Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/323830343a6233303a3a2f33322d3430203d3e203532373438.roa
File:                     323830343a6233303a3a2f33322d3430203d3e203532373438.roa (raw, json)
Hash identifier:          TSFvFkEiA2UU3EPODplQcKp7w2GsiUtgT4NpqyZzbsM=
Subject key identifier:   A8:F2:E1:B6:EB:EE:56:23:68:E1:50:6F:2F:BD:7F:42:35:0C:D0:08
Certificate issuer:       /CN=1FB291BA7D5A8F08747CB53CB52D3920F5FB9577
Certificate serial:       01FAE72A345AEFC7CDD6BEA97702EAAA2C9037D6
Authority key identifier: 1F:B2:91:BA:7D:5A:8F:08:74:7C:B5:3C:B5:2D:39:20:F5:FB:95:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/323830343a6233303a3a2f33322d3430203d3e203532373438.roa
Signing time:             Fri 19 May 2023 16:39:22 +0000
ROA not before:           Fri 19 May 2023 16:34:22 +0000
ROA not after:            Fri 17 May 2024 16:39:22 +0000
asID:                     52748
IP address blocks:        2804:b30::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fa:e7:2a:34:5a:ef:c7:cd:d6:be:a9:77:02:ea:aa:2c:90:37:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FB291BA7D5A8F08747CB53CB52D3920F5FB9577
        Validity
            Not Before: May 19 16:34:22 2023 GMT
            Not After : May 17 16:39:22 2024 GMT
        Subject: CN=A8F2E1B6EBEE562368E1506F2FBD7F42350CD008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:2b:a4:37:38:0b:b3:51:07:08:96:24:70:
                    2a:b1:96:17:c5:83:3a:00:1f:c9:79:41:43:54:e0:
                    b1:bb:c7:02:80:e0:e1:59:d0:ca:4f:a7:3b:89:a1:
                    6a:d1:27:7b:b9:2a:df:6f:87:ac:de:65:fc:81:3e:
                    f2:28:f8:9a:73:d0:17:32:f5:cc:9d:fa:ed:86:c3:
                    a6:a8:d1:e6:56:f5:a4:32:35:5b:97:18:8b:58:ea:
                    af:f4:8c:0b:13:c6:c5:03:0f:45:2a:fe:24:1d:13:
                    d7:c7:c3:6e:d8:86:6f:18:2a:09:32:46:b3:4c:79:
                    c9:22:fb:5c:7a:6c:48:ec:0b:b9:55:b7:ec:d6:7a:
                    68:61:57:b6:86:ff:cb:99:ce:52:38:86:92:aa:bd:
                    88:d9:e2:94:c4:5d:f1:c9:df:91:3a:02:e9:7a:1d:
                    44:5b:5c:64:61:cd:8d:81:7f:69:c7:33:6e:83:6d:
                    e2:45:bb:7a:bd:5c:91:fa:15:ee:d8:1a:06:36:3f:
                    9a:de:01:2d:a7:d4:f1:91:e5:06:da:1d:7e:91:e4:
                    95:d9:82:0e:20:7c:1f:c8:6e:b1:7d:09:06:61:29:
                    79:bc:7d:05:77:b2:a7:94:b7:9b:0d:5b:ad:58:49:
                    7b:0d:4a:d5:56:2f:c1:d0:99:34:f0:39:54:a0:51:
                    4e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F2:E1:B6:EB:EE:56:23:68:E1:50:6F:2F:BD:7F:42:35:0C:D0:08
            X509v3 Authority Key Identifier:
                keyid:1F:B2:91:BA:7D:5A:8F:08:74:7C:B5:3C:B5:2D:39:20:F5:FB:95:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/323830343a6233303a3a2f33322d3430203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b30::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:09:dc:1d:36:ae:38:49:4e:85:8f:3e:ef:2b:eb:ab:11:0e:
         53:89:a4:97:5f:ed:27:3c:33:fe:22:bd:19:f2:3f:97:46:62:
         62:28:ea:44:a7:d3:ad:15:bd:74:f1:cb:e8:28:fd:bf:1a:dd:
         74:05:56:8d:15:3c:a9:68:fc:f2:75:f9:37:97:86:34:d1:44:
         c8:6d:9a:80:ec:82:45:e0:e5:f9:13:6c:43:ed:dc:37:28:d7:
         b3:40:86:3f:7d:ac:5d:66:af:97:f1:ec:ae:b6:58:47:2a:ac:
         38:69:3b:b0:f6:99:e9:73:df:5a:4e:28:a9:56:cd:24:f4:d8:
         0c:ec:41:2c:a1:53:6c:a0:91:ae:b9:69:8d:b8:1e:95:9a:7c:
         e8:d5:a9:c0:7e:ab:8e:e4:ce:71:51:30:dc:a7:db:cb:65:48:
         2d:74:f0:4e:b6:8a:3a:9d:dd:bf:00:ad:d4:62:ae:31:73:28:
         8b:4f:56:73:f5:43:65:7d:66:fc:c2:d4:6b:3a:ee:d1:d7:00:
         93:fc:06:57:77:7c:d9:84:34:e7:d8:84:aa:d5:0f:76:40:1d:
         b2:ed:fe:aa:15:d5:e9:16:37:de:20:b9:35:8e:b1:02:ef:52:
         19:66:0b:9c:42:ac:b0:31:d0:4f:3c:32:f2:4f:7c:7c:f5:5c:
         49:d3:e1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----