Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a313531303a3a2f33322d3332203d3e20323632343934.roa
File:                     323830343a313531303a3a2f33322d3332203d3e20323632343934.roa (raw, json)
Hash identifier:          mGZ2O+EEH+2bOjyy+qXT9jLVl0GJPJdY6MUemiaPnEg=
Subject key identifier:   91:6A:13:6B:C8:CA:02:0D:8E:3A:A1:88:1F:6C:66:25:F9:60:5F:EE
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       7FE55907E186820C0A55800512BE65C375192976
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a313531303a3a2f33322d3332203d3e20323632343934.roa
Signing time:             Wed 02 Aug 2023 21:16:17 +0000
ROA not before:           Wed 02 Aug 2023 21:11:17 +0000
ROA not after:            Fri 02 Aug 2024 21:16:17 +0000
asID:                     262494
IP address blocks:        2804:1510::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e5:59:07:e1:86:82:0c:0a:55:80:05:12:be:65:c3:75:19:29:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug  2 21:11:17 2023 GMT
            Not After : Aug  2 21:16:17 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:14:f0:1c:47:64:da:7e:e9:f7:8e:37:4a:7e:
                    0b:54:2c:dd:f2:74:14:9c:30:57:9d:4a:cc:9a:ae:
                    d7:e3:68:12:0d:f8:0f:cb:0c:62:24:d3:31:67:ee:
                    61:62:86:f5:ff:70:e5:cc:ad:3d:8c:01:ae:7b:94:
                    f1:f8:97:aa:91:73:0a:8d:2b:d8:b4:63:21:b2:e2:
                    6d:7e:c0:12:ad:26:98:e1:57:31:f8:8c:6f:16:8b:
                    23:09:a7:6c:03:86:ad:d5:db:f8:a4:11:15:dd:8c:
                    2a:a3:a2:a0:28:3e:9e:23:70:a8:05:a5:f2:fb:94:
                    db:05:d9:1f:4b:6d:49:20:8e:75:f7:01:81:9a:8d:
                    34:68:e7:34:5a:0d:11:d4:88:63:5d:f8:cb:08:83:
                    97:99:4e:40:ad:d5:b8:72:0a:22:d8:98:09:cc:2f:
                    a0:4c:1a:7d:ca:a3:86:7c:38:b1:2f:07:64:ac:31:
                    e8:68:fc:39:5d:1e:3a:00:ed:d3:d8:11:92:55:90:
                    0e:f5:96:d9:0e:32:fb:2e:d3:ca:cd:ec:04:00:50:
                    44:fc:b1:55:3f:54:f7:74:8d:a4:f1:6b:a9:a5:94:
                    61:71:bf:4d:8f:be:f1:73:4c:cf:f5:1e:f0:75:ca:
                    b3:46:06:d5:b3:9d:7b:e2:e1:66:f7:92:fa:8a:f8:
                    34:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6A:13:6B:C8:CA:02:0D:8E:3A:A1:88:1F:6C:66:25:F9:60:5F:EE
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a313531303a3a2f33322d3332203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1510::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:5f:27:ad:d9:81:98:e5:29:b6:a0:e8:a8:43:8b:b9:3c:c2:
         d6:c7:86:58:f7:93:ae:b7:d5:d9:d4:77:90:e6:48:e1:6c:28:
         e5:1f:f7:22:b6:23:6a:cb:46:df:f1:91:f4:70:4d:59:4c:25:
         f5:44:e2:2e:82:ea:18:38:29:32:1b:f1:37:00:de:1a:76:7f:
         47:77:a5:15:6a:f1:55:ce:ad:ee:87:76:8f:07:62:27:a1:f7:
         03:9a:66:a8:e4:b1:9c:3b:c2:f3:bf:2e:23:5f:fd:81:eb:f1:
         d6:ec:3b:09:cb:71:4c:3a:50:60:cd:9a:4b:40:3c:28:71:f9:
         16:7c:2a:dc:99:3a:fd:b1:46:34:36:e2:f7:d2:e5:ac:cf:fc:
         5c:b7:c3:91:3d:49:6c:bc:0b:9f:e3:10:20:f9:19:db:44:b2:
         b1:24:c6:e7:00:69:36:55:2e:44:fb:99:ec:6c:bb:8d:a1:ba:
         6d:d8:71:81:2a:d4:78:dd:27:a5:d8:e8:da:0e:f8:86:dd:4b:
         b8:fc:81:9a:cd:42:aa:51:94:0f:ab:84:6d:4f:81:66:17:e1:
         cd:26:4e:6f:08:7c:7b:22:39:3d:07:bb:78:ff:64:93:7d:34:
         e3:1c:49:c5:41:1d:5e:d7:d4:58:7c:f7:71:7b:e8:58:83:44:
         16:a0:9f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----