Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33322d3332203d3e20323732353636.roa
File:                     323830343a383533633a3a2f33322d3332203d3e20323732353636.roa (raw, json)
Hash identifier:          T49fOCXN7fqT9+YaQ0LmdAWlXn/rnriZlaDIObNFcBY=
Subject key identifier:   F2:60:37:2C:70:5F:64:D1:47:D4:36:3C:53:69:DE:9F:BC:25:50:A4
Certificate issuer:       /CN=883688265763EC4B7AD8148EC2953C24728E63D5
Certificate serial:       3EAFE796216C6471D2F377A96F21065FFDB3D7BB
Authority key identifier: 88:36:88:26:57:63:EC:4B:7A:D8:14:8E:C2:95:3C:24:72:8E:63:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/883688265763EC4B7AD8148EC2953C24728E63D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33322d3332203d3e20323732353636.roa
Signing time:             Wed 01 Nov 2023 17:00:00 +0000
ROA not before:           Wed 01 Nov 2023 16:55:00 +0000
ROA not after:            Wed 30 Oct 2024 17:00:00 +0000
asID:                     272566
IP address blocks:        2804:853c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:af:e7:96:21:6c:64:71:d2:f3:77:a9:6f:21:06:5f:fd:b3:d7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883688265763EC4B7AD8148EC2953C24728E63D5
        Validity
            Not Before: Nov  1 16:55:00 2023 GMT
            Not After : Oct 30 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:61:8e:c3:ad:3e:1d:90:8e:8f:ab:ed:6c:
                    b9:a9:86:e0:97:65:18:57:c5:c0:6e:c4:7d:e7:49:
                    4a:aa:54:ba:25:5c:bb:c8:b0:90:e7:6b:70:1f:63:
                    75:2d:da:6d:e2:2c:1c:69:30:56:fa:d9:b8:8f:35:
                    2a:bd:1e:0b:ad:90:6b:e5:d0:cb:6b:fe:2c:72:f8:
                    a7:7d:74:32:db:a8:5f:d6:2c:4e:6d:0f:42:f7:91:
                    02:32:e1:a7:fc:03:4e:c3:ef:d4:bf:84:bd:00:9c:
                    d4:52:ec:06:3f:af:e2:a8:05:c5:02:42:51:60:54:
                    78:36:e6:bd:d8:56:a9:d0:b2:57:fd:77:00:d4:91:
                    30:c0:18:25:e6:14:a0:d4:ed:44:9b:a1:c5:ff:6d:
                    6f:e6:a9:9c:cd:95:ad:19:80:b6:50:9b:96:96:18:
                    06:33:63:8d:dc:b3:b1:c5:3a:19:98:cf:ef:e2:89:
                    45:e2:69:8f:51:9c:ab:7b:90:46:61:46:1c:7f:21:
                    58:ca:55:d7:23:6e:cf:4a:2f:c5:c5:54:06:d1:0f:
                    a6:ac:d0:e6:b7:b7:29:c8:62:9c:fa:7a:d2:22:ba:
                    27:e6:f2:25:68:9e:50:8d:77:95:67:3b:dd:30:ca:
                    59:02:56:27:c5:b3:e5:79:09:ef:d4:59:30:12:6e:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:60:37:2C:70:5F:64:D1:47:D4:36:3C:53:69:DE:9F:BC:25:50:A4
            X509v3 Authority Key Identifier:
                keyid:88:36:88:26:57:63:EC:4B:7A:D8:14:8E:C2:95:3C:24:72:8E:63:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/883688265763EC4B7AD8148EC2953C24728E63D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/883688265763EC4B7AD8148EC2953C24728E63D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33322d3332203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:09:fd:8f:ee:8c:76:8c:8b:70:bb:0f:96:f4:2a:75:22:ec:
         c6:04:ef:8c:de:13:ba:cb:d9:95:a8:20:ef:b3:fd:c7:79:f1:
         0a:ea:1c:98:17:0e:07:e5:14:a0:92:d2:54:b3:0a:0f:ea:29:
         16:99:b2:56:7c:be:e0:41:4e:63:91:16:0a:a5:b6:64:3f:d7:
         71:c9:53:8a:5d:48:39:f5:df:70:20:a4:70:ca:b8:c2:c6:ba:
         9d:ea:85:f3:be:5c:e0:ac:8e:cc:48:58:d4:44:5f:bc:72:82:
         16:a2:3c:88:df:2c:e0:71:77:ab:81:cb:43:b3:f5:20:3f:d1:
         dd:b9:1f:69:62:78:82:78:4a:61:4a:4a:fd:d3:9f:ed:d3:9c:
         f2:35:a3:47:01:02:5c:af:00:0f:b0:f5:40:bb:4f:74:b9:29:
         0b:e6:c1:01:89:76:35:5a:ca:91:72:f7:74:d7:fb:ab:f5:c4:
         97:7f:19:80:a8:fa:11:80:7d:c5:78:bf:4a:21:cf:4b:d1:ed:
         78:4d:83:31:0d:80:61:7e:87:31:ba:c8:b3:a8:af:ae:d8:ff:
         ec:96:74:42:9a:a0:ba:62:f0:26:14:f2:58:f2:98:f7:87:0a:
         b3:3a:64:78:d7:3d:7e:55:35:f5:36:03:28:9f:f1:6b:56:99:
         82:cd:f8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----