Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/323830343a373034383a3a2f33322d3332203d3e20323730373137.roa
File:                     323830343a373034383a3a2f33322d3332203d3e20323730373137.roa (raw, json)
Hash identifier:          Zgoz+FRC3Xyzk8+WcPjs7BsHUbsSWL7anXdNl90AYbU=
Subject key identifier:   7B:A8:14:0A:42:A1:5F:72:76:55:7A:00:34:29:82:D6:4D:97:7B:16
Certificate issuer:       /CN=CF1D4ED402F6A7495FF98704F6504616E9CD02FA
Certificate serial:       5108EC9B3E889F90BAA4A11D534512C48AB1C540
Authority key identifier: CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/323830343a373034383a3a2f33322d3332203d3e20323730373137.roa
Signing time:             Mon 04 Sep 2023 14:26:34 +0000
ROA not before:           Mon 04 Sep 2023 14:21:34 +0000
ROA not after:            Mon 02 Sep 2024 14:26:34 +0000
asID:                     270717
IP address blocks:        2804:7048::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:08:ec:9b:3e:88:9f:90:ba:a4:a1:1d:53:45:12:c4:8a:b1:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF1D4ED402F6A7495FF98704F6504616E9CD02FA
        Validity
            Not Before: Sep  4 14:21:34 2023 GMT
            Not After : Sep  2 14:26:34 2024 GMT
        Subject: CN=7BA8140A42A15F7276557A00342982D64D977B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:0b:1f:92:cf:73:67:f8:33:1a:19:e7:88:
                    be:0f:ef:13:fa:06:82:ed:67:35:2b:7b:0b:6a:68:
                    c6:c4:34:91:56:06:c2:bd:75:0f:e3:00:44:bb:4f:
                    10:5e:ae:11:a6:eb:f7:d9:7b:b1:5f:8a:fe:0c:c1:
                    d0:81:f8:31:3e:ff:b3:df:e5:cf:4f:50:16:dc:55:
                    bd:2c:69:d7:ea:75:34:e2:75:82:c1:9e:34:3b:a6:
                    96:b9:6d:e3:d2:8f:bf:e1:ae:13:65:1b:c0:38:c5:
                    44:c7:6c:4f:77:27:51:75:0b:7e:b0:15:dc:a9:5d:
                    90:90:a7:c4:9b:79:48:fa:02:10:07:a3:2d:a9:8e:
                    16:a8:67:66:47:86:b1:40:81:a3:1b:50:dc:db:64:
                    d6:76:0c:b5:5f:af:b2:b5:d3:43:79:a2:6a:e5:94:
                    da:3d:59:18:72:02:dc:c1:15:33:8c:e4:e1:ff:8e:
                    62:55:15:43:af:8a:5b:dd:ee:f5:df:ec:7f:36:32:
                    d0:11:01:84:c8:66:f2:a6:30:da:6f:21:55:8b:cb:
                    df:ad:10:30:55:dd:77:1e:42:2e:63:13:0a:64:df:
                    35:1e:5b:c8:02:3b:d5:b6:ea:b8:e2:fc:c1:33:25:
                    08:64:dd:1c:d4:5d:3c:77:7d:58:bc:c7:86:e1:e7:
                    55:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A8:14:0A:42:A1:5F:72:76:55:7A:00:34:29:82:D6:4D:97:7B:16
            X509v3 Authority Key Identifier:
                keyid:CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/323830343a373034383a3a2f33322d3332203d3e20323730373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7048::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:3b:af:a4:ce:ec:88:06:73:5f:c1:36:8e:cf:e1:b0:7c:27:
         37:ee:b3:1d:81:81:38:c0:56:b4:50:9b:29:2a:fa:92:c0:93:
         99:78:60:a6:6a:d7:38:61:43:4e:c5:0e:4e:c4:35:97:24:a2:
         43:f7:5e:3f:20:13:1f:7c:fd:a1:78:0d:e9:43:f5:3b:83:7e:
         47:08:4b:49:2f:c4:56:dd:51:3f:3d:17:2b:1d:a8:72:01:94:
         3d:05:11:2b:9b:09:13:a2:72:fc:e2:6e:e9:07:e4:3f:47:fc:
         18:ef:85:d5:4f:ec:25:3d:ff:5a:20:c7:22:df:ca:3f:92:7e:
         ce:9f:a8:94:63:24:82:77:5b:c9:9e:99:46:67:71:01:4d:a9:
         93:84:5a:e5:d3:4f:43:4b:82:3f:5d:71:37:c5:96:c3:58:e4:
         fa:eb:8f:27:ca:3c:46:ac:2b:e3:84:c4:88:dc:6f:29:d3:8a:
         53:35:7e:02:70:95:1c:35:0b:db:20:42:39:89:61:40:70:12:
         04:5b:a1:a3:fe:ee:ec:0d:18:cb:f0:aa:22:e9:12:7b:b4:36:
         6d:03:cb:0b:26:f9:14:10:7e:a2:64:f9:e8:f3:f1:61:49:42:
         9c:b6:88:fd:47:35:a0:19:5e:42:ff:be:b0:d1:b6:60:ba:2e:
         a4:08:ad:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----