Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/323830343a316436383a3a2f33322d3438203d3e20323634333637.roa
File:                     323830343a316436383a3a2f33322d3438203d3e20323634333637.roa (raw, json)
Hash identifier:          ypqDOMCQ3guhCEYyxLV2Qi9XRCGpxUeyVa6LwqECLpo=
Subject key identifier:   C6:39:F7:F4:B9:74:FD:E7:83:D4:F0:4D:61:EB:66:6C:C6:22:4E:10
Certificate issuer:       /CN=5075EA9FA288700040BED023F3D40B2EAFF02ADE
Certificate serial:       395908EE4A3B95F2CF472495AAC31947ECAFED3F
Authority key identifier: 50:75:EA:9F:A2:88:70:00:40:BE:D0:23:F3:D4:0B:2E:AF:F0:2A:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/323830343a316436383a3a2f33322d3438203d3e20323634333637.roa
Signing time:             Thu 05 Oct 2023 01:38:41 +0000
ROA not before:           Thu 05 Oct 2023 01:33:41 +0000
ROA not after:            Thu 03 Oct 2024 01:38:41 +0000
asID:                     264367
IP address blocks:        2804:1d68::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:59:08:ee:4a:3b:95:f2:cf:47:24:95:aa:c3:19:47:ec:af:ed:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5075EA9FA288700040BED023F3D40B2EAFF02ADE
        Validity
            Not Before: Oct  5 01:33:41 2023 GMT
            Not After : Oct  3 01:38:41 2024 GMT
        Subject: CN=C639F7F4B974FDE783D4F04D61EB666CC6224E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:2f:70:39:fe:d3:2c:b0:36:56:c9:e5:1e:
                    58:5c:32:c5:76:9b:79:00:44:40:a9:df:9a:80:7e:
                    79:d3:f2:25:1a:f7:e9:2a:3d:e9:a4:6d:5c:14:b6:
                    eb:bd:76:29:21:b3:a7:ce:28:7e:df:82:2e:2d:93:
                    d6:86:a1:df:02:7c:ec:a9:17:35:2b:75:d0:9a:de:
                    cf:6f:79:c3:dc:14:4d:6a:82:67:58:a3:ee:32:fa:
                    0c:e8:cb:cc:28:c1:37:ec:86:ad:5c:3a:61:a1:aa:
                    1f:11:8b:b2:67:f5:e1:7c:d3:64:b4:48:ef:3f:22:
                    46:16:e0:7d:89:0d:43:db:44:c0:3f:f6:48:36:15:
                    d5:4d:09:43:cb:36:97:ff:00:86:b6:ae:ec:d3:c9:
                    08:26:33:ea:74:7b:39:01:3c:87:96:fb:66:18:27:
                    db:b8:86:16:d7:63:ce:f5:10:9c:65:c6:53:f3:4e:
                    a2:49:01:4e:77:69:68:1e:0e:b9:ae:7e:4c:3c:00:
                    f6:bc:95:e7:05:9b:c9:89:13:5d:10:d6:7a:4a:ad:
                    83:9f:a4:78:27:f3:69:a0:fb:70:72:8b:f5:71:4c:
                    d6:e2:d4:0d:7e:a6:32:e6:75:57:01:ab:6e:1f:ee:
                    39:6b:4f:ac:a0:6f:ab:86:cb:f2:fa:0b:58:6a:f0:
                    89:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:39:F7:F4:B9:74:FD:E7:83:D4:F0:4D:61:EB:66:6C:C6:22:4E:10
            X509v3 Authority Key Identifier:
                keyid:50:75:EA:9F:A2:88:70:00:40:BE:D0:23:F3:D4:0B:2E:AF:F0:2A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/323830343a316436383a3a2f33322d3438203d3e20323634333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d68::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:d0:de:26:7d:5b:c1:d5:b3:87:b8:e5:09:ed:1e:ac:90:db:
         84:30:96:7b:4e:97:e6:66:d5:c4:c2:c8:94:6d:98:4e:7c:a6:
         4f:cc:c8:ce:d8:5b:3f:5c:5c:de:b4:fa:7e:1a:d0:c5:16:9d:
         03:9a:e9:5b:5c:76:ed:e5:52:79:28:28:db:87:89:c5:cc:d8:
         a6:46:22:c1:05:d6:4f:e2:7b:67:fa:34:cd:af:64:dd:e6:5a:
         db:0d:25:9c:ee:29:fd:0b:fb:e2:75:ad:31:f5:15:86:7f:d6:
         42:63:6b:84:64:72:73:b5:58:39:90:6c:d2:2a:f2:e6:a6:48:
         27:22:b2:c7:d2:df:b5:9b:cd:cd:69:21:da:09:11:2a:a0:72:
         8d:f3:5d:18:07:86:a3:9e:95:b9:28:69:b7:14:bc:da:c6:c1:
         b5:ad:ee:47:1d:25:b8:41:59:eb:d5:9f:9a:35:bf:8b:e3:90:
         4a:6a:d8:9d:76:54:d8:c1:8e:52:8f:97:37:c1:92:d5:31:31:
         ee:07:60:16:09:e0:c1:35:eb:e7:25:a3:02:7c:22:e5:73:75:
         c9:c3:8c:7e:81:ac:81:8c:0f:e4:40:82:27:2b:b9:6e:6c:d5:
         c5:cf:93:d2:ab:40:3a:44:81:34:05:5f:d1:63:3f:b9:75:12:
         1b:90:04:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----