Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a343030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a6164383a343030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          slZTgzejyZPpLGM5JwM/ANg+NEajeFVb78dKLNh5EcU=
Subject key identifier:   2B:1D:E4:D1:0F:2F:86:FE:55:E9:06:6B:A5:D0:57:99:76:CD:9D:85
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       770AAD9C28493B70C59E9FB8778D9800B07FCE1B
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a343030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Fri 24 Nov 2023 22:00:00 +0000
ROA not before:           Fri 24 Nov 2023 21:55:00 +0000
ROA not after:            Sun 24 Nov 2024 22:00:00 +0000
asID:                     262494
IP address blocks:        2804:ad8:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0a:ad:9c:28:49:3b:70:c5:9e:9f:b8:77:8d:98:00:b0:7f:ce:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Nov 24 21:55:00 2023 GMT
            Not After : Nov 24 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:95:48:d0:a1:91:27:a0:c9:37:a6:e5:47:
                    95:13:3f:55:80:0e:50:d8:58:57:0f:5d:bd:67:59:
                    89:8c:9a:85:52:3e:82:87:ee:4a:af:19:70:a5:51:
                    80:7c:01:b6:fa:e5:4e:2e:37:68:ec:1b:81:7b:1e:
                    87:36:32:6a:68:1c:f8:2d:09:89:f3:e4:03:1e:d1:
                    52:cb:1a:9a:5e:e8:ae:ce:e8:a8:8b:8f:d2:b9:1d:
                    cc:fc:33:d9:ee:3c:ad:35:9e:1d:a0:7b:a8:73:98:
                    98:4e:d5:83:99:43:26:28:c8:be:3a:5f:53:78:67:
                    05:22:0d:c5:30:e8:af:ad:e6:a3:a6:1b:4b:6c:26:
                    de:4a:62:97:64:29:1d:85:93:31:47:78:62:fb:96:
                    9c:92:9d:f6:fd:7c:04:7f:60:2e:1c:a5:de:6c:70:
                    37:f6:b5:d9:f0:24:30:a8:98:76:1a:8d:29:27:49:
                    04:75:be:52:4c:64:f8:37:c4:c7:85:7d:c4:d2:40:
                    41:0d:6a:22:0b:ed:76:bc:d4:71:d9:39:85:31:14:
                    41:70:c4:f4:c6:96:70:97:22:5f:b9:7e:2d:39:44:
                    59:59:8c:2a:82:0b:3f:8e:bd:a4:0e:bc:6e:29:67:
                    3d:02:21:53:b5:16:87:8c:8b:e6:1f:a0:63:9a:d5:
                    59:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1D:E4:D1:0F:2F:86:FE:55:E9:06:6B:A5:D0:57:99:76:CD:9D:85
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a343030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8a:9b:3b:bc:d1:16:3e:11:5c:3e:e5:15:6e:a9:63:3e:16:60:
         5e:bc:7a:0f:94:ff:8c:18:c3:06:b9:05:b8:c9:69:bf:f8:9b:
         40:16:9e:fc:fd:4c:a5:0b:e8:98:21:57:0b:67:11:46:93:ec:
         e1:ef:98:84:49:2e:7e:8a:8f:f6:99:21:9c:88:32:86:4e:5e:
         ae:66:75:2d:94:06:c9:f7:2e:55:4a:28:24:67:30:f2:16:ef:
         8c:b7:d2:9d:30:d7:95:54:8d:06:fa:ae:a5:26:d9:b1:c8:dd:
         c2:e7:89:87:99:9e:db:0d:05:85:66:69:16:56:4e:6e:eb:30:
         9b:9d:3a:fa:f0:1b:5d:b7:f7:c2:eb:ce:9d:60:9e:00:46:b8:
         55:d4:19:7f:eb:d6:7a:f0:87:4e:c6:e3:b8:9d:03:fd:f3:bb:
         ac:4b:56:a7:2d:49:f5:c0:fe:86:af:45:fe:df:7f:a6:df:8a:
         b6:e0:03:b6:14:88:d3:41:49:c2:2d:52:a0:50:5a:7a:1a:d6:
         65:43:c7:61:6a:15:89:b6:87:c9:b0:5c:37:ea:a7:7c:84:24:
         50:11:a8:21:a7:18:d3:65:01:73:b5:7f:e2:be:61:f5:94:77:
         7e:18:57:d8:61:00:f8:66:3d:f4:92:2a:03:a1:2b:52:5b:f6:
         03:15:89:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----