Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/323830343a323132343a3a2f33322d3438203d3e20323634353338.roa
File:                     323830343a323132343a3a2f33322d3438203d3e20323634353338.roa (raw, json)
Hash identifier:          ymNHOGKnPen9kz6EU7Zwq2PuM5JBt3hlU+tdlL6PpEs=
Subject key identifier:   A9:8D:E7:0A:46:A4:71:29:95:2A:F3:27:78:B2:87:4E:CE:CE:14:F6
Certificate issuer:       /CN=14D15DB79CDFE75880CF9BBFCC572107D75DE9C0
Certificate serial:       13BE0F6F29EE5073D63DDF957525039DDC92F26B
Authority key identifier: 14:D1:5D:B7:9C:DF:E7:58:80:CF:9B:BF:CC:57:21:07:D7:5D:E9:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14D15DB79CDFE75880CF9BBFCC572107D75DE9C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/323830343a323132343a3a2f33322d3438203d3e20323634353338.roa
Signing time:             Tue 29 Aug 2023 18:54:00 +0000
ROA not before:           Tue 29 Aug 2023 18:49:00 +0000
ROA not after:            Tue 27 Aug 2024 18:54:00 +0000
asID:                     264538
IP address blocks:        2804:2124::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:be:0f:6f:29:ee:50:73:d6:3d:df:95:75:25:03:9d:dc:92:f2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14D15DB79CDFE75880CF9BBFCC572107D75DE9C0
        Validity
            Not Before: Aug 29 18:49:00 2023 GMT
            Not After : Aug 27 18:54:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9a:d4:0a:ec:23:39:bf:0b:21:0a:92:09:b7:
                    87:e1:eb:dd:29:9e:d2:85:63:26:53:3f:5d:2e:03:
                    67:cb:71:ff:92:f8:b6:a8:cf:b4:15:f3:1b:3b:d3:
                    c7:99:b9:23:41:5b:8e:23:a4:56:e1:50:92:c3:ca:
                    34:ef:ba:a3:34:06:27:34:ef:56:21:e5:d1:bd:aa:
                    d0:9f:e5:89:59:c4:91:0d:06:54:92:0d:6b:7c:49:
                    91:5a:58:e8:1c:a8:7e:5e:df:c0:a9:33:06:cf:86:
                    43:77:65:3d:a0:8b:fd:2e:8d:e2:40:5c:12:cc:6e:
                    bb:a3:b8:cf:5d:e7:6d:81:74:a2:2c:59:96:b3:57:
                    a8:27:32:6c:2a:24:44:8e:b2:f7:fc:c9:c7:45:d7:
                    02:f8:5d:b5:05:b5:34:2a:5e:3b:43:ab:ef:0d:5b:
                    4b:13:40:f8:bc:b1:43:75:02:78:b1:fe:d9:58:78:
                    08:66:71:f4:9b:9f:d3:66:39:6b:c4:2d:75:5a:9c:
                    33:19:aa:ac:c9:7d:00:2d:0e:22:0d:92:e0:d0:11:
                    ce:67:04:94:4d:7e:58:ad:3f:19:fd:35:91:f8:77:
                    7c:85:7a:81:99:e5:1b:1c:3b:56:26:04:9a:64:29:
                    3b:9e:31:3c:0b:b4:f1:86:79:bc:3f:14:7c:8e:e7:
                    eb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8D:E7:0A:46:A4:71:29:95:2A:F3:27:78:B2:87:4E:CE:CE:14:F6
            X509v3 Authority Key Identifier:
                keyid:14:D1:5D:B7:9C:DF:E7:58:80:CF:9B:BF:CC:57:21:07:D7:5D:E9:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/14D15DB79CDFE75880CF9BBFCC572107D75DE9C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14D15DB79CDFE75880CF9BBFCC572107D75DE9C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13tawb9D7kseaZCDoeNq5FyeE7cr3UygixJb5g4KvKHN/0/323830343a323132343a3a2f33322d3438203d3e20323634353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2124::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:d1:2e:bc:93:16:b5:31:6d:e6:44:62:6d:6d:b3:a6:0e:91:
         6d:79:f8:45:de:bf:51:c5:83:cc:d6:7b:1c:f0:8b:66:88:71:
         83:3f:a5:b0:b6:4d:ab:5b:c2:58:a4:bc:94:9e:44:9c:10:e1:
         34:71:d4:ac:50:64:9c:3f:b6:a7:5d:4f:49:df:da:60:5b:c8:
         8a:7a:e0:b8:2b:eb:95:6d:5b:a3:4c:dc:1a:01:54:28:65:9f:
         aa:84:38:22:b0:d9:5d:a8:96:2e:57:be:32:cf:a5:6b:43:7c:
         fa:97:43:c7:b6:24:e2:cb:87:26:7b:22:99:4a:d5:7b:05:e0:
         63:42:d6:a3:7e:80:26:34:d3:b0:26:8d:43:58:dc:22:8d:b5:
         ab:57:28:87:20:26:9d:ec:9a:fb:59:05:92:22:d5:f7:39:fb:
         51:45:19:6e:75:14:3f:9d:b2:fe:86:cc:92:ad:25:65:30:d9:
         ee:59:5b:a1:a6:77:12:08:7d:67:e0:50:3f:23:4f:b5:fb:58:
         f2:db:08:6e:5e:29:b6:e5:c1:71:8f:68:88:6c:16:6f:80:b4:
         7c:2e:e4:a5:0d:b4:22:f1:38:9f:e2:2e:93:64:59:a5:da:52:
         dc:fa:a3:89:7c:e7:a1:b9:8f:3a:02:5a:a3:74:fe:81:6d:4c:
         fd:6d:12:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----