Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/323830343a3262383a3a2f33322d3438203d3e203238313330.roa
File:                     323830343a3262383a3a2f33322d3438203d3e203238313330.roa (raw, json)
Hash identifier:          Mv7EtvpMBK4ncoU1C2j+KSH6tGdmtU8RboWW3LT/87o=
Subject key identifier:   5A:80:04:3D:B7:53:90:9A:9D:D2:90:31:AE:CD:70:B2:16:15:19:AB
Certificate issuer:       /CN=62BD461875786A00B21F073E8D02ACCE9BC15828
Certificate serial:       6E7EB279BC682C08C7FD26B0F92FA9DAA7E3C803
Authority key identifier: 62:BD:46:18:75:78:6A:00:B2:1F:07:3E:8D:02:AC:CE:9B:C1:58:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62BD461875786A00B21F073E8D02ACCE9BC15828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/323830343a3262383a3a2f33322d3438203d3e203238313330.roa
Signing time:             Mon 17 Jul 2023 14:36:00 +0000
ROA not before:           Mon 17 Jul 2023 14:31:00 +0000
ROA not after:            Mon 15 Jul 2024 14:36:00 +0000
asID:                     28130
IP address blocks:        2804:2b8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7e:b2:79:bc:68:2c:08:c7:fd:26:b0:f9:2f:a9:da:a7:e3:c8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BD461875786A00B21F073E8D02ACCE9BC15828
        Validity
            Not Before: Jul 17 14:31:00 2023 GMT
            Not After : Jul 15 14:36:00 2024 GMT
        Subject: CN=5A80043DB753909A9DD29031AECD70B2161519AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8d:ef:dd:96:53:18:66:63:b5:b6:13:fa:f5:
                    49:0e:d9:75:8d:04:20:68:6a:b4:bb:40:d3:0a:19:
                    89:af:d1:31:fa:b9:18:86:4e:5d:cd:24:ea:54:6b:
                    66:0f:c1:ae:fe:b1:f2:dc:2c:4a:67:25:85:79:ff:
                    02:ce:37:5e:31:32:bd:8a:20:33:7a:46:ec:34:c3:
                    7d:41:c5:b8:bf:af:c8:cb:ae:cb:44:35:35:40:d8:
                    28:2b:06:a4:fb:50:a4:ec:fb:f7:3d:03:16:e1:41:
                    6a:0b:d6:d0:4f:33:3d:0f:dd:24:d9:42:eb:0b:ba:
                    34:ba:2e:64:d8:cf:72:fd:45:24:b7:58:7c:e5:d7:
                    7c:38:f3:0f:33:da:e1:55:f4:9c:b4:e6:86:19:3e:
                    55:e1:0b:8d:79:6f:63:b5:7b:e8:c1:bd:fe:4d:70:
                    9d:d3:85:32:c2:3f:71:86:9d:59:9c:17:ad:06:c0:
                    8e:e5:36:6c:45:16:51:35:7e:c3:94:70:d4:3c:6e:
                    44:75:ae:79:75:67:41:d2:7b:83:02:18:98:61:e2:
                    02:78:8f:47:01:7a:32:fd:94:4b:48:b5:c2:c5:d6:
                    ca:9e:78:8e:65:1a:58:76:5f:b5:d0:da:54:5e:d9:
                    62:9b:66:87:39:a0:8f:ea:b9:ff:c3:30:df:2a:19:
                    e1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:80:04:3D:B7:53:90:9A:9D:D2:90:31:AE:CD:70:B2:16:15:19:AB
            X509v3 Authority Key Identifier:
                keyid:62:BD:46:18:75:78:6A:00:B2:1F:07:3E:8D:02:AC:CE:9B:C1:58:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/62BD461875786A00B21F073E8D02ACCE9BC15828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62BD461875786A00B21F073E8D02ACCE9BC15828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/323830343a3262383a3a2f33322d3438203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:0e:5c:ee:45:b7:64:c8:9d:33:60:73:19:da:cd:b4:75:ca:
         85:19:62:05:77:68:2b:01:09:12:22:4d:25:3f:2f:56:2d:ef:
         e6:ed:f4:ed:7f:fc:b8:ab:cf:a7:70:c1:f2:f7:5e:ef:4b:e8:
         d0:b4:20:81:15:59:f5:df:8b:a1:1e:98:3a:05:3f:96:75:af:
         20:18:05:9d:c3:59:c1:07:d2:67:e2:40:be:9e:f4:e9:58:04:
         aa:19:cf:02:1d:53:f4:a8:79:44:02:93:c5:07:e4:15:1d:51:
         d6:3d:73:ac:2a:c2:d4:55:ab:6e:69:33:42:09:4a:7a:74:f4:
         f8:11:75:ac:17:b8:1e:05:73:37:d5:a1:0b:34:5e:95:21:92:
         d7:93:8c:8d:47:c6:2d:91:75:60:6d:f6:1d:67:41:50:0a:39:
         3c:6c:27:55:d5:31:c6:c5:7b:11:e7:d9:e6:f5:8b:08:af:98:
         98:22:bd:ca:11:35:eb:2e:5a:f6:51:db:41:96:63:33:26:4d:
         b1:d2:2d:ab:36:34:ba:0e:57:93:8c:ab:57:44:cd:57:e2:59:
         1b:37:57:10:90:6f:b1:61:05:9d:8b:c6:cf:8e:bf:ae:4d:4d:
         8d:29:55:df:80:66:16:43:70:5f:f1:9f:c7:d2:33:92:33:fe:
         99:cb:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----