Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/0/323830343a3164633a3a2f33322d3438203d3e203533323032.roa
File:                     323830343a3164633a3a2f33322d3438203d3e203533323032.roa (raw, json)
Hash identifier:          nj/dj7khWHSjt/07HypQ0A+dP4t1wdGdgVXZH1dzxjU=
Subject key identifier:   B5:60:23:F7:DC:62:5A:C7:CD:D0:33:CA:01:40:1C:19:AD:9B:77:E2
Certificate issuer:       /CN=9DA8231A907541812F774DA08E01168B1788862A
Certificate serial:       25196244B51E5D75806E62E1463178DBB859ADFC
Authority key identifier: 9D:A8:23:1A:90:75:41:81:2F:77:4D:A0:8E:01:16:8B:17:88:86:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DA8231A907541812F774DA08E01168B1788862A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/0/323830343a3164633a3a2f33322d3438203d3e203533323032.roa
Signing time:             Sun 11 Jun 2023 15:57:10 +0000
ROA not before:           Sun 11 Jun 2023 15:52:10 +0000
ROA not after:            Sun 09 Jun 2024 15:57:10 +0000
asID:                     53202
IP address blocks:        2804:1dc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:19:62:44:b5:1e:5d:75:80:6e:62:e1:46:31:78:db:b8:59:ad:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DA8231A907541812F774DA08E01168B1788862A
        Validity
            Not Before: Jun 11 15:52:10 2023 GMT
            Not After : Jun  9 15:57:10 2024 GMT
        Subject: CN=B56023F7DC625AC7CDD033CA01401C19AD9B77E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:82:91:c7:58:09:a5:8e:21:8f:b0:40:b3:
                    c2:a4:f6:cb:2e:4f:f7:0c:23:9a:49:a3:d4:c8:c6:
                    04:cf:33:f8:a8:75:87:f4:4f:5b:4f:9f:87:25:96:
                    94:fc:16:e2:ad:17:33:0b:72:55:46:d6:85:52:7a:
                    b8:4f:aa:b6:ca:da:e2:7b:49:26:bc:02:dd:9d:71:
                    c4:39:95:72:7f:6b:7b:6d:dd:70:9f:e2:0b:38:60:
                    d9:f3:d9:06:c4:1b:0e:a1:56:eb:8f:f2:fb:1a:f2:
                    82:a2:55:0b:a2:30:9a:60:78:3e:42:5a:ae:d9:eb:
                    73:0a:38:cf:fd:33:2c:7e:67:da:10:0e:e3:f8:6b:
                    d5:af:ae:20:da:5c:71:89:a5:7d:df:0c:5c:30:9c:
                    d4:73:9a:ab:0e:b2:7d:61:80:30:99:3b:cf:d8:cd:
                    ab:4f:cd:08:84:6d:a9:e9:56:77:9c:4b:50:c1:75:
                    d9:ef:b8:7f:15:a4:b1:9c:c3:0e:bd:b9:09:ab:fa:
                    09:bd:2e:c9:8e:3f:35:08:04:57:59:4c:43:86:ab:
                    e9:62:a4:2e:e6:eb:f2:b1:45:bd:bb:bc:95:05:59:
                    eb:35:54:4a:c6:86:2e:52:cb:cf:4c:cf:de:0e:b9:
                    e8:d8:22:fe:d8:e1:80:b3:1d:97:33:8d:6e:46:4a:
                    1c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:60:23:F7:DC:62:5A:C7:CD:D0:33:CA:01:40:1C:19:AD:9B:77:E2
            X509v3 Authority Key Identifier:
                keyid:9D:A8:23:1A:90:75:41:81:2F:77:4D:A0:8E:01:16:8B:17:88:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/0/9DA8231A907541812F774DA08E01168B1788862A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DA8231A907541812F774DA08E01168B1788862A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/0/323830343a3164633a3a2f33322d3438203d3e203533323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:fb:44:4f:72:98:05:7d:45:1c:41:00:af:be:a5:96:69:b3:
         76:d3:e4:80:cd:aa:95:e0:d3:1a:a0:19:5b:6b:c3:89:0b:9f:
         2d:30:37:71:2f:12:0c:83:45:1d:08:9c:10:56:dc:52:34:4f:
         6f:bb:a9:e4:17:a0:6a:45:1c:cd:1e:40:7e:9f:eb:ae:d7:0c:
         01:01:d0:7c:7a:21:d2:18:db:97:7f:66:87:bd:58:bb:17:7b:
         d2:e7:74:5e:c1:79:eb:57:be:20:85:a1:e3:62:b1:1a:89:7a:
         e6:c6:98:08:6f:7c:60:fe:1c:d6:1c:a5:8e:98:2d:ac:f9:44:
         3c:a5:e8:cf:02:a1:39:e3:23:80:de:04:18:da:1c:65:da:06:
         4b:01:f0:8e:db:81:1a:e1:28:96:16:f8:25:56:91:f6:8c:d5:
         74:81:40:1b:ae:22:c4:ac:64:7e:85:ad:3d:62:f3:76:32:04:
         fc:04:9a:ac:5c:d6:bb:c1:15:93:85:1b:8c:b8:f5:6e:9d:f1:
         d2:53:04:d9:c5:6c:34:04:fc:b7:33:46:9e:ca:6c:a2:6d:a7:
         c9:38:68:9c:2c:30:46:77:33:49:17:6f:7b:33:ec:16:c2:95:
         ac:b1:79:6f:ed:b9:ac:9c:2f:1c:29:0d:d8:7e:43:8a:e0:6d:
         7f:28:8c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----