Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/323830343a333863633a3a2f33322d3438203d3e20323636353032.roa
File:                     323830343a333863633a3a2f33322d3438203d3e20323636353032.roa (raw, json)
Hash identifier:          bqVX7LF9NcqTlkQ3CZRUP5UJwzbIkzPyd+DO72hwnJc=
Subject key identifier:   43:E9:21:AD:D0:5D:E7:C2:72:6B:15:F3:38:8A:E3:3D:10:18:50:BD
Certificate issuer:       /CN=16419EC1CFD9D7F38EC2DEF0DB32F9B665B68733
Certificate serial:       1F588BB7194787EAE28571B321C107DAACA63401
Authority key identifier: 16:41:9E:C1:CF:D9:D7:F3:8E:C2:DE:F0:DB:32:F9:B6:65:B6:87:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16419EC1CFD9D7F38EC2DEF0DB32F9B665B68733.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/323830343a333863633a3a2f33322d3438203d3e20323636353032.roa
Signing time:             Sat 09 Sep 2023 13:17:47 +0000
ROA not before:           Sat 09 Sep 2023 13:12:47 +0000
ROA not after:            Sat 07 Sep 2024 13:17:47 +0000
asID:                     266502
IP address blocks:        2804:38cc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:58:8b:b7:19:47:87:ea:e2:85:71:b3:21:c1:07:da:ac:a6:34:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16419EC1CFD9D7F38EC2DEF0DB32F9B665B68733
        Validity
            Not Before: Sep  9 13:12:47 2023 GMT
            Not After : Sep  7 13:17:47 2024 GMT
        Subject: CN=43E921ADD05DE7C2726B15F3388AE33D101850BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:16:88:a4:4a:d4:95:d2:80:6d:dd:f2:11:8c:
                    98:98:4c:89:ff:79:8d:bc:48:09:ba:e5:27:fd:bd:
                    a7:e4:db:a9:af:26:e4:d2:d6:0b:d9:0c:ba:e3:b6:
                    61:6a:96:57:d4:a1:d5:b2:cf:b3:94:6f:3c:03:c5:
                    e5:3d:bd:2f:8e:8b:b7:aa:e0:83:f7:20:e4:28:c8:
                    ea:43:5b:f0:65:f7:30:fc:8e:5a:dc:62:16:25:5b:
                    52:13:2b:bc:d0:6c:2c:b6:65:56:e6:d0:c9:b1:a5:
                    c3:44:8f:92:56:24:8c:de:5c:2b:fa:bb:41:e0:6a:
                    8c:6e:fb:8d:8f:3e:cf:96:af:5d:18:33:25:bd:7c:
                    bd:f3:d9:6b:26:72:46:b5:54:ef:fa:9a:18:ce:d4:
                    0f:f0:53:0b:02:ea:16:33:2b:c1:45:ce:bd:13:27:
                    cc:f9:66:c4:eb:0e:1a:1f:31:44:74:af:a0:25:53:
                    25:f6:ef:c1:47:48:b3:49:2a:2e:ef:12:ef:c4:8b:
                    6e:3d:c3:36:22:6e:ec:cb:e9:fe:ce:64:30:6c:ab:
                    c3:1d:06:04:54:78:52:9c:5a:10:8e:b4:81:98:03:
                    54:c0:52:9b:59:6a:68:94:27:44:e6:35:3b:76:29:
                    06:34:f0:ef:29:3a:92:74:07:79:a0:39:5b:49:88:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E9:21:AD:D0:5D:E7:C2:72:6B:15:F3:38:8A:E3:3D:10:18:50:BD
            X509v3 Authority Key Identifier:
                keyid:16:41:9E:C1:CF:D9:D7:F3:8E:C2:DE:F0:DB:32:F9:B6:65:B6:87:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/16419EC1CFD9D7F38EC2DEF0DB32F9B665B68733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16419EC1CFD9D7F38EC2DEF0DB32F9B665B68733.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/323830343a333863633a3a2f33322d3438203d3e20323636353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:9f:2e:b4:5d:aa:b2:f0:9e:ac:0b:42:68:9b:12:b0:de:d0:
         9d:ad:37:87:18:c4:fa:04:f4:36:9d:f6:f9:e2:49:3b:f8:13:
         5f:f4:b6:dc:7b:96:b3:21:9e:0e:6b:c0:02:b2:0a:06:d9:ee:
         f7:9f:6c:5d:1b:65:65:2a:e0:a7:fe:9f:b2:45:7c:06:b4:18:
         f2:92:f2:73:44:c3:7c:12:5c:0f:30:ad:b3:3d:71:6b:70:be:
         c5:31:22:f4:65:0a:f1:9e:0c:f1:88:56:bd:f2:4f:5f:91:12:
         4d:f2:06:d2:95:73:17:70:0e:a4:62:ce:47:11:ad:d7:09:fc:
         39:6f:63:53:fc:98:8b:50:73:48:04:a4:f6:f1:fb:bf:dd:62:
         4c:f6:dd:30:9b:11:10:99:2f:3d:74:3d:69:d0:ef:55:dc:06:
         8f:8a:34:44:61:9f:01:c0:81:4b:91:1d:78:d0:b8:1b:47:ba:
         c8:b3:a9:b1:d5:ae:5f:7d:8d:d7:db:03:bf:67:71:7f:fe:f4:
         f2:86:5a:1c:bf:be:5c:f9:0b:76:0e:3e:75:d0:bb:dd:d2:c6:
         b1:1a:c4:ef:f4:e2:5c:3e:f7:85:25:2e:59:70:1a:92:c0:69:
         c1:04:87:c1:a5:b4:9d:da:b1:72:a0:56:c2:4a:3c:4c:88:1d:
         4f:f2:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----