Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/323830343a356237633a3a2f33322d3332203d3e20323638383438.roa
File:                     323830343a356237633a3a2f33322d3332203d3e20323638383438.roa (raw, json)
Hash identifier:          ywkk9uVoSMhHI29F9VBupr4P94xkP6jfq7UD2L4ujkA=
Subject key identifier:   C8:E4:E3:AB:25:CA:6E:07:9D:06:E2:6E:BB:98:0D:72:6F:6F:A2:D6
Certificate issuer:       /CN=331A86B1CFCE5CD752521AD91A88036C23D00242
Certificate serial:       610610BFB2428637C4A9B163A3023D1F5CD04119
Authority key identifier: 33:1A:86:B1:CF:CE:5C:D7:52:52:1A:D9:1A:88:03:6C:23:D0:02:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/331A86B1CFCE5CD752521AD91A88036C23D00242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/323830343a356237633a3a2f33322d3332203d3e20323638383438.roa
Signing time:             Thu 14 Sep 2023 16:00:00 +0000
ROA not before:           Thu 14 Sep 2023 15:55:00 +0000
ROA not after:            Thu 12 Sep 2024 16:00:00 +0000
asID:                     268848
IP address blocks:        2804:5b7c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:06:10:bf:b2:42:86:37:c4:a9:b1:63:a3:02:3d:1f:5c:d0:41:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331A86B1CFCE5CD752521AD91A88036C23D00242
        Validity
            Not Before: Sep 14 15:55:00 2023 GMT
            Not After : Sep 12 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:7d:17:88:ad:f4:3e:70:46:7f:4b:86:e0:
                    8d:27:f7:1c:09:87:2e:78:e5:4c:82:d9:98:70:f0:
                    6a:3a:62:57:7e:61:f9:d6:0f:d6:27:cd:ee:07:33:
                    36:8f:d9:7d:0a:c3:92:43:19:a0:e4:f2:2c:cb:ff:
                    03:19:ad:87:52:85:2c:3c:4a:d8:72:aa:b2:c9:69:
                    37:08:d8:3f:e1:c5:9d:a4:42:51:7c:da:68:7d:dd:
                    77:36:a5:ef:69:2d:b9:da:f5:58:b9:d5:4a:23:d4:
                    fb:dd:86:7a:5d:6c:2a:57:01:cd:76:99:d2:d9:d3:
                    6c:0d:73:ba:30:36:28:f7:6b:9a:a2:7e:00:a5:98:
                    c6:fb:77:bf:22:d5:b4:ac:bd:79:e1:a2:b3:36:36:
                    f5:07:62:c4:e6:65:4d:c6:e9:08:05:a3:8e:41:20:
                    cf:a0:fb:73:04:9f:5a:77:53:cd:a4:31:c8:af:d0:
                    38:21:95:ba:5b:f5:34:8c:2d:bc:1e:ca:91:a9:c2:
                    cf:9e:37:88:3b:7d:08:40:b8:28:df:19:cf:c9:e3:
                    98:f3:c3:a2:d0:e9:64:5a:d9:6b:c9:ad:f7:d5:0e:
                    04:7f:f8:23:05:11:94:70:04:b7:ce:f4:36:e6:7d:
                    0a:7a:e8:99:7b:d7:83:ee:75:75:d6:2f:19:08:57:
                    1e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E4:E3:AB:25:CA:6E:07:9D:06:E2:6E:BB:98:0D:72:6F:6F:A2:D6
            X509v3 Authority Key Identifier:
                keyid:33:1A:86:B1:CF:CE:5C:D7:52:52:1A:D9:1A:88:03:6C:23:D0:02:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/331A86B1CFCE5CD752521AD91A88036C23D00242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/331A86B1CFCE5CD752521AD91A88036C23D00242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/323830343a356237633a3a2f33322d3332203d3e20323638383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:9b:cb:63:d5:ae:02:64:7d:0b:10:c3:56:b4:6b:d8:66:d7:
         6a:35:37:f1:2f:50:8e:b3:27:d7:18:31:f6:0a:c4:c2:7c:fa:
         b9:f9:a6:fb:73:60:90:9c:d9:24:70:73:49:5b:a5:63:be:fe:
         59:8b:fc:be:ff:9f:11:b4:46:d5:55:ae:7d:c2:70:11:91:04:
         61:2a:b1:f2:da:41:9f:fe:a3:5c:b1:1f:4c:e7:1c:c2:8a:92:
         90:81:f5:17:12:a5:1d:90:ef:7b:b0:ce:8d:4f:2f:ec:17:a4:
         79:b7:6d:31:54:13:d5:ad:6b:6f:1a:e6:6a:d2:2e:fe:0c:23:
         5d:bd:99:d2:5d:92:15:ab:2b:c0:0a:8d:b7:87:8f:f1:f6:fe:
         88:9e:d3:71:58:77:42:ed:6c:40:7d:d9:ad:5e:58:23:a3:79:
         b5:14:63:bb:d9:74:2e:7a:3d:a4:77:db:fa:d3:a2:3d:d0:0e:
         a6:a5:62:24:93:c9:ad:97:5d:32:10:4d:a6:42:1c:42:93:37:
         ce:fb:55:b3:da:93:73:ec:d8:51:8f:13:61:22:4a:cd:ca:e1:
         3e:db:3e:c8:f8:c9:33:95:3a:96:4e:60:b5:d3:8a:a3:8d:e9:
         32:3b:08:35:b8:d6:3f:3d:de:95:e3:23:82:e2:37:b6:45:16:
         d7:72:e4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----