Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/323830343a383432343a3a2f33322d3332203d3e20323732323432.roa
File:                     323830343a383432343a3a2f33322d3332203d3e20323732323432.roa (raw, json)
Hash identifier:          7EeXuL7INif1OVUF/t81ERCLQzicsowfhpaSrxRiELE=
Subject key identifier:   3D:D7:98:88:32:79:D3:F8:DA:B5:21:7A:28:DC:E9:2F:0F:D7:76:B6
Certificate issuer:       /CN=28857FFB1C89717722FA38DFF8D836C0ED8999DF
Certificate serial:       6FE0E95ACA2DF43F852D3BA75AA66AF57FD1BCD9
Authority key identifier: 28:85:7F:FB:1C:89:71:77:22:FA:38:DF:F8:D8:36:C0:ED:89:99:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28857FFB1C89717722FA38DFF8D836C0ED8999DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/323830343a383432343a3a2f33322d3332203d3e20323732323432.roa
Signing time:             Tue 16 May 2023 03:00:01 +0000
ROA not before:           Tue 16 May 2023 02:55:01 +0000
ROA not after:            Tue 14 May 2024 03:00:01 +0000
asID:                     272242
IP address blocks:        2804:8424::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e0:e9:5a:ca:2d:f4:3f:85:2d:3b:a7:5a:a6:6a:f5:7f:d1:bc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28857FFB1C89717722FA38DFF8D836C0ED8999DF
        Validity
            Not Before: May 16 02:55:01 2023 GMT
            Not After : May 14 03:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:64:23:61:14:27:d0:ca:43:c0:50:60:b4:
                    a0:9a:fe:1b:f2:b8:e0:f8:1a:50:65:e0:c2:af:63:
                    83:60:e3:fa:6e:a4:8a:b2:6d:44:e3:74:da:31:86:
                    61:07:eb:35:ae:2b:34:97:3a:ee:73:26:40:e8:19:
                    86:3d:8c:d4:62:6a:d9:ef:a8:b7:26:d7:34:89:4c:
                    a7:72:01:bf:35:e3:8b:e8:73:41:6d:38:73:a9:5b:
                    bf:58:c5:f4:44:07:2e:b1:a3:f6:4c:63:9a:f6:eb:
                    59:10:68:ac:e8:6d:3f:96:dd:1b:c0:28:68:f5:c6:
                    30:cf:14:25:26:9d:fe:cf:4d:0c:fe:86:01:3e:ed:
                    5f:3d:39:8e:a4:5f:56:07:f9:ee:3f:fe:f1:eb:d2:
                    cb:2b:03:a8:d3:91:4a:31:31:9d:80:15:21:6a:b9:
                    22:73:25:28:d5:a7:2f:d0:2f:df:78:ff:79:6a:c9:
                    a7:92:9b:48:46:25:d3:27:a7:07:8b:dc:db:6b:58:
                    b0:ed:e1:d4:a2:29:8b:56:ea:82:52:30:78:28:0e:
                    3c:ac:79:4f:5b:5d:f1:71:7f:e5:2f:c5:b7:10:7c:
                    47:23:de:31:ca:03:98:fd:fa:cc:91:2b:79:02:10:
                    d2:e9:53:de:b0:43:c2:4d:a0:fe:08:66:ea:c9:14:
                    c2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D7:98:88:32:79:D3:F8:DA:B5:21:7A:28:DC:E9:2F:0F:D7:76:B6
            X509v3 Authority Key Identifier:
                keyid:28:85:7F:FB:1C:89:71:77:22:FA:38:DF:F8:D8:36:C0:ED:89:99:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/28857FFB1C89717722FA38DFF8D836C0ED8999DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28857FFB1C89717722FA38DFF8D836C0ED8999DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/323830343a383432343a3a2f33322d3332203d3e20323732323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8424::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:6c:21:98:4b:c0:05:3d:ea:fe:7e:b6:bf:a9:62:a3:86:63:
         98:6b:b6:65:8f:df:b4:64:51:60:8c:24:43:3a:3b:2f:aa:93:
         6f:34:91:2f:3e:07:63:83:c9:eb:ec:01:e0:6a:52:f1:05:bf:
         fc:49:55:92:7c:59:3c:75:a7:8c:58:33:09:61:15:3f:33:f3:
         0c:d9:47:30:74:01:7d:f0:f2:a6:ec:ea:50:69:04:7b:8b:8e:
         8d:ee:93:d6:0c:12:59:23:1c:68:b4:39:33:27:6c:68:da:8d:
         68:6d:fb:a1:15:20:8a:4c:18:4c:3c:d3:62:0a:db:99:e8:33:
         d4:bc:2b:17:16:2d:83:4e:cb:bc:60:16:fe:19:b9:43:13:73:
         cd:2a:a7:31:58:85:02:ac:38:d3:28:16:12:e3:9e:5c:9e:f9:
         64:e1:4d:5a:32:4d:1f:ff:19:ea:25:54:c5:8c:4b:1e:4b:b6:
         61:25:dd:19:03:a4:42:38:68:9a:dc:81:b2:6c:03:92:93:54:
         8d:15:0e:42:80:10:80:61:a1:db:d5:88:70:8a:99:76:b2:22:
         5f:8f:7b:23:e4:88:b6:20:05:d9:db:b9:83:ca:7c:6c:59:2d:
         0d:f0:75:ec:fd:d8:06:45:4e:d1:df:b0:b7:1d:14:09:91:cd:
         95:ce:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----