Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/0/323830343a313263633a3a2f33322d3336203d3e20323633343939.roa
File:                     323830343a313263633a3a2f33322d3336203d3e20323633343939.roa (raw, json)
Hash identifier:          gUQnlDDx5BVpzK3DIMKYWget2PFBhPpclKO1K4gIuGs=
Subject key identifier:   0E:2D:6B:7E:18:6A:21:00:86:04:40:E4:12:39:93:3A:ED:E3:D0:79
Certificate issuer:       /CN=9C4168E5104D077D81E4B301D2558E7CC963310C
Certificate serial:       25BB556059349206F68A41EA17DE4AE8B5DCE053
Authority key identifier: 9C:41:68:E5:10:4D:07:7D:81:E4:B3:01:D2:55:8E:7C:C9:63:31:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C4168E5104D077D81E4B301D2558E7CC963310C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/0/323830343a313263633a3a2f33322d3336203d3e20323633343939.roa
Signing time:             Thu 03 Aug 2023 22:00:00 +0000
ROA not before:           Thu 03 Aug 2023 21:55:00 +0000
ROA not after:            Thu 01 Aug 2024 22:00:00 +0000
asID:                     263499
IP address blocks:        2804:12cc::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:bb:55:60:59:34:92:06:f6:8a:41:ea:17:de:4a:e8:b5:dc:e0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C4168E5104D077D81E4B301D2558E7CC963310C
        Validity
            Not Before: Aug  3 21:55:00 2023 GMT
            Not After : Aug  1 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:40:0e:91:c5:25:3e:74:9e:8e:6c:30:02:
                    e6:68:e8:fe:c6:59:67:8e:9b:11:6d:c3:69:b1:cd:
                    a7:5e:58:7a:2f:a8:25:ea:c3:c1:64:aa:48:76:ed:
                    2e:2a:7d:67:9b:df:9b:47:ed:c4:b8:ed:b0:34:a5:
                    08:f5:0b:2b:48:07:4f:14:8b:c9:39:c3:b4:70:72:
                    b0:47:0a:76:d1:78:88:41:8d:80:72:e8:d0:b5:b2:
                    f4:03:e1:a5:f8:df:03:a8:b0:28:91:13:1f:58:b1:
                    24:4e:ec:55:4c:f3:c6:ac:c2:ee:f9:7b:d2:a7:3b:
                    38:9b:c7:7e:b9:91:f9:c6:af:87:58:89:50:0b:74:
                    63:b9:39:4a:79:a6:55:6b:70:d6:65:ff:19:37:3c:
                    b1:da:50:8c:84:1a:78:1b:bf:29:16:81:67:80:31:
                    9f:12:2c:76:10:16:50:c2:56:84:d5:29:62:54:f8:
                    f8:10:16:f8:d9:79:9f:c7:3c:7e:8b:7c:36:2d:2f:
                    ce:76:68:c4:fc:f0:d2:22:0f:b4:1a:77:1f:be:41:
                    34:5a:50:d6:3e:86:45:e9:db:31:40:8e:b6:d2:74:
                    d5:cb:c2:1d:c3:e4:5c:13:98:63:79:2b:f2:77:6a:
                    a8:d3:af:24:bf:6e:cb:ca:2a:fc:a5:73:d5:3f:ed:
                    78:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2D:6B:7E:18:6A:21:00:86:04:40:E4:12:39:93:3A:ED:E3:D0:79
            X509v3 Authority Key Identifier:
                keyid:9C:41:68:E5:10:4D:07:7D:81:E4:B3:01:D2:55:8E:7C:C9:63:31:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/0/9C4168E5104D077D81E4B301D2558E7CC963310C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C4168E5104D077D81E4B301D2558E7CC963310C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/0/323830343a313263633a3a2f33322d3336203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:ab:d6:86:d1:97:64:c7:9e:b9:8e:bf:26:8b:63:c7:74:df:
         d9:77:38:60:e7:16:11:d9:b1:02:a7:82:bd:04:ee:05:85:62:
         63:b7:06:12:d3:52:78:ac:12:a9:1b:e3:c0:a9:bf:70:4a:4a:
         0f:c7:b7:a8:8f:45:d0:f5:1f:e1:a4:9f:13:44:79:91:71:c4:
         f1:d6:11:d0:73:69:73:ab:c2:6d:de:45:cf:b2:b1:47:03:90:
         e6:75:88:7e:b5:b4:dc:c5:99:76:0e:c1:15:de:ff:96:10:b9:
         fe:82:c4:0f:b3:7c:9d:64:93:51:20:5d:22:e4:fa:52:4a:d3:
         fd:26:55:e7:92:2b:91:a1:f0:1e:b2:5e:80:58:13:07:da:e5:
         e5:d7:c3:75:cc:61:1b:52:a4:01:d2:51:f5:a5:82:9f:0a:6a:
         f3:cf:39:7b:92:66:36:a1:cb:11:e6:65:0b:f1:c1:93:b1:3d:
         29:3d:d2:9a:96:7b:f3:a4:24:89:f1:c6:ce:63:51:0c:55:07:
         79:bc:1e:20:e4:92:77:cf:c2:35:c6:fe:60:f7:1b:4f:06:a1:
         4b:d1:8f:ed:7a:1f:e7:b8:72:ab:36:2b:f6:d6:75:ee:ad:fb:
         24:b2:e0:41:3f:de:4f:1c:ca:c9:4f:46:e6:bd:40:dc:ed:cd:
         a3:76:93:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----