Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/323830343a353830383a3a2f33322d3332203d3e20323638313031.roa
File:                     323830343a353830383a3a2f33322d3332203d3e20323638313031.roa (raw, json)
Hash identifier:          0GCDtTlZ34XgiTK1MzjHsdy1r6Syu2ELxv2EkqUXdIU=
Subject key identifier:   AC:9F:C2:DA:ED:9D:4C:55:F3:10:8B:33:08:4E:28:71:95:FE:AD:C1
Certificate issuer:       /CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
Certificate serial:       56EECB56B03B18A6AD3AAD96670FA7783378800E
Authority key identifier: CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/323830343a353830383a3a2f33322d3332203d3e20323638313031.roa
Signing time:             Fri 14 Jul 2023 18:57:56 +0000
ROA not before:           Fri 14 Jul 2023 18:52:56 +0000
ROA not after:            Fri 12 Jul 2024 18:57:56 +0000
asID:                     268101
IP address blocks:        2804:5808::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ee:cb:56:b0:3b:18:a6:ad:3a:ad:96:67:0f:a7:78:33:78:80:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
        Validity
            Not Before: Jul 14 18:52:56 2023 GMT
            Not After : Jul 12 18:57:56 2024 GMT
        Subject: CN=AC9FC2DAED9D4C55F3108B33084E287195FEADC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:a1:c1:17:e1:42:af:8f:32:8e:1d:da:d9:
                    ae:a8:2a:f9:47:d1:9c:02:8f:46:7b:ce:ef:f6:b1:
                    be:a9:c0:b3:f1:ab:21:b7:7d:ae:cb:06:dc:ba:a8:
                    ca:8b:ea:7e:98:4a:e4:ea:02:67:f6:b2:15:73:48:
                    86:d5:49:07:ed:95:0c:8a:39:51:8e:b1:1f:09:62:
                    e7:97:c4:d9:e1:17:de:a3:88:1f:79:85:ac:49:61:
                    79:a2:64:e8:08:e7:c2:73:7d:e5:d8:22:b8:6e:c1:
                    23:2b:28:b2:17:e5:fe:99:1b:93:4c:d7:b9:83:48:
                    92:bf:4f:8a:3a:d9:bb:ac:5b:38:3e:0a:2d:9c:90:
                    62:42:ba:3c:48:7c:ae:4d:e0:90:05:2d:55:79:cb:
                    f6:e7:c7:0c:ea:f4:a7:36:1d:af:e7:71:6b:21:70:
                    ca:3a:a1:c3:83:fd:30:86:57:f7:c3:38:77:d7:50:
                    95:f7:bc:00:20:d4:b4:92:f4:54:0c:1b:9d:78:b7:
                    fc:47:d2:08:c9:3c:10:3b:04:4b:16:3d:40:03:cd:
                    5f:63:ed:2b:75:c6:27:27:6b:a6:cf:a1:a1:09:41:
                    ec:99:c6:05:b1:f1:d3:e5:b9:99:49:e2:b7:dd:6c:
                    6b:8e:65:73:4d:96:83:89:0f:06:01:a3:a1:62:f1:
                    a0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9F:C2:DA:ED:9D:4C:55:F3:10:8B:33:08:4E:28:71:95:FE:AD:C1
            X509v3 Authority Key Identifier:
                keyid:CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/323830343a353830383a3a2f33322d3332203d3e20323638313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5808::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:36:47:36:17:79:76:17:d1:85:3f:6b:8e:91:61:ec:75:67:
         12:5a:a3:2c:6b:46:77:bc:01:f7:31:46:a5:d1:7b:f8:85:81:
         06:20:8f:fe:f9:04:fa:de:f7:73:11:b5:ea:15:e6:66:f9:37:
         6c:63:80:af:e8:a8:a1:f3:93:6d:b0:26:44:7d:fe:82:8d:6d:
         e4:f8:72:1d:6e:5f:c7:23:07:37:b5:29:db:4f:f5:16:91:20:
         24:bc:a2:50:17:72:63:f7:30:04:93:04:9d:7e:89:5b:85:7b:
         00:db:4f:11:7c:86:bd:55:9b:a5:e0:6c:9a:43:5f:00:cb:97:
         17:ab:ac:9b:dc:d0:c7:0f:d1:29:ec:7d:1e:c1:29:3d:ea:83:
         2d:3f:93:5f:c0:5a:be:db:3c:77:04:4c:12:87:fb:c4:e7:6c:
         f7:25:9e:71:8e:ee:0f:b3:fe:39:96:2b:6b:24:cc:97:43:06:
         44:82:95:0e:63:7c:59:56:38:c3:79:24:96:39:83:61:2f:5b:
         b7:bc:df:c0:15:7d:5b:ae:cd:3c:18:09:ec:7e:d0:bb:03:8e:
         a9:ff:ed:cd:40:26:c0:28:8c:38:59:32:76:d4:6d:99:ec:62:
         a2:a9:7b:50:2a:4c:5a:d7:e6:42:14:bb:bf:16:be:cb:d3:93:
         5b:79:37:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----