Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/323830343a343631303a3a2f33322d3332203d3e20323636393636.roa
File:                     323830343a343631303a3a2f33322d3332203d3e20323636393636.roa (raw, json)
Hash identifier:          sELTgeovjOHRqxhMAI+VSP7WDYlz7KaiPlQbQ/uHh0A=
Subject key identifier:   81:3E:67:26:25:F7:3D:92:EB:49:F0:79:7C:14:6B:BD:3F:AD:56:B1
Certificate issuer:       /CN=80C240FD65B3474E7A81FEE3D72F0FFFC2B09170
Certificate serial:       41454D751A16D4663158D2E518E717D42B188442
Authority key identifier: 80:C2:40:FD:65:B3:47:4E:7A:81:FE:E3:D7:2F:0F:FF:C2:B0:91:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/323830343a343631303a3a2f33322d3332203d3e20323636393636.roa
Signing time:             Fri 23 Jun 2023 20:00:00 +0000
ROA not before:           Fri 23 Jun 2023 19:55:00 +0000
ROA not after:            Fri 21 Jun 2024 20:00:00 +0000
asID:                     266966
IP address blocks:        2804:4610::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:45:4d:75:1a:16:d4:66:31:58:d2:e5:18:e7:17:d4:2b:18:84:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80C240FD65B3474E7A81FEE3D72F0FFFC2B09170
        Validity
            Not Before: Jun 23 19:55:00 2023 GMT
            Not After : Jun 21 20:00:00 2024 GMT
        Subject: CN=813E672625F73D92EB49F0797C146BBD3FAD56B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:ab:88:54:5e:46:6d:1a:9f:72:20:a6:3d:
                    49:6e:f6:b3:b2:66:af:09:fa:a0:8d:22:1c:96:15:
                    34:cf:13:75:d8:c5:be:35:c7:12:b3:80:89:bf:13:
                    7c:f9:4f:6e:24:a6:3d:a1:ca:ef:15:ea:9d:e8:fb:
                    d9:4d:95:79:9f:d3:81:15:11:47:d4:e3:56:fe:bb:
                    f5:78:e7:11:57:50:b1:28:95:4c:d7:54:64:30:b8:
                    ac:05:54:94:a9:51:12:38:ef:d2:15:00:eb:dc:01:
                    9d:48:66:22:9f:77:41:09:78:69:c1:2a:0b:30:f1:
                    a0:a5:60:e5:23:f1:63:64:a0:3a:d6:de:22:84:dc:
                    8e:df:54:1c:26:22:0f:77:1f:b4:ab:f6:ef:cf:77:
                    47:f6:ff:49:60:79:ab:1d:04:51:19:06:15:fb:cf:
                    2a:f7:91:ba:e7:c9:f4:51:66:db:ad:c2:c7:70:cc:
                    1e:c4:74:23:5b:04:b0:dc:75:a1:7e:6d:7a:4d:c2:
                    76:bc:15:6d:af:31:5d:1f:16:b6:0c:0f:15:9b:a9:
                    4d:47:04:97:7a:55:fc:bc:f3:51:62:76:6f:3e:4e:
                    0b:94:fc:8b:63:94:45:27:d0:f0:f7:3d:80:f1:4a:
                    5a:f3:92:55:96:53:9a:77:45:54:a8:0c:44:e6:61:
                    ad:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3E:67:26:25:F7:3D:92:EB:49:F0:79:7C:14:6B:BD:3F:AD:56:B1
            X509v3 Authority Key Identifier:
                keyid:80:C2:40:FD:65:B3:47:4E:7A:81:FE:E3:D7:2F:0F:FF:C2:B0:91:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/323830343a343631303a3a2f33322d3332203d3e20323636393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4610::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:b1:06:92:6b:34:50:81:66:58:c1:3f:32:5b:60:60:11:f1:
         5a:f8:f5:60:a7:61:1d:6d:54:b6:8c:7b:60:f4:07:ef:c7:3e:
         3d:c7:6a:38:12:48:f2:4b:26:5f:84:30:46:3c:b7:cb:9f:cd:
         5c:32:11:11:c5:25:92:cf:ab:45:28:d1:73:75:c7:45:49:16:
         43:ca:42:d6:23:e7:de:1f:cb:5f:de:22:04:db:16:d1:b1:76:
         6a:f4:61:34:eb:f4:05:89:45:93:f5:72:2e:b1:26:7a:59:ce:
         73:c3:9b:1c:c4:8f:08:2f:8e:6c:3b:1f:79:de:89:af:8a:7c:
         f4:51:2e:be:8f:b5:fa:ee:6d:d5:83:bb:bc:29:e9:17:c8:3e:
         d5:27:c5:88:e9:08:a3:12:bd:9c:23:5b:a7:cb:5f:b5:29:1d:
         5b:ef:a6:39:71:f9:67:76:b0:56:71:3f:92:be:86:94:cb:d9:
         4c:1a:6f:f8:7e:f7:c3:91:67:02:91:35:bc:8c:96:af:29:a2:
         9e:75:18:3c:28:4e:1a:1e:ed:4d:0c:57:0b:d1:13:8c:00:37:
         ac:99:90:7b:71:5f:a2:9c:a8:26:5e:35:9e:0b:86:6a:16:ed:
         af:0f:86:6c:10:5d:0e:a2:78:08:8a:1c:91:16:d5:01:c5:68:
         dd:0d:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----