Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/323830343a343134633a3a2f33322d3438203d3e203238323034.roa
File:                     323830343a343134633a3a2f33322d3438203d3e203238323034.roa (raw, json)
Hash identifier:          Op9zivX/47hHlCodDR//CBQ9PgANX1kJtfAKy/JBVZ4=
Subject key identifier:   92:48:C7:F9:0E:4E:6E:5B:9D:C5:C3:6A:04:8C:B8:13:12:B0:77:86
Certificate issuer:       /CN=B1C144082A4D8FD2286AE4F11F8A9BBB928C7E55
Certificate serial:       18A6407C77148AC14F674E4E82EABB18F3EE1885
Authority key identifier: B1:C1:44:08:2A:4D:8F:D2:28:6A:E4:F1:1F:8A:9B:BB:92:8C:7E:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C144082A4D8FD2286AE4F11F8A9BBB928C7E55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/323830343a343134633a3a2f33322d3438203d3e203238323034.roa
Signing time:             Fri 25 Aug 2023 18:48:00 +0000
ROA not before:           Fri 25 Aug 2023 18:43:00 +0000
ROA not after:            Fri 23 Aug 2024 18:48:00 +0000
asID:                     28204
IP address blocks:        2804:414c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a6:40:7c:77:14:8a:c1:4f:67:4e:4e:82:ea:bb:18:f3:ee:18:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C144082A4D8FD2286AE4F11F8A9BBB928C7E55
        Validity
            Not Before: Aug 25 18:43:00 2023 GMT
            Not After : Aug 23 18:48:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5d:53:db:59:a0:3d:8e:d4:05:81:40:48:58:
                    08:c0:71:5d:77:06:05:9b:19:c2:cf:b3:08:f4:16:
                    c6:41:00:1c:dd:c1:5d:68:5e:e4:9f:ac:37:04:86:
                    2a:b6:b5:45:db:49:11:8a:b0:23:39:ed:de:3b:f8:
                    11:1c:0c:0b:68:47:ba:ab:6e:89:c2:ae:5c:02:1e:
                    13:0b:97:07:4b:a1:a7:63:dd:e9:c5:10:aa:84:fb:
                    b2:df:0d:a1:16:7f:55:c9:05:88:03:d0:c6:76:b1:
                    95:86:fe:5d:25:e5:b3:4a:cc:94:1f:b9:01:03:6c:
                    14:b2:0c:d5:bf:91:16:b6:e1:f7:15:34:5d:b2:17:
                    e7:bf:bf:6b:dd:39:4f:87:09:2f:6e:78:46:98:ae:
                    e9:82:74:09:ef:b3:2d:0a:2c:ba:a0:9d:c1:92:a1:
                    d3:b4:9e:af:52:de:4b:dd:93:98:68:43:7e:a5:3a:
                    81:69:50:5d:1e:c1:09:31:5f:ec:61:8d:05:57:4e:
                    26:10:64:bd:c1:4c:86:91:44:94:55:47:9b:6c:c0:
                    13:72:eb:5d:1b:9d:26:9f:10:72:b9:5e:f2:ce:ad:
                    d2:76:c6:8c:05:42:25:1b:d5:23:f8:31:b7:2f:7d:
                    c7:68:20:12:cc:2c:f2:8a:a2:7a:35:3c:d5:4f:d8:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:48:C7:F9:0E:4E:6E:5B:9D:C5:C3:6A:04:8C:B8:13:12:B0:77:86
            X509v3 Authority Key Identifier:
                keyid:B1:C1:44:08:2A:4D:8F:D2:28:6A:E4:F1:1F:8A:9B:BB:92:8C:7E:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/B1C144082A4D8FD2286AE4F11F8A9BBB928C7E55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C144082A4D8FD2286AE4F11F8A9BBB928C7E55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/323830343a343134633a3a2f33322d3438203d3e203238323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:414c::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:92:3d:3b:3a:9f:f6:30:83:d5:04:31:4f:56:ef:0d:0b:
         0f:7a:29:a1:b0:62:f7:07:c9:48:68:a1:88:1e:2e:4a:7d:a2:
         84:e7:57:3d:e9:47:3d:9d:dd:0d:6d:30:32:85:4c:aa:f7:d6:
         97:1c:51:c5:c8:13:f8:17:c6:1d:8e:03:7a:08:ff:71:72:97:
         b1:3f:7a:5c:8f:c1:54:a0:e4:af:0d:de:d0:50:08:8f:94:70:
         af:c2:5f:a4:81:a9:ae:01:00:e8:05:a2:0e:d9:33:ef:ae:94:
         09:35:85:52:1b:fd:bd:e8:60:45:04:ee:ca:4c:62:8e:d7:0c:
         39:40:7d:fe:68:45:4d:f5:36:04:9e:89:0c:34:1f:e7:76:c9:
         f6:8e:ab:35:ce:81:26:c5:74:4e:9b:24:5a:4a:6e:25:b5:ab:
         ac:87:75:b6:10:82:18:6a:16:aa:7a:01:46:12:d9:46:a4:91:
         03:ff:3a:fc:ef:f9:d0:cb:ce:9e:44:53:a9:13:c0:24:5d:da:
         19:d0:f9:6a:e1:b5:8d:4e:b3:8f:bd:86:80:22:7a:d5:a1:00:
         de:fc:6c:05:97:b2:1b:bb:3a:1c:f4:78:21:b5:b4:b4:1d:78:
         a5:ea:7c:02:95:40:3b:88:dc:c7:4b:29:eb:be:25:92:7c:01:
         c6:77:9d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----