:1e:42:d6:3a:
         b6:10:1e:bb:1f:1c:a5:ee:6f:25:e1:77:14:b3:b1:0d:7e:0a:
         64:80:ec:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----