Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a3a2f33322d3332203d3e20323632343934.roa
File:                     323830343a343637383a3a2f33322d3332203d3e20323632343934.roa (raw, json)
Hash identifier:          4zuoCA3JNhC6hdUB4JA21e9whKy/M4qjx90XUf7/Nr4=
Subject key identifier:   A7:50:16:F9:A4:2B:62:D9:C4:47:10:75:30:5E:80:09:D7:22:41:D8
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       1B75A8EECFC76D640B47F420A6557395384AB3A6
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a3a2f33322d3332203d3e20323632343934.roa
Signing time:             Sat 04 Nov 2023 12:38:03 +0000
ROA not before:           Sat 04 Nov 2023 12:33:03 +0000
ROA not after:            Mon 04 Nov 2024 12:38:03 +0000
asID:                     262494
IP address blocks:        2804:4678::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:75:a8:ee:cf:c7:6d:64:0b:47:f4:20:a6:55:73:95:38:4a:b3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Nov  4 12:33:03 2023 GMT
            Not After : Nov  4 12:38:03 2024 GMT
        Subject: CN=3082010A0282010100BB7EFEA839D9EC69D2E595F66D55357DBB82FFC277DAD809D76936B153DC06895D01124818E4119D6690FFDC57CE318B51442C0E1F9DDD93BC6BDA0ADFBE37290D05EBB659DC1AA9DD08D76BCFA6312C16E85445CB3CE72DC6A82BD377EB6ED40813F397AB085667CEFB29E89395035C0697773E2C20EB86445CA23BB313BDF6D56FCD2A7160DBAE5C22C3AA0A073DE097820E8D4B8CF7AAB14EE50449B4F4C0C7CA22414AC94A637E760F14F9B6606C263C70FCB52CE989D75B6285F6E32D01FEE872653E1CDA662BA251FCC5ED57DD17113FAEFCF8A41BBC8C40C3AED75B1EA102467E8582A673CA4B52F00D3288A69E8D33A3BF53A95B0919C6DB5B1C0EBD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:fe:a8:39:d9:ec:69:d2:e5:95:f6:6d:55:
                    35:7d:bb:82:ff:c2:77:da:d8:09:d7:69:36:b1:53:
                    dc:06:89:5d:01:12:48:18:e4:11:9d:66:90:ff:dc:
                    57:ce:31:8b:51:44:2c:0e:1f:9d:dd:93:bc:6b:da:
                    0a:df:be:37:29:0d:05:eb:b6:59:dc:1a:a9:dd:08:
                    d7:6b:cf:a6:31:2c:16:e8:54:45:cb:3c:e7:2d:c6:
                    a8:2b:d3:77:eb:6e:d4:08:13:f3:97:ab:08:56:67:
                    ce:fb:29:e8:93:95:03:5c:06:97:77:3e:2c:20:eb:
                    86:44:5c:a2:3b:b3:13:bd:f6:d5:6f:cd:2a:71:60:
                    db:ae:5c:22:c3:aa:0a:07:3d:e0:97:82:0e:8d:4b:
                    8c:f7:aa:b1:4e:e5:04:49:b4:f4:c0:c7:ca:22:41:
                    4a:c9:4a:63:7e:76:0f:14:f9:b6:60:6c:26:3c:70:
                    fc:b5:2c:e9:89:d7:5b:62:85:f6:e3:2d:01:fe:e8:
                    72:65:3e:1c:da:66:2b:a2:51:fc:c5:ed:57:dd:17:
                    11:3f:ae:fc:f8:a4:1b:bc:8c:40:c3:ae:d7:5b:1e:
                    a1:02:46:7e:85:82:a6:73:ca:4b:52:f0:0d:32:88:
                    a6:9e:8d:33:a3:bf:53:a9:5b:09:19:c6:db:5b:1c:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:50:16:F9:A4:2B:62:D9:C4:47:10:75:30:5E:80:09:D7:22:41:D8
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a3a2f33322d3332203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4678::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:a6:a4:d7:78:64:8e:f0:52:cf:62:08:da:5c:b4:70:08:0e:
         ac:30:0a:44:df:0e:ee:98:79:c0:cd:c7:12:77:ec:cd:8a:40:
         34:bf:29:0a:10:59:92:71:ec:5c:5a:5a:54:fc:13:5a:d2:f3:
         de:45:7b:d0:20:01:8f:05:65:c0:0b:e3:63:e5:98:26:cc:9e:
         88:20:47:3f:b2:f5:f3:9e:31:a3:79:b3:58:e0:c9:51:ee:b9:
         ea:b2:71:fe:6b:ac:bb:82:6b:70:35:1d:66:ea:74:16:0d:f8:
         90:10:d8:5d:ff:ed:c1:27:64:fe:24:90:5f:64:69:12:db:f6:
         70:19:67:3e:5f:5a:48:8e:ea:f8:c1:f7:40:15:dc:e8:59:e4:
         82:bb:db:d9:23:2c:a5:13:79:9b:ae:7c:17:cd:80:0a:94:88:
         a9:c1:cb:46:de:a3:63:d4:0c:79:53:56:07:48:95:a9:43:7d:
         1b:3b:ba:e2:e2:6c:48:d8:c1:1a:ab:82:38:90:29:5f:49:4a:
         d6:2e:26:0c:0f:aa:99:98:90:41:2c:61:e3:de:e1:ea:8f:3f:
         64:5f:cb:1a:0a:30:64:3c:64:52:8d:17:3e:73:0a:99:97:a3:
         c7:7e:24:4d:c9:1c:4d:f8:29:ba:c0:fc:d3:13:ba:a9:09:9b:
         be:92:20:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----