Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/323830343a313235343a3a2f33322d3438203d3e20323633343730.roa
File:                     323830343a313235343a3a2f33322d3438203d3e20323633343730.roa (raw, json)
Hash identifier:          WtOrXLpr75t1SJu3BlV5iaVeA0JOaPRlu+hIH+qg7X0=
Subject key identifier:   14:20:B2:97:0A:22:06:5D:67:AB:38:28:4B:B1:97:48:9D:8D:FF:E4
Certificate issuer:       /CN=0031EE5AFB733F39AED0585DB03F97D7C8F34A4D
Certificate serial:       7E20C8BECCB8501AC66192EFD1B5E60B1B6402E7
Authority key identifier: 00:31:EE:5A:FB:73:3F:39:AE:D0:58:5D:B0:3F:97:D7:C8:F3:4A:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0031EE5AFB733F39AED0585DB03F97D7C8F34A4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/323830343a313235343a3a2f33322d3438203d3e20323633343730.roa
Signing time:             Thu 21 Sep 2023 13:36:00 +0000
ROA not before:           Thu 21 Sep 2023 13:31:00 +0000
ROA not after:            Thu 19 Sep 2024 13:36:00 +0000
asID:                     263470
IP address blocks:        2804:1254::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:20:c8:be:cc:b8:50:1a:c6:61:92:ef:d1:b5:e6:0b:1b:64:02:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0031EE5AFB733F39AED0585DB03F97D7C8F34A4D
        Validity
            Not Before: Sep 21 13:31:00 2023 GMT
            Not After : Sep 19 13:36:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ec:21:c6:b4:f7:f1:e8:4d:1d:6a:e3:ce:bc:
                    08:4c:c2:e2:d5:ad:92:e8:27:d1:ed:3e:50:b0:a1:
                    88:3a:ec:d8:2b:e0:1f:7a:0f:f4:ee:44:6d:5d:b2:
                    e2:48:b9:e9:6f:2e:4a:08:82:dc:50:d7:3f:e5:51:
                    e3:23:da:e4:3d:91:61:e5:25:b5:0b:f9:4c:00:6e:
                    29:8c:4c:8d:9f:15:68:d7:fa:36:49:02:03:dd:dc:
                    be:cf:2b:fb:dd:f3:40:c1:ce:0a:8a:b3:d2:e3:38:
                    c8:50:f6:b8:c1:64:9e:b0:ed:27:55:04:3c:13:17:
                    d8:4b:0b:4b:aa:85:b5:3f:3b:35:7a:df:9f:68:b5:
                    0b:0c:e0:47:b0:68:cf:44:4c:c8:fd:6c:a9:51:17:
                    50:cd:09:48:cf:af:21:a4:89:66:97:be:7c:1d:40:
                    0d:99:93:14:27:7c:2f:de:71:73:01:aa:0c:bf:a9:
                    f9:de:3a:68:e3:7d:3d:7b:14:24:ac:6a:43:61:0a:
                    1d:0c:8d:0f:72:75:82:31:5d:57:5c:d0:6e:b6:62:
                    45:9a:b7:9d:f3:b5:09:f9:c2:50:52:2a:65:a8:f6:
                    72:0b:19:88:55:d1:c9:0c:b1:d3:14:aa:2c:5e:55:
                    1f:12:c1:ae:2b:7d:6d:27:fa:1e:4d:4b:e4:32:0a:
                    95:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:20:B2:97:0A:22:06:5D:67:AB:38:28:4B:B1:97:48:9D:8D:FF:E4
            X509v3 Authority Key Identifier:
                keyid:00:31:EE:5A:FB:73:3F:39:AE:D0:58:5D:B0:3F:97:D7:C8:F3:4A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/0031EE5AFB733F39AED0585DB03F97D7C8F34A4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0031EE5AFB733F39AED0585DB03F97D7C8F34A4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/323830343a313235343a3a2f33322d3438203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1254::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:6d:09:4f:1a:7a:12:cd:5a:ad:c1:2d:4c:19:f1:31:e8:97:
         30:13:94:85:db:bd:34:eb:8e:86:d2:b0:8d:3f:a5:af:d9:69:
         8a:a3:14:fe:af:ca:46:ca:28:9e:4a:ae:77:c8:55:c3:fe:e2:
         88:ad:9a:84:56:ea:47:cd:63:ba:d5:79:0a:2b:34:bd:ea:f5:
         3a:cc:97:34:ce:ea:d2:5c:62:83:0f:81:72:30:21:3b:08:14:
         61:ed:38:43:00:45:ab:76:ad:81:ee:25:0b:be:36:0b:d4:4c:
         31:ae:68:7e:37:16:9e:86:56:d4:4f:e7:a6:0b:1d:39:86:c9:
         f8:26:b9:2c:7d:eb:52:c8:22:7e:82:47:c8:07:0f:4e:7b:85:
         5b:86:8f:2a:f0:c1:04:ab:cb:31:1e:aa:4d:74:96:6b:0b:db:
         4e:80:ff:6a:bd:1a:c7:96:6e:a5:16:0c:38:1b:46:2f:2e:51:
         50:61:1b:44:4f:d9:c0:38:0d:95:a5:4e:a8:4c:23:b4:24:7c:
         c7:7f:c0:f7:fa:a4:9d:f1:bc:95:41:6f:aa:1d:b0:25:54:18:
         b7:68:a6:5e:1d:75:26:55:bd:80:e2:ad:8e:f9:ef:2b:c3:e6:
         af:15:35:44:87:5b:b4:33:e4:d9:c7:56:90:87:ea:72:5b:29:
         be:a0:da:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----