Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/323830343a323264383a3a2f33322d3332203d3e20323634313236.roa
File:                     323830343a323264383a3a2f33322d3332203d3e20323634313236.roa (raw, json)
Hash identifier:          yJW1ZFIOgCSItCPOBWXPwaq3mOuHW5qgXZ8o0iDGGGk=
Subject key identifier:   C4:F4:76:40:F2:50:48:53:21:6D:2C:E3:4E:03:A6:25:05:A8:DC:8D
Certificate issuer:       /CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
Certificate serial:       03FE12C682B0694B4A9E401E6E34CC051FC9E6B9
Authority key identifier: 72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/323830343a323264383a3a2f33322d3332203d3e20323634313236.roa
Signing time:             Sat 19 Aug 2023 21:39:42 +0000
ROA not before:           Sat 19 Aug 2023 21:34:42 +0000
ROA not after:            Sat 17 Aug 2024 21:39:42 +0000
asID:                     264126
IP address blocks:        2804:22d8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fe:12:c6:82:b0:69:4b:4a:9e:40:1e:6e:34:cc:05:1f:c9:e6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
        Validity
            Not Before: Aug 19 21:34:42 2023 GMT
            Not After : Aug 17 21:39:42 2024 GMT
        Subject: CN=C4F47640F2504853216D2CE34E03A62505A8DC8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:79:0a:88:45:84:25:37:17:94:27:5f:d1:94:
                    42:8e:92:8c:b5:ba:5d:07:3c:26:fc:9c:c3:ed:97:
                    7c:6c:95:fc:40:d0:6e:16:2e:0c:68:17:91:14:11:
                    a5:4e:74:93:73:2c:e9:4d:84:4d:ca:68:55:41:28:
                    c6:c2:87:0e:60:9b:6f:1f:29:27:3f:cf:bd:54:bc:
                    65:26:1b:95:dc:6b:50:ca:7a:94:9e:42:79:bc:a5:
                    f0:0b:21:a8:e8:84:de:b3:09:7c:00:00:3d:67:ca:
                    c9:f5:66:cb:87:07:f6:0b:01:34:bc:0b:b3:af:e6:
                    7a:79:c0:53:4a:d1:cb:2e:16:18:9b:0b:a0:bd:bc:
                    d2:ac:cb:7a:57:5f:3b:b2:50:e8:60:e7:87:55:52:
                    3e:68:7d:1b:ab:a2:b4:e5:da:99:ae:a2:af:5f:6e:
                    cb:d4:d3:18:5f:0e:a5:ca:88:51:07:2e:3b:1f:f8:
                    f3:22:eb:7c:e7:75:5b:6e:b9:40:f8:08:17:8f:e9:
                    39:ab:ba:82:f4:61:03:e8:2a:01:c6:f7:df:6f:31:
                    f4:79:f4:c8:56:32:54:d8:89:3c:fa:11:62:3f:b9:
                    48:7a:d3:69:98:a9:1e:28:49:23:d5:d7:a8:36:bf:
                    44:35:77:1a:fd:f7:bc:2d:e5:b6:fe:3c:f1:6f:89:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F4:76:40:F2:50:48:53:21:6D:2C:E3:4E:03:A6:25:05:A8:DC:8D
            X509v3 Authority Key Identifier:
                keyid:72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/323830343a323264383a3a2f33322d3332203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:36:38:18:ea:74:39:5f:48:ac:03:ce:16:5c:0a:34:e4:3f:
         65:4d:e0:a6:49:cf:e0:39:90:94:11:2e:40:66:c9:93:ea:8c:
         1f:b9:32:6e:99:f8:d5:0c:ee:be:06:d6:59:d7:ed:b8:ea:89:
         70:4b:b1:3c:e9:38:59:31:5f:b4:31:f6:c3:4a:ca:c3:11:17:
         10:82:7e:ae:08:c2:91:ec:d3:1d:0d:30:b2:b9:4f:86:85:38:
         9f:e6:a8:a2:de:5a:68:28:63:f0:fe:ae:89:fb:fa:95:51:46:
         90:a1:10:9f:58:d8:dc:ef:dc:34:d4:41:9e:e3:87:ef:a1:11:
         f8:f3:70:d3:63:97:3f:e3:76:4c:8d:49:3e:5e:1e:45:b3:c5:
         9e:b0:74:5b:99:07:85:74:cc:45:3f:b6:81:39:4a:8f:d7:64:
         7b:26:ec:85:c6:ff:aa:e7:76:ac:5f:89:61:c5:5b:32:c2:27:
         55:8e:78:e5:7b:1b:2c:31:33:fa:22:13:37:47:40:94:06:b5:
         ca:52:be:49:60:1b:d8:91:42:03:9a:f1:16:e5:0b:7e:76:44:
         cc:42:be:f9:88:93:2c:2d:b9:a9:aa:90:41:04:cf:31:93:5d:
         93:9b:2c:de:17:6b:17:54:3d:22:09:b3:4d:5e:f7:4f:0b:e6:
         78:61:de:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----