Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/323830343a323938383a3a2f33322d3332203d3e20323634303230.roa
File:                     323830343a323938383a3a2f33322d3332203d3e20323634303230.roa (raw, json)
Hash identifier:          MXkyYzFK1sDPKoShGxKCHMLQMrrS0wVOHyCxNAARj/o=
Subject key identifier:   76:C9:60:41:A0:38:C4:72:AE:D4:E1:1E:60:FE:38:45:43:FB:BC:94
Certificate issuer:       /CN=67491EDA76E398AB01F0CC6CD7474F33F5D99A5B
Certificate serial:       01CF47465BDFE6BBF67EC5822923E24FEBA2A874
Authority key identifier: 67:49:1E:DA:76:E3:98:AB:01:F0:CC:6C:D7:47:4F:33:F5:D9:9A:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/323830343a323938383a3a2f33322d3332203d3e20323634303230.roa
Signing time:             Tue 16 May 2023 12:29:13 +0000
ROA not before:           Tue 16 May 2023 12:24:13 +0000
ROA not after:            Tue 14 May 2024 12:29:13 +0000
asID:                     264020
IP address blocks:        2804:2988::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:cf:47:46:5b:df:e6:bb:f6:7e:c5:82:29:23:e2:4f:eb:a2:a8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67491EDA76E398AB01F0CC6CD7474F33F5D99A5B
        Validity
            Not Before: May 16 12:24:13 2023 GMT
            Not After : May 14 12:29:13 2024 GMT
        Subject: CN=76C96041A038C472AED4E11E60FE384543FBBC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:b2:33:f2:7f:eb:ef:65:85:4a:bc:52:bb:
                    4e:53:91:a6:a3:16:28:7d:b9:bb:a5:c1:f0:59:ac:
                    e8:84:41:1c:91:78:dc:0b:6e:b5:67:7d:95:39:fc:
                    f6:0a:4e:a5:f9:ba:1f:af:da:4a:3f:1e:23:cf:2c:
                    e2:d4:ef:a9:ba:27:36:1c:c8:e8:e5:a2:d5:d3:2b:
                    75:06:3a:a9:ff:69:21:64:17:0f:87:fa:d0:1a:15:
                    28:0b:e5:08:f2:ff:33:09:77:f0:10:c0:89:17:c3:
                    c3:c3:81:a8:b6:fc:1a:8f:f9:74:24:1c:60:63:85:
                    0b:49:97:70:2b:d3:d8:b1:66:4b:6e:76:35:6e:9a:
                    3e:91:bf:b6:50:db:09:f6:10:28:dd:84:40:a9:43:
                    ce:e3:a1:f3:35:45:0c:8f:4f:ea:85:7b:19:e9:20:
                    07:b5:fe:1e:38:e2:00:df:cf:72:9f:89:09:fc:10:
                    3a:d1:8c:a9:34:88:d5:11:c6:74:3c:ec:f3:1b:d9:
                    94:51:4d:c1:93:09:76:a9:3e:1b:9a:bb:b9:5a:18:
                    6f:9f:95:a2:34:a4:da:dd:99:33:b0:3d:16:3e:68:
                    8b:74:25:c0:ae:a0:9a:a4:24:26:58:09:3e:b7:e6:
                    41:84:96:fb:87:4d:55:74:f7:43:39:81:ef:c5:e0:
                    4b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C9:60:41:A0:38:C4:72:AE:D4:E1:1E:60:FE:38:45:43:FB:BC:94
            X509v3 Authority Key Identifier:
                keyid:67:49:1E:DA:76:E3:98:AB:01:F0:CC:6C:D7:47:4F:33:F5:D9:9A:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/323830343a323938383a3a2f33322d3332203d3e20323634303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2988::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:df:a6:e5:55:b7:cd:aa:dc:fd:59:e9:e5:be:21:38:7b:b6:
         ce:c9:85:a5:0b:3d:4a:de:65:db:ab:e5:9d:eb:2a:41:68:5c:
         48:8b:4f:a4:2b:23:4a:a9:26:70:c3:0c:df:5c:18:db:1a:90:
         7a:44:92:4a:b8:63:53:92:41:31:b2:7a:43:2c:25:bb:ed:44:
         12:1a:5a:5d:d3:ee:e9:8c:6a:26:fe:05:39:8d:d0:6b:12:f5:
         bb:b5:0b:48:f4:5e:56:1a:66:94:be:30:47:33:cd:d2:17:c9:
         22:e9:ce:2f:9f:6b:62:98:ed:7f:80:51:fb:bc:c2:7e:44:eb:
         51:15:ac:d5:58:96:4a:00:f0:08:52:b5:fd:b5:20:5e:93:64:
         33:2e:55:78:47:76:e1:9b:e4:39:fa:0f:6d:e7:cf:96:a2:4e:
         b5:b8:6c:86:68:74:44:68:f8:51:33:ac:2f:b6:a2:2b:61:49:
         ea:d3:3e:8d:ab:0a:19:db:4a:7d:9b:a3:b5:0f:85:25:cb:40:
         3f:56:51:8a:7b:db:1b:5f:95:6b:14:48:12:5c:a7:e6:a5:df:
         70:3f:8a:ec:64:3a:75:d6:fe:c8:a4:2d:d7:f9:67:57:e1:ce:
         95:80:63:3f:56:24:5f:cf:26:61:82:43:7f:2d:cd:91:6e:02:
         23:d0:5f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----