Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/323830343a3832303a3a2f33322d3332203d3e20323632333532.roa
File:                     323830343a3832303a3a2f33322d3332203d3e20323632333532.roa (raw, json)
Hash identifier:          /9+hUtcHfErKaBhUSlvjLV4L4o0SKjgAyVqXN9M6i8M=
Subject key identifier:   3C:B6:ED:EE:44:A1:05:95:C1:67:25:D2:21:82:79:1E:EC:3D:5A:72
Certificate issuer:       /CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
Certificate serial:       40732B7D0FBE24E5EA55F735A04CBE686F92519C
Authority key identifier: AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/323830343a3832303a3a2f33322d3332203d3e20323632333532.roa
Signing time:             Mon 25 Sep 2023 17:01:30 +0000
ROA not before:           Mon 25 Sep 2023 16:56:30 +0000
ROA not after:            Mon 23 Sep 2024 17:01:30 +0000
asID:                     262352
IP address blocks:        2804:820::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:73:2b:7d:0f:be:24:e5:ea:55:f7:35:a0:4c:be:68:6f:92:51:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
        Validity
            Not Before: Sep 25 16:56:30 2023 GMT
            Not After : Sep 23 17:01:30 2024 GMT
        Subject: CN=3CB6EDEE44A10595C16725D22182791EEC3D5A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:a4:c1:12:c5:5d:69:6d:ec:f0:24:a9:32:
                    5b:72:fa:e6:f4:41:7f:15:43:89:ec:39:11:a7:49:
                    3c:4f:b8:39:31:16:44:68:ad:15:e0:ae:ac:3c:e8:
                    4b:09:f7:44:6c:9e:1a:5b:b6:a4:8e:98:f8:06:5d:
                    76:9d:6c:aa:17:f9:dd:1a:c1:21:73:95:e2:7d:5b:
                    04:8e:c2:a7:11:d6:9e:4c:76:4e:8d:92:d9:3e:e4:
                    bf:50:26:89:c0:16:23:4a:91:89:1f:ae:9c:3b:9a:
                    8a:64:a4:a2:43:82:b0:fa:16:3f:23:1e:07:c3:28:
                    f5:c1:00:74:e2:0b:e8:45:0d:95:bd:07:8b:ea:71:
                    00:9f:5a:4d:60:f6:b9:72:ba:75:4f:6e:05:b2:39:
                    c7:06:70:9a:36:ae:d0:fe:7c:60:50:e2:5d:a6:ff:
                    03:e3:86:68:d3:40:36:97:72:30:53:7c:d7:b2:b6:
                    66:5f:97:7d:31:6b:17:65:1b:7d:80:53:20:2c:f0:
                    81:cf:7b:6b:83:e3:66:1b:d8:a6:c1:58:20:10:4e:
                    94:ea:46:aa:ca:2b:93:d7:e8:1a:4d:ef:24:9f:c0:
                    26:08:f4:94:4a:a2:40:fa:5b:4e:ea:18:d0:fe:02:
                    44:a2:32:fd:cd:3a:3c:9c:52:6a:27:42:d8:d4:ee:
                    8c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B6:ED:EE:44:A1:05:95:C1:67:25:D2:21:82:79:1E:EC:3D:5A:72
            X509v3 Authority Key Identifier:
                keyid:AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/323830343a3832303a3a2f33322d3332203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:820::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:1d:25:55:89:bb:22:d1:02:4b:56:8e:d7:2f:3e:c4:76:28:
         43:3d:70:cb:43:4a:81:ae:ae:cb:17:9b:bb:a8:cf:4f:ce:72:
         1b:cb:ac:e9:b0:86:3b:16:aa:33:7a:cd:30:bf:e6:43:e7:46:
         f9:8d:08:e0:89:83:6d:f6:30:2a:75:b5:e3:fa:47:34:6a:75:
         f5:1d:e5:75:ec:bd:8b:12:f5:bd:85:d1:8e:f4:bf:a9:72:06:
         da:13:c7:ff:20:a9:b7:33:9a:b3:8d:a1:2c:9f:89:3a:02:34:
         c2:e1:23:79:db:30:4d:08:67:c6:17:cd:8a:c8:de:3c:d1:54:
         72:33:c6:d3:41:6c:cc:02:12:79:c9:84:98:9d:c7:5a:ff:e3:
         c2:65:4f:96:c2:fe:4e:c0:20:e5:0a:4a:32:d8:00:f7:02:75:
         80:0c:2a:b5:ed:6c:4d:97:03:9d:d0:3c:3d:cf:4d:ba:48:70:
         a2:fc:c6:3d:fb:75:83:3f:a2:b5:bd:5f:34:a5:f7:d2:db:ed:
         71:35:bd:dc:02:02:06:d3:b9:61:07:12:4d:bf:86:ac:3d:7a:
         09:20:2a:c5:50:b0:7b:dc:8a:70:18:56:e3:77:26:7f:50:c6:
         eb:48:ac:f3:3e:64:f7:8e:5f:c1:a9:6e:9b:fc:ce:55:76:f9:
         57:e9:5d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----