Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/323830343a346665343a3a2f33322d313238203d3e203533303836.roa
File:                     323830343a346665343a3a2f33322d313238203d3e203533303836.roa (raw, json)
Hash identifier:          9A+C9z5LlghR1Cf7JzWzRbo13uInvhPJZcoDYBTE748=
Subject key identifier:   F1:A7:D2:06:4E:9D:93:AF:6D:48:CA:CB:1F:E3:8C:9D:9D:7B:44:3C
Certificate issuer:       /CN=AB78EB301E480AA8F834B74B79980698EA6E1E51
Certificate serial:       17DB0DE7968ABDC219F35F7B7A47371687D8AD36
Authority key identifier: AB:78:EB:30:1E:48:0A:A8:F8:34:B7:4B:79:98:06:98:EA:6E:1E:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB78EB301E480AA8F834B74B79980698EA6E1E51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/323830343a346665343a3a2f33322d313238203d3e203533303836.roa
Signing time:             Tue 28 Mar 2023 12:53:08 +0000
ROA not before:           Tue 28 Mar 2023 12:48:08 +0000
ROA not after:            Tue 26 Mar 2024 12:53:08 +0000
asID:                     53086
IP address blocks:        2804:4fe4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:db:0d:e7:96:8a:bd:c2:19:f3:5f:7b:7a:47:37:16:87:d8:ad:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB78EB301E480AA8F834B74B79980698EA6E1E51
        Validity
            Not Before: Mar 28 12:48:08 2023 GMT
            Not After : Mar 26 12:53:08 2024 GMT
        Subject: CN=F1A7D2064E9D93AF6D48CACB1FE38C9D9D7B443C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:06:09:b7:f7:fc:45:64:44:dc:73:75:03:
                    b9:bc:1c:14:e0:1c:b0:8e:63:e2:88:ec:2b:cb:90:
                    45:ec:d5:85:54:55:fc:e2:2a:94:29:78:24:e3:49:
                    15:d6:2b:b6:ce:80:8f:35:d5:c0:f1:ef:ee:62:a7:
                    31:99:de:5a:5d:a4:06:16:3a:dd:31:82:dc:4a:1c:
                    a8:ca:a3:6e:38:bf:3f:ad:f4:b4:cc:bb:97:54:0f:
                    44:73:ad:4b:10:e0:98:be:78:aa:e3:80:e9:cf:be:
                    e7:b4:1f:75:9b:1d:29:19:b3:18:78:50:d8:dd:33:
                    5e:e8:5d:3b:4a:35:fb:ea:73:90:2a:8d:d6:e2:6a:
                    6d:e9:10:ad:ff:d9:d3:38:49:47:45:c9:c3:89:a3:
                    06:b3:46:0b:12:5d:35:1a:b9:49:35:09:39:55:92:
                    5a:19:12:fb:f9:fe:bb:35:14:8f:ae:13:ec:06:02:
                    fc:cb:c1:d0:4b:19:e0:66:29:09:f2:e6:b7:18:fd:
                    ee:6a:c1:da:74:73:a4:e0:51:57:2d:6b:4e:ab:a7:
                    63:29:ba:cd:dc:04:2d:39:44:63:38:8f:cb:b5:af:
                    85:3d:67:91:e2:12:23:91:4d:c0:f4:9d:06:59:dc:
                    3f:99:12:e8:b7:0f:c1:3d:39:e4:38:e3:8f:f1:d9:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A7:D2:06:4E:9D:93:AF:6D:48:CA:CB:1F:E3:8C:9D:9D:7B:44:3C
            X509v3 Authority Key Identifier:
                keyid:AB:78:EB:30:1E:48:0A:A8:F8:34:B7:4B:79:98:06:98:EA:6E:1E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/AB78EB301E480AA8F834B74B79980698EA6E1E51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB78EB301E480AA8F834B74B79980698EA6E1E51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/323830343a346665343a3a2f33322d313238203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:f0:ef:fb:4d:3b:fe:d4:09:cf:96:a8:2f:f6:40:b4:20:03:
         a5:8d:e1:db:54:66:6e:7e:b3:bb:1a:93:10:29:47:e9:f7:d4:
         78:c5:4d:4e:47:a8:85:97:92:27:e8:c9:1f:48:dc:c8:4c:37:
         1e:74:55:2a:d4:b2:b2:6f:8b:e4:a6:fe:18:66:d9:1e:e3:e0:
         e8:b7:f9:73:d7:4a:a4:09:df:5c:65:0a:fc:15:3e:da:21:3e:
         49:b9:3c:ba:52:44:a4:87:64:76:1b:c0:23:29:d0:5e:df:36:
         ec:3f:8a:92:2a:bf:b8:d1:1b:69:32:9b:ba:bb:ff:fe:2b:c4:
         f1:39:38:1c:0c:1e:88:b9:04:c1:b5:e6:e2:d3:e5:ed:de:54:
         e9:ad:84:e9:21:f8:34:3b:fe:cd:bf:c3:da:88:2e:ef:7a:81:
         24:03:67:32:bc:fe:f9:70:2c:b9:d8:e6:75:7d:8f:9f:f4:63:
         1d:5c:e9:53:23:91:0d:92:b5:63:ed:1a:dd:c8:91:91:68:34:
         97:36:06:40:27:cd:8b:ed:2c:12:b4:d6:d8:c2:f4:6d:ff:3b:
         42:c0:2f:f6:55:25:7c:5e:e6:e7:0c:8d:95:1d:82:fc:2a:1f:
         8d:ce:03:2e:10:8e:91:f6:e4:20:e2:9f:51:7f:0c:7b:0e:83:
         4b:1c:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----