Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/323830343a313238383a3a2f33322d3332203d3e20323633343832.roa
File:                     323830343a313238383a3a2f33322d3332203d3e20323633343832.roa (raw, json)
Hash identifier:          mPqt/nioIRiHutzLV4zH43rFRu5cr1+zq8LvFMMQlwI=
Subject key identifier:   CA:C0:DA:C9:70:71:97:94:27:77:7D:7D:69:E3:C7:23:FC:B2:4D:3B
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       6FC83AF6386EDE75745FAD30671C94E083AC8D37
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/323830343a313238383a3a2f33322d3332203d3e20323633343832.roa
Signing time:             Wed 11 Oct 2023 14:28:26 +0000
ROA not before:           Wed 11 Oct 2023 14:23:26 +0000
ROA not after:            Wed 09 Oct 2024 14:28:26 +0000
asID:                     263482
IP address blocks:        2804:1288::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c8:3a:f6:38:6e:de:75:74:5f:ad:30:67:1c:94:e0:83:ac:8d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Oct 11 14:23:26 2023 GMT
            Not After : Oct  9 14:28:26 2024 GMT
        Subject: CN=CAC0DAC97071979427777D7D69E3C723FCB24D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:2a:5b:cc:77:1d:1b:e8:65:fa:4e:84:b2:
                    6f:7f:04:91:11:a6:5c:7d:b9:54:58:e9:77:9f:3b:
                    cb:40:fb:26:24:97:91:8c:64:46:33:14:da:bf:80:
                    c2:66:a8:4e:47:e8:7b:f6:9c:77:36:35:e8:1b:36:
                    0c:bb:2b:6b:fc:5c:93:ff:bf:84:ba:38:32:30:4d:
                    c4:2d:16:5c:4d:62:12:d8:73:30:cd:d9:44:9f:e0:
                    7c:93:14:67:ce:de:13:14:f7:04:06:40:7c:37:95:
                    1a:96:3b:02:9f:3d:82:5b:cc:b1:ab:9e:50:00:d7:
                    1f:b1:f8:4c:b5:95:27:80:3f:6f:26:c0:3e:04:fe:
                    ee:5a:67:48:be:f6:80:82:ba:88:14:b9:a6:66:d6:
                    c8:ae:00:da:ce:ab:4d:b6:49:b5:ab:eb:78:5b:f6:
                    e0:a4:16:d1:f9:54:ce:b1:c4:ee:17:72:bf:fe:30:
                    2e:07:51:e2:5d:ea:0c:d3:1e:9f:58:b0:30:29:56:
                    f0:a1:cc:f5:ae:56:f5:2d:24:cd:8f:66:40:46:a5:
                    6a:cf:c8:a8:b8:9d:92:3c:4c:6e:92:c7:6e:28:b3:
                    7d:8d:44:a0:9f:6e:bd:bc:52:54:7c:14:2f:0a:96:
                    47:c0:5a:6b:98:2c:a0:47:4b:af:9c:73:fa:b2:84:
                    38:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C0:DA:C9:70:71:97:94:27:77:7D:7D:69:E3:C7:23:FC:B2:4D:3B
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/323830343a313238383a3a2f33322d3332203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1288::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:61:e8:32:79:dc:32:7c:8b:c7:7b:71:48:f2:ec:58:5c:1c:
         a7:fc:60:13:75:66:10:92:fa:29:ae:1b:5e:85:ed:fa:70:17:
         c4:c3:9e:66:90:51:e9:7c:b4:76:99:bf:29:3f:9d:55:9a:14:
         cb:84:5f:ef:45:9e:9c:a2:e9:92:9a:60:36:f9:86:da:4d:b9:
         97:20:03:d2:70:10:55:1a:fc:0c:a4:3f:28:99:cb:2c:18:d1:
         b5:73:53:ab:83:f8:a9:73:23:b3:fc:28:5e:69:9a:cf:17:19:
         48:36:c3:af:18:5a:b6:ec:47:72:67:3f:d3:2f:a1:40:68:c3:
         4c:b7:2d:e6:49:bd:b1:c8:85:fa:74:65:7e:05:76:4d:5d:71:
         a3:45:7f:de:e3:17:d1:59:d7:a6:c1:c7:53:e3:1f:c1:fc:5e:
         32:2c:cd:5b:cb:8d:93:60:05:e1:24:b6:83:57:d5:f9:58:44:
         2e:52:0f:f4:e6:1b:9e:78:83:06:e0:3c:6a:34:75:e3:35:b3:
         e4:f3:78:7c:33:52:70:46:75:36:4f:52:59:8a:05:a6:db:ab:
         0d:01:d5:7b:ca:1b:85:25:e2:77:fa:5f:22:05:93:5d:01:0e:
         52:42:d7:82:43:85:69:2f:e8:ec:e3:d1:ae:c0:fc:59:93:84:
         d8:44:6c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----