Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/323830343a313461383a3a2f33322d3438203d3e20323633333432.roa
File:                     323830343a313461383a3a2f33322d3438203d3e20323633333432.roa (raw, json)
Hash identifier:          fvnYDOLDsmAQ/OXAykt+ppcPNMrZVSXrDmOQk7vb9S0=
Subject key identifier:   53:CE:BE:4E:0D:78:08:3B:7F:09:FD:D1:0C:BC:FF:EB:F8:14:DB:86
Certificate issuer:       /CN=318D12C0C3BCAB7FA95293BD6ED3A58CBA34D64A
Certificate serial:       0912E29B651CBF1CDB1C566ADD41D48AD62562A9
Authority key identifier: 31:8D:12:C0:C3:BC:AB:7F:A9:52:93:BD:6E:D3:A5:8C:BA:34:D6:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/318D12C0C3BCAB7FA95293BD6ED3A58CBA34D64A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/323830343a313461383a3a2f33322d3438203d3e20323633333432.roa
Signing time:             Mon 26 Jun 2023 08:05:09 +0000
ROA not before:           Mon 26 Jun 2023 08:00:09 +0000
ROA not after:            Mon 24 Jun 2024 08:05:09 +0000
asID:                     263342
IP address blocks:        2804:14a8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:12:e2:9b:65:1c:bf:1c:db:1c:56:6a:dd:41:d4:8a:d6:25:62:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318D12C0C3BCAB7FA95293BD6ED3A58CBA34D64A
        Validity
            Not Before: Jun 26 08:00:09 2023 GMT
            Not After : Jun 24 08:05:09 2024 GMT
        Subject: CN=53CEBE4E0D78083B7F09FDD10CBCFFEBF814DB86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:35:88:f8:fe:10:0e:ca:4a:86:dc:69:7a:3c:
                    f5:6d:56:ef:26:44:02:f2:4f:3e:4d:97:82:51:fa:
                    d8:3b:84:75:7b:a1:55:d7:40:80:8b:10:b3:79:ef:
                    e1:58:23:b9:a7:be:07:ac:9f:73:ab:2c:44:b3:f9:
                    a9:d7:f4:3a:48:0e:57:8a:99:9f:1e:3c:55:dd:09:
                    88:a1:0a:f0:77:a3:f3:98:d7:64:61:0e:37:aa:75:
                    ff:6e:f5:63:f0:84:94:d1:6d:68:f1:e0:0b:f1:19:
                    90:04:8f:37:a9:40:b6:c9:7b:4f:eb:21:c0:a1:42:
                    61:a8:1b:ca:14:7c:6c:88:42:a5:5b:c4:a2:0e:da:
                    bc:8e:d2:0b:72:9d:d5:11:5f:1a:ba:e0:c8:6f:d7:
                    fa:67:2e:90:63:74:c6:5f:db:f5:4a:6c:7e:b7:72:
                    36:98:1f:71:f5:24:84:2b:77:63:23:5a:62:f5:62:
                    b4:4f:e1:d9:b7:08:da:98:d9:85:7d:0f:b9:50:fd:
                    76:ce:27:44:93:0f:45:53:65:77:f1:6b:8b:1a:56:
                    a1:42:8d:4c:b8:f0:9c:65:0d:8c:84:5e:a8:0f:aa:
                    bf:95:ec:f6:ec:8c:40:9c:15:6d:d5:fb:b6:1b:a0:
                    7b:c8:57:2c:e9:4f:af:8e:1a:ce:58:30:ab:20:da:
                    55:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CE:BE:4E:0D:78:08:3B:7F:09:FD:D1:0C:BC:FF:EB:F8:14:DB:86
            X509v3 Authority Key Identifier:
                keyid:31:8D:12:C0:C3:BC:AB:7F:A9:52:93:BD:6E:D3:A5:8C:BA:34:D6:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/318D12C0C3BCAB7FA95293BD6ED3A58CBA34D64A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/318D12C0C3BCAB7FA95293BD6ED3A58CBA34D64A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/323830343a313461383a3a2f33322d3438203d3e20323633333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:b9:90:90:99:66:71:ab:23:a2:f6:e5:97:b2:f9:db:62:02:
         c5:cd:a7:03:6c:50:ca:0b:34:d0:25:f7:5a:1d:4d:d6:da:5d:
         1f:d5:2d:d7:e6:13:d1:a1:05:26:6d:a0:b4:eb:ad:52:b7:50:
         87:d8:e5:bc:51:dc:68:b1:9c:c8:33:fe:ed:04:d0:9a:fb:b7:
         74:e9:02:36:70:cc:fe:c7:93:9b:de:e9:82:c6:6f:90:4f:4f:
         34:78:d2:6d:fa:dd:79:b7:01:e5:94:aa:f7:02:ba:63:7d:c2:
         4f:c5:9c:98:74:47:9a:26:be:59:8b:fe:09:23:11:f8:c0:ad:
         66:ac:b0:ad:06:91:7d:20:9e:f5:a0:bd:cf:b8:59:16:d2:b0:
         84:ff:16:dd:35:94:8f:01:fc:8b:db:26:fb:b2:3c:cd:a6:b9:
         1e:c2:53:3f:b0:ec:40:aa:34:c8:7f:7a:0e:cb:d6:2b:1e:19:
         ec:7e:c2:f4:64:5d:fb:bb:bc:bb:b2:27:69:e3:98:b7:67:15:
         b7:f8:bb:5c:15:6d:bc:79:99:2d:b1:49:9f:82:89:3e:c2:e3:
         f6:ea:88:81:87:7b:85:e9:34:11:1b:00:1f:79:2b:ca:1b:09:
         17:5f:25:d4:18:60:a8:c5:b8:49:79:13:c1:00:64:38:ec:83:
         8d:3e:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----