Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33322d3438203d3e20323635353030.roa
File:                     323830343a333531383a3a2f33322d3438203d3e20323635353030.roa (raw, json)
Hash identifier:          izYMNsxf6bZvdBjmeZDIZVBCzQZKhgtI/85J6muQZRk=
Subject key identifier:   A3:42:C9:CB:29:12:7E:96:A6:DD:0D:B9:F9:F6:30:BA:AB:9B:2A:C4
Certificate issuer:       /CN=65403EE1081F988BE06FB2F0A879976D60BF2B70
Certificate serial:       0F893484991C8536E8F78151A3A002772031C40F
Authority key identifier: 65:40:3E:E1:08:1F:98:8B:E0:6F:B2:F0:A8:79:97:6D:60:BF:2B:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65403EE1081F988BE06FB2F0A879976D60BF2B70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33322d3438203d3e20323635353030.roa
Signing time:             Thu 19 Jan 2023 21:05:20 +0000
ROA not before:           Thu 19 Jan 2023 21:00:20 +0000
ROA not after:            Thu 18 Jan 2024 21:05:20 +0000
asID:                     265500
IP address blocks:        2804:3518::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:89:34:84:99:1c:85:36:e8:f7:81:51:a3:a0:02:77:20:31:c4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65403EE1081F988BE06FB2F0A879976D60BF2B70
        Validity
            Not Before: Jan 19 21:00:20 2023 GMT
            Not After : Jan 18 21:05:20 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d8:e3:69:79:49:0b:31:0e:3c:6d:ff:28:e3:
                    69:0f:e2:dc:3f:19:00:47:1c:32:02:fe:97:fe:2f:
                    38:aa:f5:fc:af:b3:d8:63:d5:4a:e0:9f:af:c8:87:
                    6d:66:67:f2:c8:7d:4d:08:fe:c4:16:ec:55:f2:86:
                    76:dc:04:79:5e:41:a9:bd:91:8e:7d:ba:ad:0f:91:
                    3e:31:ff:ab:6d:a1:87:49:cd:36:4e:1c:0a:a8:02:
                    84:77:18:57:44:ca:5f:bb:98:a4:29:2e:9d:5e:ae:
                    23:1b:d4:43:9f:6d:40:55:8d:39:ae:4f:8f:32:24:
                    69:70:69:8e:3a:f8:19:b5:90:e9:7f:57:e1:14:08:
                    ca:01:14:df:45:14:02:bc:b4:52:ad:02:79:a2:5e:
                    be:36:4d:f4:17:e9:6c:ea:4b:d4:6a:72:c5:d8:30:
                    c0:64:cb:9b:2b:2d:ab:81:12:c2:f3:d3:fe:00:77:
                    de:b6:c9:6e:17:64:7f:a7:0b:47:58:4f:d4:8a:35:
                    d8:8f:28:d6:39:84:80:aa:46:54:a6:f0:41:7f:ac:
                    ac:04:0a:98:71:96:d4:87:83:43:86:c6:9a:b7:15:
                    09:2d:bd:d5:30:ac:e9:6a:f9:24:a7:a5:31:5a:5b:
                    49:92:25:74:25:66:c5:e5:b4:70:6e:76:f7:ca:a3:
                    37:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:42:C9:CB:29:12:7E:96:A6:DD:0D:B9:F9:F6:30:BA:AB:9B:2A:C4
            X509v3 Authority Key Identifier:
                keyid:65:40:3E:E1:08:1F:98:8B:E0:6F:B2:F0:A8:79:97:6D:60:BF:2B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/65403EE1081F988BE06FB2F0A879976D60BF2B70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65403EE1081F988BE06FB2F0A879976D60BF2B70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33322d3438203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:46:6f:95:ea:91:88:40:a9:ce:cc:cd:24:8d:99:db:4e:79:
         eb:7c:13:63:33:7d:51:7d:96:06:7f:ff:50:bd:5a:f6:e6:e4:
         ba:61:13:98:20:71:a4:4a:61:4d:11:0a:61:7e:bc:54:60:d0:
         27:94:3f:30:64:35:b4:97:f5:86:21:81:9c:ba:71:ad:53:06:
         2c:60:b6:eb:25:c9:0f:88:86:f6:d1:22:bf:43:f8:81:e8:a2:
         f3:d5:3e:88:46:0e:e4:cb:0d:f7:27:8e:0f:15:24:7d:68:b4:
         dd:e9:f9:4c:7e:51:9b:d4:a9:fc:f4:4f:01:e3:15:e2:13:7d:
         ff:e1:5e:ce:59:10:1a:b2:03:14:56:19:c8:f0:bb:1a:50:0e:
         1a:6c:43:44:02:df:62:3a:ae:83:fa:31:10:a1:db:05:31:d3:
         c7:55:d9:d8:76:45:6c:42:3b:64:c3:0f:08:e5:81:d4:34:d1:
         d8:78:31:7d:9d:7a:08:a6:84:d0:1e:5a:7d:c2:30:88:03:a1:
         57:ad:fe:8f:52:bf:c4:b5:d1:be:28:9d:7b:99:ef:7b:cb:f6:
         e4:25:4c:1d:93:93:e0:23:bc:63:e7:54:1d:26:c0:c8:2d:34:
         68:b8:40:2b:a0:68:76:18:03:87:5c:74:b1:4e:24:aa:73:43:
         9d:d1:15:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----