Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a3a2f33322d3438203d3e20323633393830.roa
File:                     323830343a323863383a3a2f33322d3438203d3e20323633393830.roa (raw, json)
Hash identifier:          8b7QVdt7qipMESk9q2AwgK8ksPfuv4NeGG+Rkh4Dczc=
Subject key identifier:   ED:80:DC:0F:15:0C:F5:4F:4D:41:18:EA:36:54:63:47:E3:F8:7F:0B
Certificate issuer:       /CN=6DD1D32830EBE5046536F8835ABC65E63EF7A33E
Certificate serial:       4910AFB63693AA20C391E053BB213DDA28E756BC
Authority key identifier: 6D:D1:D3:28:30:EB:E5:04:65:36:F8:83:5A:BC:65:E6:3E:F7:A3:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DD1D32830EBE5046536F8835ABC65E63EF7A33E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a3a2f33322d3438203d3e20323633393830.roa
Signing time:             Wed 21 Jun 2023 13:02:00 +0000
ROA not before:           Wed 21 Jun 2023 12:57:00 +0000
ROA not after:            Wed 19 Jun 2024 13:02:00 +0000
asID:                     263980
IP address blocks:        2804:28c8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:10:af:b6:36:93:aa:20:c3:91:e0:53:bb:21:3d:da:28:e7:56:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD1D32830EBE5046536F8835ABC65E63EF7A33E
        Validity
            Not Before: Jun 21 12:57:00 2023 GMT
            Not After : Jun 19 13:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:9b:f2:75:4b:fa:25:f8:88:0a:94:d2:51:
                    e6:76:79:f3:a2:63:2a:d5:ac:56:0b:b8:89:c0:8f:
                    c3:81:1d:63:83:f6:a0:f0:51:bf:17:31:06:57:f0:
                    ca:66:65:6f:13:03:2c:2e:6d:44:cf:b2:fa:e5:ba:
                    42:fa:82:7a:0e:c4:34:14:b6:46:e8:92:37:d2:60:
                    51:04:45:f2:9c:de:20:66:f7:84:12:92:08:a4:69:
                    36:72:26:a9:f6:2b:9b:df:cd:63:b5:b7:c1:98:4a:
                    8f:80:6c:21:88:f3:18:3e:e4:a6:74:4d:77:59:e3:
                    42:54:c9:a9:bd:0c:d8:37:cc:7c:4a:96:bb:1f:41:
                    ce:1e:fe:94:7f:d8:9c:4e:1a:7d:82:ec:77:4f:37:
                    c6:da:65:7c:4b:51:d6:7f:5a:f3:b8:60:7c:a7:bd:
                    7e:fe:98:cc:d4:1f:41:66:ac:15:8e:1b:b8:ba:04:
                    a6:6c:6a:9f:84:a9:e3:73:e5:f8:ec:b2:dd:e0:c2:
                    06:24:96:79:c1:41:0b:47:e3:c0:8d:81:3a:98:a3:
                    1e:9e:e9:bb:99:3a:55:7e:70:8c:94:33:c6:00:b8:
                    95:55:4f:cd:a2:2a:7d:ad:d9:19:f4:28:16:12:5e:
                    fb:67:42:09:68:86:9e:96:36:e6:1b:e2:9c:6e:0c:
                    b2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:80:DC:0F:15:0C:F5:4F:4D:41:18:EA:36:54:63:47:E3:F8:7F:0B
            X509v3 Authority Key Identifier:
                keyid:6D:D1:D3:28:30:EB:E5:04:65:36:F8:83:5A:BC:65:E6:3E:F7:A3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/6DD1D32830EBE5046536F8835ABC65E63EF7A33E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DD1D32830EBE5046536F8835ABC65E63EF7A33E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a3a2f33322d3438203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:1e:3b:e7:32:02:d8:13:b2:74:1d:87:cf:0a:dd:5a:4d:62:
         8c:10:2a:8c:89:f2:7f:6e:ed:6b:15:c9:f0:0b:a8:6e:fb:c0:
         02:c9:fb:a1:bb:ea:71:bf:58:5f:d7:d9:79:e8:8e:15:54:69:
         1e:53:4d:e8:14:47:73:a8:41:9a:7b:96:cc:1c:74:c9:a9:bd:
         5e:cb:95:bf:bf:70:9e:28:19:f9:9b:22:78:15:8c:2b:f1:c0:
         20:0d:ff:d0:07:89:b1:e7:a5:20:d0:89:53:ca:96:1f:45:1a:
         14:38:0a:7d:57:d8:68:f5:96:63:72:79:9d:35:89:ce:21:f0:
         c5:06:50:ab:b3:35:cc:52:20:cb:a1:d7:b0:4d:b2:75:cb:9f:
         0b:f2:70:45:07:d9:ed:f4:7a:78:75:8f:3f:35:e8:c2:0d:40:
         37:d1:64:db:46:80:47:2b:91:96:6d:63:3a:ba:8c:92:63:4a:
         13:30:c6:29:18:6c:4c:a3:83:4d:5f:29:c1:0d:e1:71:fb:db:
         c7:c4:13:25:c8:3e:a2:fd:06:bb:24:0b:6f:f7:8b:7e:9a:51:
         b0:61:30:56:32:4b:d6:3d:5e:74:d9:ae:09:0a:07:d5:27:d2:
         db:07:df:d2:7d:bf:66:a5:13:df:f7:0f:7d:1c:ae:dc:97:d8:
         ca:bb:85:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----