Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/323830343a326436633a3a2f33322d3333203d3e20323635323831.roa
File:                     323830343a326436633a3a2f33322d3333203d3e20323635323831.roa (raw, json)
Hash identifier:          L66qVc1u8WGsexZcl7KrPgBVy7wgArwGqrgevgw0l58=
Subject key identifier:   05:3C:96:64:E3:06:BF:C1:D2:06:CF:C7:D7:25:66:D9:7F:26:8F:D4
Certificate issuer:       /CN=FDDF05E443295DD5E2D256144A34564E7AFF3EDE
Certificate serial:       1AAAAA60610920B4CA9EAEE9581F03C8E99A0FDF
Authority key identifier: FD:DF:05:E4:43:29:5D:D5:E2:D2:56:14:4A:34:56:4E:7A:FF:3E:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDDF05E443295DD5E2D256144A34564E7AFF3EDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/323830343a326436633a3a2f33322d3333203d3e20323635323831.roa
Signing time:             Fri 29 Sep 2023 12:46:29 +0000
ROA not before:           Fri 29 Sep 2023 12:41:29 +0000
ROA not after:            Fri 27 Sep 2024 12:46:29 +0000
asID:                     265281
IP address blocks:        2804:2d6c::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:aa:aa:60:61:09:20:b4:ca:9e:ae:e9:58:1f:03:c8:e9:9a:0f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDDF05E443295DD5E2D256144A34564E7AFF3EDE
        Validity
            Not Before: Sep 29 12:41:29 2023 GMT
            Not After : Sep 27 12:46:29 2024 GMT
        Subject: CN=053C9664E306BFC1D206CFC7D72566D97F268FD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:07:34:4a:af:b0:8e:27:2b:76:23:ba:69:
                    24:87:49:ac:4e:c1:96:36:48:18:ff:b1:09:63:6c:
                    04:c0:0a:e8:28:6d:af:13:0f:d3:bf:fd:39:eb:dc:
                    13:75:d6:1d:5b:e3:e1:b2:26:41:a3:3f:97:5a:fe:
                    e1:5e:01:e8:97:bb:7a:d2:0d:96:70:ca:84:5a:9d:
                    33:a1:f8:1f:16:cc:66:4c:28:e4:73:2d:ac:2e:09:
                    c3:88:db:13:ed:93:e6:aa:19:a8:ba:05:24:e6:ca:
                    95:49:b3:f4:03:01:0e:05:b3:f0:1d:c2:dd:75:3d:
                    87:24:79:8b:47:cd:f4:a2:d2:9e:32:14:c5:88:56:
                    db:e2:e5:32:be:9a:09:0f:6b:92:c1:67:60:7f:d3:
                    d9:78:50:c3:98:90:c8:52:6a:f2:05:18:28:7c:fb:
                    2e:28:0c:35:c1:30:c2:2b:77:d9:ac:d5:98:17:49:
                    97:5f:86:0b:3d:48:d7:54:d8:80:8c:2f:b5:6f:6b:
                    95:e3:1b:79:df:99:9c:96:9b:44:a0:5b:a7:a0:b0:
                    4d:26:f0:c6:28:18:70:fc:0f:98:2b:89:c7:f1:d7:
                    bf:29:71:2e:32:00:a5:ba:98:0a:42:d6:3c:41:b8:
                    f2:21:e5:75:05:d6:7c:c3:8c:e1:8d:98:9d:69:97:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3C:96:64:E3:06:BF:C1:D2:06:CF:C7:D7:25:66:D9:7F:26:8F:D4
            X509v3 Authority Key Identifier:
                keyid:FD:DF:05:E4:43:29:5D:D5:E2:D2:56:14:4A:34:56:4E:7A:FF:3E:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/FDDF05E443295DD5E2D256144A34564E7AFF3EDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDDF05E443295DD5E2D256144A34564E7AFF3EDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/323830343a326436633a3a2f33322d3333203d3e20323635323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:8b:78:6c:70:3f:a2:23:28:2c:5d:ac:d6:94:55:6f:f7:00:
         fd:f5:73:3d:08:ca:64:8e:6b:d7:0e:07:0e:ff:53:9f:f8:15:
         fb:f4:65:b1:3b:7b:54:7d:69:8d:c4:4a:8c:47:d0:bb:b8:a3:
         7f:8a:a1:b9:b3:33:7e:8a:c8:1f:82:74:9b:b2:80:78:c9:7c:
         5e:e4:57:0b:40:a3:a4:de:7e:f6:ef:3b:f2:6b:7e:fc:a0:be:
         21:21:dd:f0:97:2d:84:21:bc:ed:1f:a6:96:75:7d:7a:7f:d9:
         da:a2:28:2a:e6:a7:a2:51:12:05:62:22:9f:76:71:4d:2e:21:
         78:77:59:2a:9d:fa:fe:5a:66:54:cd:b6:68:d1:88:da:51:a8:
         5f:98:13:ef:c5:9d:2b:11:36:1a:3b:d9:79:12:d8:1b:5a:62:
         23:6d:17:28:60:ae:0f:3a:46:41:d9:e8:b6:a7:dc:8e:4d:ea:
         93:7b:a0:c3:e3:c9:fb:68:6b:d4:eb:27:14:05:e7:9f:55:e4:
         3e:0d:79:5a:e1:94:50:cc:05:09:dc:fb:76:96:94:ff:b4:ec:
         33:de:7f:bf:b3:8a:6a:71:6d:6e:6b:b8:d1:03:60:2c:81:a2:
         8a:b2:d0:8c:dd:4d:01:b6:27:85:cc:a8:3d:b4:9d:09:7a:46:
         e3:2a:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----