Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/323830343a363262633a3a2f33322d3332203d3e20323639333135.roa
File:                     323830343a363262633a3a2f33322d3332203d3e20323639333135.roa (raw, json)
Hash identifier:          1ZCneRS8/ZY/hXeArQyki4xQ7PtYPbrd2iqiVS3yL/c=
Subject key identifier:   A8:2E:4D:2C:B6:AD:66:B5:B3:08:28:BF:94:36:DB:DF:54:FB:CF:26
Certificate issuer:       /CN=B7A998992696FF1723DF042964560BDF4E6F9722
Certificate serial:       043AD025C995B07C5F92EEB9DD0C95128E629DBE
Authority key identifier: B7:A9:98:99:26:96:FF:17:23:DF:04:29:64:56:0B:DF:4E:6F:97:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A998992696FF1723DF042964560BDF4E6F9722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/323830343a363262633a3a2f33322d3332203d3e20323639333135.roa
Signing time:             Mon 05 Jun 2023 18:00:00 +0000
ROA not before:           Mon 05 Jun 2023 17:55:00 +0000
ROA not after:            Mon 03 Jun 2024 18:00:00 +0000
asID:                     269315
IP address blocks:        2804:62bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3a:d0:25:c9:95:b0:7c:5f:92:ee:b9:dd:0c:95:12:8e:62:9d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A998992696FF1723DF042964560BDF4E6F9722
        Validity
            Not Before: Jun  5 17:55:00 2023 GMT
            Not After : Jun  3 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:e5:84:c2:b6:fc:4c:fd:92:6a:56:8d:e8:
                    e5:ff:25:28:c2:15:6f:a4:d4:f7:3f:f7:39:cf:c8:
                    c8:c1:b0:4b:1f:03:64:01:5b:6c:9e:92:96:22:67:
                    9a:a4:29:64:88:0d:f4:4f:61:9b:f3:0f:ba:de:ba:
                    dc:d8:30:59:fc:f5:ea:2f:57:5d:94:c4:dd:b3:4a:
                    32:28:71:49:fb:10:ef:56:f3:3e:d4:4a:d5:e7:29:
                    c4:f5:6c:45:c8:97:32:5d:d1:93:8f:be:d0:59:da:
                    54:27:3e:6f:10:7a:ba:6a:2a:b0:4b:b0:dd:4a:f7:
                    c0:6c:c2:10:7d:4a:b0:03:5b:90:7d:db:f0:4f:16:
                    6a:48:c8:d9:6c:89:2f:6a:67:04:a4:e6:1e:64:cc:
                    34:b2:a2:b9:5f:54:ab:b4:9e:69:dd:79:00:05:f0:
                    7c:5d:fb:f2:66:95:b1:d2:75:07:d2:3e:bb:bf:91:
                    13:6f:c2:2f:73:54:51:0f:a5:a9:ba:5c:22:14:30:
                    79:af:9d:b8:8a:fe:ce:fe:0a:48:06:8f:75:b2:2c:
                    a2:f8:ea:c1:3d:d0:69:ba:57:80:6f:3a:dd:5f:b7:
                    22:46:f9:ed:54:7b:3e:97:df:de:e5:cd:4a:7f:7f:
                    b4:08:0b:c0:28:bb:65:dc:1c:11:d4:2c:39:ac:5e:
                    2f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2E:4D:2C:B6:AD:66:B5:B3:08:28:BF:94:36:DB:DF:54:FB:CF:26
            X509v3 Authority Key Identifier:
                keyid:B7:A9:98:99:26:96:FF:17:23:DF:04:29:64:56:0B:DF:4E:6F:97:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/B7A998992696FF1723DF042964560BDF4E6F9722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A998992696FF1723DF042964560BDF4E6F9722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/323830343a363262633a3a2f33322d3332203d3e20323639333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:8d:8b:1a:49:80:ca:7d:84:2a:fe:9b:12:47:f5:82:3e:cf:
         8f:0d:49:7c:40:e7:66:ad:fd:2d:72:83:14:39:e7:fe:04:2f:
         ec:02:80:6a:f4:7b:b7:05:56:7c:65:8c:5a:b5:1f:50:30:58:
         8a:12:4f:29:40:d3:67:e2:4b:c2:15:09:3c:98:27:82:8e:21:
         d2:12:54:d7:f3:35:67:85:20:51:fe:2e:55:e5:8f:85:e2:9e:
         39:26:b9:fc:92:96:68:bb:36:74:fe:9f:52:d7:95:be:29:c0:
         9c:24:a0:af:7b:95:67:cd:78:1a:a3:5c:94:4f:ab:de:3c:d4:
         a7:c0:44:43:42:a2:39:d8:96:ef:3c:38:31:44:23:cb:2c:70:
         81:f3:f4:7b:f4:1b:39:38:e0:bc:b4:13:ad:de:ce:51:ef:9f:
         28:46:f6:46:00:13:15:18:74:cd:3a:fa:66:55:f6:a5:eb:7b:
         da:ca:82:a9:76:50:17:f8:b9:d8:be:5b:76:a0:0a:cf:4a:de:
         cd:c6:97:fd:bf:62:1e:74:c0:fe:a8:e2:e4:b9:00:63:e3:bf:
         68:9d:1b:e9:3e:d8:70:9e:70:7b:86:72:60:9a:3d:ad:bc:e0:
         3c:15:d1:1f:80:43:2c:95:92:71:73:fb:29:85:20:d4:f8:1a:
         42:be:c9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----