Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/323830343a313035633a3a2f33322d3336203d3e20323633363331.roa
File:                     323830343a313035633a3a2f33322d3336203d3e20323633363331.roa (raw, json)
Hash identifier:          bJV4HC+wt3ZzF+kiYTStM9PDS+JNWy6DOVMLITyl9XM=
Subject key identifier:   E5:1A:F2:90:66:22:75:F0:69:1D:4D:6C:67:BD:61:6C:F6:F8:F3:5A
Certificate issuer:       /CN=3A5EAC930C5E91DCAA01573B44ED54C8E9DD6DB6
Certificate serial:       2C3E77E3671E6C9E802D651A71FD76D4E9FEB7DF
Authority key identifier: 3A:5E:AC:93:0C:5E:91:DC:AA:01:57:3B:44:ED:54:C8:E9:DD:6D:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A5EAC930C5E91DCAA01573B44ED54C8E9DD6DB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/323830343a313035633a3a2f33322d3336203d3e20323633363331.roa
Signing time:             Sun 10 Sep 2023 19:00:01 +0000
ROA not before:           Sun 10 Sep 2023 18:55:01 +0000
ROA not after:            Sun 08 Sep 2024 19:00:01 +0000
asID:                     263631
IP address blocks:        2804:105c::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3e:77:e3:67:1e:6c:9e:80:2d:65:1a:71:fd:76:d4:e9:fe:b7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A5EAC930C5E91DCAA01573B44ED54C8E9DD6DB6
        Validity
            Not Before: Sep 10 18:55:01 2023 GMT
            Not After : Sep  8 19:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:62:5a:f4:9e:f3:92:9b:1f:c3:fd:3c:39:
                    1e:81:d9:53:51:fd:0c:f6:b9:90:1a:5d:cd:3b:d8:
                    b5:27:ec:f8:c6:49:5c:3f:80:d9:e9:03:6f:d4:cf:
                    03:d1:de:bb:58:83:31:7a:9f:4c:8d:90:51:6f:4f:
                    a2:5e:3d:4d:5d:26:16:6d:dc:0a:50:d2:74:4f:eb:
                    c3:0d:ca:79:39:93:50:64:a8:60:8a:61:6e:d6:3f:
                    51:51:a5:d8:b7:95:d3:9e:a3:60:b4:33:ea:98:f0:
                    a2:91:46:8c:77:a5:a3:ff:55:71:02:7b:90:c8:2b:
                    c0:80:2d:35:7f:d2:72:17:30:3f:2a:24:1e:a7:ba:
                    a9:91:28:e7:a1:57:ba:7c:4e:5d:cb:12:8c:61:af:
                    fe:04:63:a7:ba:45:c4:43:eb:6a:1f:a4:6f:2f:d6:
                    ca:c1:db:93:e9:f7:83:b8:9c:0f:51:3a:d7:11:15:
                    ee:67:5f:29:25:5f:62:5f:0c:29:ff:11:95:fe:61:
                    a9:9f:12:6c:ea:68:f3:a5:ba:6d:be:32:ba:18:3d:
                    39:51:b5:4e:09:69:65:43:dd:39:ed:29:ea:57:73:
                    67:01:de:57:1b:c0:db:80:dc:67:3d:37:73:e1:9f:
                    ee:a5:3b:b1:65:e1:00:6a:8b:85:2f:18:1b:88:a4:
                    b6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1A:F2:90:66:22:75:F0:69:1D:4D:6C:67:BD:61:6C:F6:F8:F3:5A
            X509v3 Authority Key Identifier:
                keyid:3A:5E:AC:93:0C:5E:91:DC:AA:01:57:3B:44:ED:54:C8:E9:DD:6D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/3A5EAC930C5E91DCAA01573B44ED54C8E9DD6DB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A5EAC930C5E91DCAA01573B44ED54C8E9DD6DB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/323830343a313035633a3a2f33322d3336203d3e20323633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:105c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:81:dc:dc:ff:0c:1c:c4:de:ee:16:57:b7:67:57:3f:48:97:
         d6:3f:4b:5b:d9:4f:68:f9:ff:fb:2d:d9:72:aa:a4:8c:8b:fc:
         4b:5a:8d:b9:f1:96:2c:56:2f:fe:32:70:b1:48:52:c1:c6:71:
         b2:fb:cf:03:54:59:73:f7:3d:8e:22:1e:0c:ab:d2:eb:60:4e:
         8e:0d:23:50:f1:66:09:9a:b6:61:1c:79:31:94:1f:c3:37:50:
         5f:60:ed:58:d2:31:28:27:b0:3e:02:ad:d1:bb:e0:f5:e3:1e:
         d3:87:b2:e6:51:86:ae:21:3e:11:91:00:a9:02:e4:6e:50:8e:
         05:7f:d0:6b:aa:5e:80:26:fc:1f:32:f2:36:58:6d:80:6b:9c:
         ab:2d:18:b3:75:2c:32:d3:cc:1d:7a:f7:0d:4d:8b:a6:31:73:
         bd:b3:3b:15:12:3e:77:b6:8e:58:ee:b1:b9:c4:f2:f0:a6:67:
         53:db:3d:b6:ce:ba:f8:1f:7d:3a:3c:35:b8:b3:63:6d:49:5a:
         1d:a3:5a:ae:82:1d:ee:2d:9e:bb:b7:2a:2e:74:0f:f2:44:82:
         8b:dd:9e:a1:14:aa:7f:a2:42:2a:e9:eb:37:94:f1:f7:0c:3e:
         08:ae:84:00:f3:a8:3b:05:14:ff:e5:06:9c:e7:42:45:6e:7e:
         69:ce:a8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----