Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/0/323830343a336266633a3a2f33322d3438203d3e203532363037.roa
File:                     323830343a336266633a3a2f33322d3438203d3e203532363037.roa (raw, json)
Hash identifier:          ote0I+2ZNDyg5DQAz4rRxR5a9JupQ65o9bKV0+95+Rc=
Subject key identifier:   B8:AB:2A:09:58:59:84:37:24:3B:8B:05:AC:2B:5F:B4:E3:06:8B:3E
Certificate issuer:       /CN=BC6552FEAE387B527DBA080AC5A9F268E628D723
Certificate serial:       62E1EAC60223DAB070A2251223D97C296C4365D1
Authority key identifier: BC:65:52:FE:AE:38:7B:52:7D:BA:08:0A:C5:A9:F2:68:E6:28:D7:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC6552FEAE387B527DBA080AC5A9F268E628D723.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/0/323830343a336266633a3a2f33322d3438203d3e203532363037.roa
Signing time:             Thu 01 Jun 2023 23:00:00 +0000
ROA not before:           Thu 01 Jun 2023 22:55:00 +0000
ROA not after:            Sat 01 Jun 2024 23:00:00 +0000
asID:                     52607
IP address blocks:        2804:3bfc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e1:ea:c6:02:23:da:b0:70:a2:25:12:23:d9:7c:29:6c:43:65:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6552FEAE387B527DBA080AC5A9F268E628D723
        Validity
            Not Before: Jun  1 22:55:00 2023 GMT
            Not After : Jun  1 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:c3:c3:6f:34:3a:e1:70:8d:cb:ea:17:9f:
                    18:e2:bf:54:a8:56:fa:f9:03:74:f5:01:45:a5:45:
                    c8:ee:92:4e:9d:60:cb:7a:54:e7:ec:1f:92:82:3e:
                    2b:bd:6c:86:0a:c4:2f:b3:56:0d:4a:cd:64:2a:5c:
                    2e:9e:15:3d:b7:1d:bd:7f:39:17:80:a3:aa:81:65:
                    eb:1d:a5:18:96:6c:89:bc:5a:0e:e2:64:b0:a0:03:
                    21:cc:68:fb:74:e2:ac:01:52:4e:8c:31:1e:50:c1:
                    8e:a9:4f:ec:7f:be:46:4b:7c:87:f5:5b:e6:f3:3b:
                    4f:47:4e:c9:11:7c:aa:9e:be:1f:c5:69:cc:6e:15:
                    a4:d3:d0:4b:f5:b6:a7:e1:2d:7c:3e:c3:7f:fa:33:
                    94:f6:b4:27:7f:00:e5:7e:a3:e9:40:d3:75:68:81:
                    fe:26:76:c8:63:23:24:7f:6d:23:d2:3b:c0:10:ea:
                    f1:9f:8f:3f:d0:41:0b:a4:96:78:e4:00:37:ae:1f:
                    8b:7c:7e:07:e2:d7:19:fc:de:8b:ee:17:ac:9d:fc:
                    d6:a9:5c:ab:f5:e8:0d:26:8f:39:ab:89:62:0f:b2:
                    15:86:02:e0:d1:6b:c7:2a:4e:f1:7f:e5:cf:a1:0f:
                    bd:df:a7:3e:80:5a:14:3d:84:f0:51:fb:a9:d3:40:
                    4e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AB:2A:09:58:59:84:37:24:3B:8B:05:AC:2B:5F:B4:E3:06:8B:3E
            X509v3 Authority Key Identifier:
                keyid:BC:65:52:FE:AE:38:7B:52:7D:BA:08:0A:C5:A9:F2:68:E6:28:D7:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/0/BC6552FEAE387B527DBA080AC5A9F268E628D723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC6552FEAE387B527DBA080AC5A9F268E628D723.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/0/323830343a336266633a3a2f33322d3438203d3e203532363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:42:04:9f:99:81:1b:de:83:63:f3:f1:4d:96:c4:30:98:3c:
         5a:1d:43:ae:f4:8f:eb:6e:f2:20:a9:71:eb:08:13:db:40:3d:
         88:af:a1:dd:70:4b:62:97:58:a2:ae:cb:28:5e:9a:3c:f6:23:
         40:58:a4:8e:5d:5c:b7:72:50:a6:94:05:10:ad:f8:57:50:a4:
         57:9d:34:6b:9e:56:fb:89:52:f1:bf:30:2a:0d:a6:91:ca:60:
         d8:62:b1:d4:b7:33:91:ef:87:05:5d:af:75:4e:07:44:49:25:
         36:51:ea:b0:6b:c5:73:aa:b8:a3:21:ef:ec:2f:86:46:96:f0:
         8d:c6:27:b1:98:6e:b4:e8:48:47:6b:01:4d:ba:ff:5f:32:67:
         28:02:d5:26:35:70:25:18:ab:7c:9d:d6:14:d9:28:e0:c7:75:
         d5:45:24:dc:5c:a2:03:65:95:6a:c7:d1:c5:81:c4:47:3b:76:
         cb:8c:ec:d5:0a:37:b5:a0:cd:ca:51:ee:04:a0:2c:4c:a9:6d:
         72:93:93:34:e8:5e:20:f7:ac:76:4c:e7:9b:f7:2e:12:16:fe:
         34:7e:08:17:44:ec:b6:82:70:5f:88:24:82:dd:74:3b:f3:ca:
         7f:93:4f:04:9f:2c:e7:81:70:15:2d:ba:b3:b3:48:f8:ff:af:
         90:82:05:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----