Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/0/323830343a3863633a3a2f33322d3438203d3e20323632333934.roa
File:                     323830343a3863633a3a2f33322d3438203d3e20323632333934.roa (raw, json)
Hash identifier:          MwRoSNInWCdosCi801lGlNzaNRBeCnmMkVR/PkmMs9g=
Subject key identifier:   70:82:5D:3A:16:B9:18:D7:F6:76:F7:F1:FD:DB:4B:93:33:65:14:2A
Certificate issuer:       /CN=771EE25CE0914B1C3809E045F906D45F3616AA34
Certificate serial:       5BD09CB18EEECA4B1E12BCF9A8CE6F510FB47996
Authority key identifier: 77:1E:E2:5C:E0:91:4B:1C:38:09:E0:45:F9:06:D4:5F:36:16:AA:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/771EE25CE0914B1C3809E045F906D45F3616AA34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/0/323830343a3863633a3a2f33322d3438203d3e20323632333934.roa
Signing time:             Wed 18 Oct 2023 19:38:36 +0000
ROA not before:           Wed 18 Oct 2023 19:33:36 +0000
ROA not after:            Wed 16 Oct 2024 19:38:36 +0000
asID:                     262394
IP address blocks:        2804:8cc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d0:9c:b1:8e:ee:ca:4b:1e:12:bc:f9:a8:ce:6f:51:0f:b4:79:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=771EE25CE0914B1C3809E045F906D45F3616AA34
        Validity
            Not Before: Oct 18 19:33:36 2023 GMT
            Not After : Oct 16 19:38:36 2024 GMT
        Subject: CN=70825D3A16B918D7F676F7F1FDDB4B933365142A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:45:e5:3b:2f:9d:c1:4e:9c:fa:cd:96:0c:ed:
                    1e:bd:52:a8:11:db:88:20:b0:1d:e3:77:ad:fd:05:
                    65:94:75:8d:31:08:97:e9:54:5e:33:1e:5e:65:fc:
                    91:17:8e:b4:ee:e1:48:da:aa:d7:ba:d5:e2:29:35:
                    eb:53:4f:15:f7:23:eb:26:0c:6b:06:6c:03:04:dd:
                    1c:2c:1c:ff:00:61:1a:24:75:af:a0:c8:d4:5f:7b:
                    3a:eb:b5:b7:2e:d0:02:62:36:1e:a7:85:f3:f9:1f:
                    6b:c1:97:9d:3e:c8:3e:df:35:f7:7d:9e:ed:e0:6a:
                    10:0f:51:4c:38:b8:df:a6:3d:2c:7c:88:10:7b:4f:
                    01:f3:64:b7:11:a5:46:18:68:b4:48:cc:4d:85:22:
                    be:a3:79:e4:5f:53:09:10:82:af:cf:9d:de:ab:e8:
                    76:7a:75:ef:dc:8e:05:e6:c0:ed:6c:28:84:2f:55:
                    26:31:5c:70:79:cf:9e:a3:4d:12:10:1b:20:f1:4f:
                    8d:08:12:e8:2e:f2:97:be:21:f5:a9:b2:87:10:95:
                    9d:88:c9:9c:82:47:f3:c8:fb:07:5f:70:44:27:29:
                    ab:31:16:0e:af:76:1c:e8:cb:55:fc:08:97:4f:f1:
                    c9:4c:ec:23:90:ff:e1:7c:d3:4a:7f:65:5e:7e:e5:
                    02:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:82:5D:3A:16:B9:18:D7:F6:76:F7:F1:FD:DB:4B:93:33:65:14:2A
            X509v3 Authority Key Identifier:
                keyid:77:1E:E2:5C:E0:91:4B:1C:38:09:E0:45:F9:06:D4:5F:36:16:AA:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/0/771EE25CE0914B1C3809E045F906D45F3616AA34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/771EE25CE0914B1C3809E045F906D45F3616AA34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/0/323830343a3863633a3a2f33322d3438203d3e20323632333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:4a:97:78:2c:77:37:23:ea:8e:64:91:cf:76:25:43:d9:1d:
         3a:f7:ca:98:49:6b:b6:be:9d:80:e3:3d:d7:6b:bd:12:b3:56:
         2b:ce:f3:bd:67:16:00:26:45:6e:a1:5c:43:b4:10:9e:8f:17:
         ce:d9:b4:5b:d6:aa:64:e3:22:6e:ef:94:41:8e:7d:50:1b:0a:
         ef:fb:65:6a:4c:b6:b1:15:b8:b6:96:f9:0c:43:c5:db:64:1d:
         12:02:55:b8:85:86:0a:2c:bf:ec:f0:80:8e:29:5b:8d:79:24:
         81:ad:2e:3f:0d:d3:b4:32:f0:82:46:4d:92:b8:da:65:48:e0:
         ae:2d:7e:93:7c:9c:d5:1f:82:3b:74:f8:b2:17:ca:cb:69:0d:
         d1:e2:3d:f5:a2:b8:75:97:40:9a:f8:b5:e0:ba:a1:89:01:4b:
         53:9a:dc:70:ed:af:23:f7:c7:6d:20:a4:a0:c8:f5:ae:02:4f:
         9a:7e:6f:6c:19:bf:b3:4e:07:93:a5:5d:ad:3c:66:e9:2e:58:
         8a:1b:df:03:d7:d7:c6:44:a2:00:c8:a1:b6:f6:43:d9:34:f0:
         e0:90:f7:ed:c7:10:2c:41:d2:3c:3f:cf:79:db:f7:04:14:87:
         bb:23:ad:65:77:5d:0f:53:f2:82:52:a2:d4:80:ec:37:a6:b8:
         90:10:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----