Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/323830343a333131633a3a2f33322d3438203d3e20323634393933.roa
File:                     323830343a333131633a3a2f33322d3438203d3e20323634393933.roa (raw, json)
Hash identifier:          gyiaj5bXN+D8tFgDlm+/J1Y+B/eFpSzg9MdTpx3elj8=
Subject key identifier:   0A:6F:FE:E3:BC:38:E1:8C:71:FF:89:4C:D4:05:FA:F9:20:54:C0:AD
Certificate issuer:       /CN=9820C6E503613C874E71459373B23F1FF20274DE
Certificate serial:       350FBF7C932FDD0F75E0210F645DFBE7B477D074
Authority key identifier: 98:20:C6:E5:03:61:3C:87:4E:71:45:93:73:B2:3F:1F:F2:02:74:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9820C6E503613C874E71459373B23F1FF20274DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/323830343a333131633a3a2f33322d3438203d3e20323634393933.roa
Signing time:             Thu 22 Jun 2023 22:10:41 +0000
ROA not before:           Thu 22 Jun 2023 22:05:41 +0000
ROA not after:            Thu 20 Jun 2024 22:10:41 +0000
asID:                     264993
IP address blocks:        2804:311c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0f:bf:7c:93:2f:dd:0f:75:e0:21:0f:64:5d:fb:e7:b4:77:d0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9820C6E503613C874E71459373B23F1FF20274DE
        Validity
            Not Before: Jun 22 22:05:41 2023 GMT
            Not After : Jun 20 22:10:41 2024 GMT
        Subject: CN=0A6FFEE3BC38E18C71FF894CD405FAF92054C0AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:94:55:52:73:ef:4b:cd:52:a0:ba:e6:70:
                    e8:3a:fc:d4:02:b6:c4:a6:4c:f0:91:ae:53:6f:80:
                    ad:53:ad:75:ff:1a:6c:dc:79:78:24:00:d8:a3:3c:
                    48:96:3c:65:b5:a4:dc:aa:3a:0c:7d:c0:05:25:5e:
                    22:63:39:c0:3b:92:66:b5:fc:a7:65:4d:fe:56:9b:
                    44:46:ef:0c:e6:1f:01:63:29:a2:f4:26:96:23:44:
                    29:dc:63:1f:61:be:69:9b:a3:db:49:7c:02:73:c1:
                    63:e6:e2:8f:11:b0:d9:76:a9:a2:6a:d8:1b:65:af:
                    a2:76:c2:14:70:f9:04:46:ed:ca:68:13:41:34:8c:
                    c8:d1:38:3d:cd:8b:41:ca:e4:f8:08:6d:75:3d:a0:
                    ff:f4:93:98:fc:f9:e0:66:cf:ac:f0:d6:d8:bc:77:
                    44:9e:b8:db:93:0c:41:d3:fb:3b:d8:8c:1e:bc:1d:
                    d0:95:3f:d6:2a:f6:c9:2c:e7:76:1a:dc:69:56:4b:
                    84:07:8b:45:42:d3:2a:be:e9:e4:5e:06:34:2a:a5:
                    e9:74:4b:ef:e7:6a:0b:06:b0:ed:16:1e:54:0a:eb:
                    12:2e:6e:de:55:d9:82:5f:9c:43:27:79:8a:9a:b5:
                    52:08:21:cd:c8:62:ab:a4:93:b6:c5:54:91:0b:51:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6F:FE:E3:BC:38:E1:8C:71:FF:89:4C:D4:05:FA:F9:20:54:C0:AD
            X509v3 Authority Key Identifier:
                keyid:98:20:C6:E5:03:61:3C:87:4E:71:45:93:73:B2:3F:1F:F2:02:74:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/9820C6E503613C874E71459373B23F1FF20274DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9820C6E503613C874E71459373B23F1FF20274DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/323830343a333131633a3a2f33322d3438203d3e20323634393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:311c::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:f2:57:dc:cd:1c:cd:d8:21:3f:9d:49:2c:6b:01:f3:1e:13:
         75:47:e3:e0:c1:70:4d:6a:a2:33:da:22:2b:85:cf:a1:fb:fe:
         b5:89:76:8b:a7:3e:ff:07:90:c4:e0:c3:c8:33:37:06:e8:85:
         50:5e:6b:75:7a:05:65:1f:a0:5a:f3:4e:4f:e2:89:1c:d1:48:
         60:0d:23:c4:a2:1d:33:b1:de:51:b9:2f:ec:04:eb:9a:97:9b:
         b4:b6:6f:c4:32:42:5d:a2:52:3e:bb:5a:ca:55:0a:0b:61:11:
         b8:36:56:f9:4b:8b:ab:ee:f9:de:b1:4a:4b:a7:bf:b5:04:1a:
         53:12:3c:f0:a2:e8:85:59:d5:46:f2:26:c7:05:20:3b:f3:30:
         cf:c9:42:5d:a9:60:f8:73:90:31:d0:da:c0:27:62:45:11:6a:
         04:ba:a5:74:ee:c7:83:bf:91:f8:e5:36:69:49:17:6f:84:c0:
         8b:ac:e4:62:33:81:71:c7:f6:25:e3:38:cd:0b:ea:23:a7:02:
         8a:fd:ca:ae:1f:9e:74:80:d8:b5:f4:61:35:f0:e2:76:fd:1c:
         8b:97:dd:58:2f:6b:00:f8:20:5c:e1:a3:0c:98:49:ff:4d:3f:
         ec:ca:5e:cc:ed:fb:08:8c:8f:10:74:26:fe:f0:f3:79:b5:27:
         bf:55:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----