Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/323830343a6366303a3a2f33322d3332203d3e203532353736.roa
File:                     323830343a6366303a3a2f33322d3332203d3e203532353736.roa (raw, json)
Hash identifier:          jJwDPtBbFRV8c0bKrb2eGecAvjlB5uzqEZ1eABzYPx4=
Subject key identifier:   1C:5F:A3:4F:6D:FB:B1:2A:4A:E3:DF:E8:81:0B:CB:6A:D9:3C:D1:62
Certificate issuer:       /CN=FC100DC5B568BA67A953B7D437E5FF8FC8C7254B
Certificate serial:       22D4FF46C1B245C8CF8165D57E8241DF37505E5B
Authority key identifier: FC:10:0D:C5:B5:68:BA:67:A9:53:B7:D4:37:E5:FF:8F:C8:C7:25:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC100DC5B568BA67A953B7D437E5FF8FC8C7254B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/323830343a6366303a3a2f33322d3332203d3e203532353736.roa
Signing time:             Tue 16 May 2023 18:19:48 +0000
ROA not before:           Tue 16 May 2023 18:14:48 +0000
ROA not after:            Tue 14 May 2024 18:19:48 +0000
asID:                     52576
IP address blocks:        2804:cf0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d4:ff:46:c1:b2:45:c8:cf:81:65:d5:7e:82:41:df:37:50:5e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC100DC5B568BA67A953B7D437E5FF8FC8C7254B
        Validity
            Not Before: May 16 18:14:48 2023 GMT
            Not After : May 14 18:19:48 2024 GMT
        Subject: CN=1C5FA34F6DFBB12A4AE3DFE8810BCB6AD93CD162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:c1:3c:f0:d7:16:e7:f7:b8:41:aa:b1:c4:
                    53:81:99:5b:f9:1c:34:86:88:1f:56:eb:a5:81:2d:
                    42:75:2a:81:09:d8:f1:d3:06:6c:fb:40:d6:f1:74:
                    a7:06:de:38:9d:5c:00:0a:a1:28:42:2c:f1:01:c8:
                    aa:12:23:61:0d:46:c2:db:a7:0b:65:5c:d7:ea:68:
                    03:ba:a4:8d:12:13:dc:ec:5a:00:6f:22:8d:1a:dc:
                    63:4f:4f:f5:f7:76:0d:e6:a6:e6:de:ef:c1:a4:58:
                    ba:5e:e7:6c:54:29:b9:43:db:8b:8e:28:4a:f6:d2:
                    1b:39:9d:72:fa:7a:5e:27:43:39:6c:d6:b4:50:b2:
                    e9:d3:19:7e:2b:f4:93:84:75:4d:72:75:30:c4:5a:
                    fc:04:0d:ff:7f:98:72:0b:0e:57:18:93:67:0e:98:
                    7f:31:d7:d7:9d:76:74:73:ca:46:e2:e1:ea:fe:4c:
                    50:50:b3:af:7b:09:bf:b7:28:4c:e8:d8:71:6e:38:
                    bf:b1:47:fd:62:0b:f6:9d:cc:4a:17:15:c9:97:f6:
                    00:77:59:73:2a:e6:4b:34:3b:b5:3a:d7:7a:86:c2:
                    07:c5:c2:9f:6c:5b:f2:dc:d4:eb:b8:bf:3c:e5:27:
                    ed:83:69:26:ae:6c:db:14:78:f0:b6:71:56:6e:47:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5F:A3:4F:6D:FB:B1:2A:4A:E3:DF:E8:81:0B:CB:6A:D9:3C:D1:62
            X509v3 Authority Key Identifier:
                keyid:FC:10:0D:C5:B5:68:BA:67:A9:53:B7:D4:37:E5:FF:8F:C8:C7:25:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/FC100DC5B568BA67A953B7D437E5FF8FC8C7254B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC100DC5B568BA67A953B7D437E5FF8FC8C7254B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/323830343a6366303a3a2f33322d3332203d3e203532353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:ac:ab:cb:52:c4:6b:d0:1e:53:ac:14:be:e2:0b:62:e7:24:
         6a:ab:8f:a8:15:a8:fb:71:b2:ee:9e:ef:71:48:d9:c4:26:5b:
         d0:9e:25:0f:2f:d9:87:f1:d1:8a:53:87:4c:cd:4b:8c:93:74:
         e6:be:12:1c:f2:57:ce:e2:0a:c4:e1:02:c3:34:7c:aa:e7:f3:
         16:77:4d:04:b0:c3:f1:7b:37:e9:06:02:5e:6e:33:ba:7d:7c:
         d1:a0:5c:e0:e8:30:b0:12:e7:7f:18:a4:a4:27:a5:b7:8a:e7:
         7e:8c:14:ac:3c:ee:d6:05:b2:28:da:83:96:a8:96:ef:79:e1:
         79:a5:d5:82:bb:41:93:f9:8b:69:dd:41:80:8d:2d:c6:23:1f:
         d2:52:fd:7d:71:17:41:b1:4b:86:81:7a:bb:fc:9e:64:ff:11:
         3f:c2:5b:e8:2d:40:f6:57:9f:ac:3d:06:da:d5:e2:1b:df:55:
         ed:76:40:2a:c5:af:22:fd:ca:c7:e8:e5:ca:da:0f:a1:f1:01:
         29:19:35:2a:db:47:9a:3c:72:66:8e:e4:4d:47:db:fc:f3:6e:
         53:65:49:f2:0a:94:58:b6:df:05:7e:83:7f:f2:31:67:db:74:
         2a:28:c3:16:6c:fa:01:77:e1:c7:7e:aa:01:b8:e8:83:32:dc:
         e2:27:aa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----