Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/2/323830343a346131633a3a2f33322d3332203d3e20323637323139.roa
File:                     323830343a346131633a3a2f33322d3332203d3e20323637323139.roa (raw, json)
Hash identifier:          d8BZJ0wO5E/UU0T3RjS+hWPsEpoGR9O1pI0sCtO8fsg=
Subject key identifier:   47:66:5C:73:2D:F1:E4:CC:FE:AE:BA:BC:6C:02:6C:F8:13:DF:C4:1A
Certificate issuer:       /CN=63820E72BB2FEC3F1330D9F4624FC89CA82480CA
Certificate serial:       447CEA9E0B2CFA88F3346E040E39789BCC206ED5
Authority key identifier: 63:82:0E:72:BB:2F:EC:3F:13:30:D9:F4:62:4F:C8:9C:A8:24:80:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63820E72BB2FEC3F1330D9F4624FC89CA82480CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/2/323830343a346131633a3a2f33322d3332203d3e20323637323139.roa
Signing time:             Thu 09 Mar 2023 19:09:24 +0000
ROA not before:           Thu 09 Mar 2023 19:04:24 +0000
ROA not after:            Thu 07 Mar 2024 19:09:24 +0000
asID:                     267219
IP address blocks:        2804:4a1c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7c:ea:9e:0b:2c:fa:88:f3:34:6e:04:0e:39:78:9b:cc:20:6e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63820E72BB2FEC3F1330D9F4624FC89CA82480CA
        Validity
            Not Before: Mar  9 19:04:24 2023 GMT
            Not After : Mar  7 19:09:24 2024 GMT
        Subject: CN=47665C732DF1E4CCFEAEBABC6C026CF813DFC41A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ca:a0:d6:a9:e4:0e:32:e8:f2:69:fd:b6:8a:
                    cc:c8:b3:6d:b1:c5:0a:6e:d4:7b:27:52:2a:b3:59:
                    ad:eb:3c:2d:9d:0e:40:d9:f3:5c:74:0a:27:aa:20:
                    29:b1:12:9d:d6:f5:33:98:85:bb:05:cf:b4:89:42:
                    aa:c4:e8:f5:d6:6b:ec:7a:38:52:8c:dd:eb:a0:be:
                    0f:dd:5b:4a:12:c2:87:cb:11:ac:15:37:09:13:28:
                    c8:52:0d:0a:4e:4b:42:f0:55:9a:4a:0b:79:9d:1d:
                    c9:f8:48:ff:5c:90:81:8f:04:2f:47:95:c5:92:62:
                    4e:e5:e8:df:e5:1e:08:e2:a5:12:0d:1a:cf:a7:19:
                    28:09:02:d3:33:48:34:b6:8a:17:99:26:eb:19:8d:
                    b2:67:82:4c:81:64:88:2f:ef:00:4c:c1:51:b2:4a:
                    7d:8c:f5:2f:d3:c5:f3:b4:f9:ef:8d:f7:57:c8:43:
                    f3:a7:8b:22:bd:73:35:3b:bc:87:92:31:44:de:18:
                    7b:08:28:25:80:a7:a1:dd:07:d6:66:01:ab:ce:1d:
                    10:ed:c7:ae:68:5a:79:9c:9d:88:ee:76:db:29:2c:
                    af:eb:d5:ff:6c:7b:ec:c5:57:00:c6:24:c5:24:2c:
                    9c:68:d5:21:9c:fb:c6:2b:98:60:00:d2:89:0b:2b:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:66:5C:73:2D:F1:E4:CC:FE:AE:BA:BC:6C:02:6C:F8:13:DF:C4:1A
            X509v3 Authority Key Identifier:
                keyid:63:82:0E:72:BB:2F:EC:3F:13:30:D9:F4:62:4F:C8:9C:A8:24:80:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/2/63820E72BB2FEC3F1330D9F4624FC89CA82480CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63820E72BB2FEC3F1330D9F4624FC89CA82480CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/2/323830343a346131633a3a2f33322d3332203d3e20323637323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:e6:d9:71:35:b0:6d:8d:04:25:b8:51:fd:f5:97:2b:00:ac:
         cd:e7:7f:a5:3e:96:f5:ba:b4:17:d6:32:ff:d8:8a:a9:dd:2d:
         4d:7f:69:8e:70:93:69:18:20:dc:ce:24:62:f2:0f:17:46:69:
         09:91:a4:a0:41:52:a8:8e:83:6a:37:85:f0:40:b5:07:d4:bb:
         04:0b:70:7c:51:09:50:d3:0d:55:46:f2:0b:9b:41:72:57:ff:
         f7:09:30:1f:eb:86:57:0d:59:f4:d1:8a:f3:57:41:2d:68:de:
         4d:d3:87:0d:a3:f9:48:7c:31:1d:39:2e:f4:c6:bb:09:c6:d3:
         5b:91:da:a7:1d:7c:b8:51:a8:a8:15:1c:52:11:1d:55:c0:52:
         0a:09:96:88:7e:05:73:ea:6a:3b:6a:32:14:7d:bc:9c:d8:0d:
         80:25:e8:25:4f:12:a9:41:7b:ab:b9:e5:ae:d2:7c:4c:cc:ae:
         aa:d9:df:12:ba:89:62:4e:3b:0b:2c:9d:35:ad:d5:dc:e8:6e:
         db:d6:87:e2:8b:94:74:5f:f4:61:f5:a3:e0:0f:f7:f5:fe:4d:
         39:24:39:43:3a:e9:cd:cd:e6:7e:dd:b5:d3:c0:d3:cd:bf:fe:
         22:69:2d:bc:c8:39:41:19:42:40:84:39:61:66:c4:79:c1:f4:
         fd:56:3e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----