Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/323830343a316362633a3a2f33322d3332203d3e203631363732.roa
File:                     323830343a316362633a3a2f33322d3332203d3e203631363732.roa (raw, json)
Hash identifier:          reWo4JYUmh2HjAG8TPMy99QypQeLNvN58D3JDyc6oUI=
Subject key identifier:   E6:9D:C3:51:80:71:52:12:28:77:03:63:19:28:DA:56:40:B8:A9:C0
Certificate issuer:       /CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
Certificate serial:       52ADFD6A1DDDBD0121FDBFBC9F72F5D9F6444A6B
Authority key identifier: 1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/323830343a316362633a3a2f33322d3332203d3e203631363732.roa
Signing time:             Tue 06 Jun 2023 13:10:56 +0000
ROA not before:           Tue 06 Jun 2023 13:05:56 +0000
ROA not after:            Tue 04 Jun 2024 13:10:56 +0000
asID:                     61672
IP address blocks:        2804:1cbc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ad:fd:6a:1d:dd:bd:01:21:fd:bf:bc:9f:72:f5:d9:f6:44:4a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
        Validity
            Not Before: Jun  6 13:05:56 2023 GMT
            Not After : Jun  4 13:10:56 2024 GMT
        Subject: CN=E69DC35180715212287703631928DA5640B8A9C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:15:62:62:bf:00:f0:ab:33:ad:6f:3b:f7:
                    1c:f8:0c:1c:e0:49:a4:51:5a:3c:7f:fa:9c:1a:2a:
                    16:7c:85:7e:15:76:13:51:16:8d:3e:f7:83:81:0a:
                    02:3e:a3:9a:06:a4:ab:59:29:40:18:bb:0c:57:16:
                    6f:ec:2d:c8:ee:80:c0:e2:86:f8:e5:00:94:93:2f:
                    55:cb:a6:67:30:e2:b5:11:6d:53:ba:66:85:94:ba:
                    73:69:ed:37:0e:ce:c7:75:7c:a6:eb:3c:68:b6:8d:
                    9d:1b:b6:1b:21:7d:ba:b3:f4:11:e3:f5:4e:6c:7e:
                    7f:3b:a2:f4:4f:f5:e2:9f:6b:a2:89:09:56:2c:de:
                    09:e2:84:9f:83:fc:2f:f0:f3:8d:3d:73:b1:28:e5:
                    f0:f5:9e:dc:6a:f2:61:2b:34:7a:60:4e:8a:49:56:
                    39:b1:eb:c4:f0:cc:43:38:bd:2d:64:03:fd:c8:52:
                    29:73:18:89:14:27:e7:03:8e:82:c9:bd:e1:4c:d5:
                    16:a2:0b:e9:1c:56:80:9b:9c:ba:3c:5d:e5:9e:95:
                    3a:a6:e9:d5:7b:7b:1f:d1:37:5e:69:7d:a3:99:9f:
                    90:34:cd:bd:6a:aa:e5:ae:c8:21:96:2d:d7:68:d3:
                    c7:66:62:6c:12:72:21:4b:25:33:02:be:3b:ee:a3:
                    81:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9D:C3:51:80:71:52:12:28:77:03:63:19:28:DA:56:40:B8:A9:C0
            X509v3 Authority Key Identifier:
                keyid:1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/323830343a316362633a3a2f33322d3332203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:85:4b:c9:b4:ef:9b:d3:ce:7d:50:67:03:30:90:60:1f:b8:
         46:eb:ed:01:d3:bc:45:b2:f3:4d:b9:e1:fa:af:d0:be:16:4f:
         13:c8:ba:41:05:db:f4:4e:8e:7d:99:bd:49:a2:6e:f3:21:70:
         38:af:e5:a9:ef:71:9f:40:df:c1:c6:fc:aa:26:23:2f:e5:f0:
         71:d3:2b:a7:41:af:2b:c2:1a:5e:0e:b1:14:88:b6:ca:04:7c:
         74:35:d5:b7:11:ac:8b:e0:33:98:9b:92:6c:07:14:a4:2c:9f:
         0d:5a:30:60:64:99:6b:74:25:f6:7e:51:0d:bb:bc:53:a8:81:
         16:4b:7f:86:42:72:ea:c0:05:ad:51:7e:4f:9e:6d:c4:0b:a9:
         dc:51:95:29:85:3c:f0:d3:4d:31:b1:dd:d6:50:c7:49:cd:fd:
         5b:63:6e:50:84:dc:6f:f6:8a:16:ae:c9:0f:b3:a4:f5:65:1b:
         01:b4:07:f3:04:c2:53:96:e7:e0:27:f8:7b:fd:06:2b:bd:75:
         94:ed:41:3b:11:b4:2b:26:31:b8:d1:43:ff:78:c2:28:42:ef:
         3e:37:f5:cd:da:42:35:9f:ac:af:2b:e0:c2:59:36:d7:45:da:
         3c:ea:f4:8f:01:da:c2:7e:46:47:0c:ca:2f:ff:34:a9:55:64:
         5d:64:8b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----