Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a6164383a383030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          vG9bD/VbCHJls3Vvu4kQUCbB9e7oew8uMkgkBZzbHuw=
Subject key identifier:   51:68:01:4D:6B:52:27:19:9C:F3:DA:70:18:31:90:6E:C9:BC:7E:D4
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       42947013EE227277A5D45F9B1F518BB9CEFDD0D3
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Thu 23 Nov 2023 19:00:00 +0000
ROA not before:           Thu 23 Nov 2023 18:55:00 +0000
ROA not after:            Sat 23 Nov 2024 19:00:00 +0000
asID:                     262494
IP address blocks:        2804:ad8:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:94:70:13:ee:22:72:77:a5:d4:5f:9b:1f:51:8b:b9:ce:fd:d0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Nov 23 18:55:00 2023 GMT
            Not After : Nov 23 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:52:cf:e6:87:85:ef:04:5c:46:c4:68:7c:
                    26:49:87:43:14:e0:f2:f7:ff:fd:7d:66:f4:de:77:
                    23:62:44:21:f6:19:c2:87:4d:38:d0:4d:88:ea:a4:
                    fb:ec:21:dc:08:19:9f:1b:ab:e5:e4:b3:91:b8:c5:
                    ef:43:2b:1c:03:9b:75:fb:95:ac:d9:45:b0:e8:46:
                    c4:6a:46:0a:b0:75:6e:1e:64:fc:73:43:35:b3:29:
                    47:2e:c2:71:94:04:ff:2b:94:75:7f:74:25:30:96:
                    f5:65:b0:e3:a6:e3:c6:bc:73:71:29:73:ab:d2:df:
                    38:84:63:fe:04:dc:50:75:ba:6b:9b:3e:67:f2:f0:
                    04:d4:a0:a6:45:07:2f:22:4b:57:c5:4e:26:2d:49:
                    0b:30:52:a0:69:db:a7:b5:70:e8:07:d4:dd:eb:a9:
                    5e:d4:b2:8f:c2:e5:8b:1f:ad:09:73:57:f6:63:f2:
                    34:a7:08:a4:58:ab:83:cb:25:5e:18:8e:e6:0f:af:
                    da:33:33:bb:d6:91:f9:49:15:fb:f7:df:ce:ae:f8:
                    eb:9c:81:5d:13:a4:9a:b1:05:7b:95:b1:d4:df:a0:
                    9c:ef:85:ec:30:bf:ef:79:cf:49:fa:7e:22:c2:5c:
                    3c:e6:f0:a8:5c:69:91:4b:e8:0a:18:34:10:6a:85:
                    2c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:68:01:4D:6B:52:27:19:9C:F3:DA:70:18:31:90:6E:C9:BC:7E:D4
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2b:92:dc:bd:49:e4:fc:bc:90:d2:67:a5:b7:e8:f9:74:79:ec:
         23:9d:12:1e:dc:5f:97:94:32:17:f5:4d:fc:03:44:c4:2e:b6:
         93:c6:11:6b:97:93:b3:24:92:c3:aa:24:62:2c:a4:f2:5c:71:
         ae:7e:16:84:5d:ec:e2:1f:45:6d:2d:23:7b:17:c0:95:02:6b:
         86:03:62:94:d6:4b:d2:66:0b:2f:4c:c8:1a:5c:bc:eb:1a:39:
         1d:7a:99:f6:66:2a:05:1b:ab:9e:b4:84:b6:4c:a7:4f:f1:fb:
         8d:0c:a5:d0:33:4a:74:b8:f9:57:51:09:b9:10:3f:64:2a:8d:
         49:07:45:5b:a7:ac:ec:72:11:18:ea:5e:90:03:ed:6b:a4:31:
         6f:47:57:09:4e:eb:33:7d:97:e1:6f:2d:41:e9:83:b2:94:72:
         50:3f:a9:36:fa:39:0d:7c:4a:1b:3a:64:ae:ca:07:51:f8:ba:
         15:c9:8e:b3:56:44:e3:d7:c6:51:60:a6:ae:80:c9:6f:8e:3f:
         fe:78:db:fc:fc:10:5b:83:1b:ee:c9:59:2c:48:4a:32:c9:1f:
         46:34:a0:0a:fd:a3:08:90:57:d0:e5:55:93:17:14:1a:5d:57:
         c8:6c:6e:63:ce:aa:59:19:8c:af:64:09:57:7a:ad:7c:ff:75:
         02:cf:55:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----