Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0/323830343a373931633a3a2f33322d3334203d3e20323731323835.roa
File:                     323830343a373931633a3a2f33322d3334203d3e20323731323835.roa (raw, json)
Hash identifier:          39b2OE7lFzoJqa4VZtpBzjkS/TKNVNVnd3kqY4GzGkQ=
Subject key identifier:   2C:35:10:E1:97:26:16:C8:F5:5F:97:CC:DF:0E:FB:B5:93:C7:BD:69
Certificate issuer:       /CN=E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD
Certificate serial:       5950BA93BFD392D906DFE6453807D15F1125AFFF
Authority key identifier: E1:2A:4D:AF:B4:E8:BE:DC:6B:15:AD:55:AA:C7:A0:38:A4:28:75:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0/323830343a373931633a3a2f33322d3334203d3e20323731323835.roa
Signing time:             Thu 24 Aug 2023 19:00:00 +0000
ROA not before:           Thu 24 Aug 2023 18:55:00 +0000
ROA not after:            Thu 22 Aug 2024 19:00:00 +0000
asID:                     271285
IP address blocks:        2804:791c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:50:ba:93:bf:d3:92:d9:06:df:e6:45:38:07:d1:5f:11:25:af:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD
        Validity
            Not Before: Aug 24 18:55:00 2023 GMT
            Not After : Aug 22 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:10:59:3b:34:6f:af:e6:ca:5b:7c:83:aa:
                    41:19:cf:07:5a:91:70:ec:bd:88:e4:eb:c0:86:3a:
                    43:8b:06:8c:11:e0:3b:78:ed:a0:0c:2b:61:45:0a:
                    7b:ab:99:e7:9f:06:10:b8:a9:e2:cd:b3:7c:e0:13:
                    8e:57:e6:32:61:93:e5:ed:5d:eb:d3:03:7f:38:0c:
                    e4:ac:5a:a2:b9:ea:9e:f3:53:69:88:e6:84:85:23:
                    38:37:07:b4:8d:c7:df:96:cf:b5:ca:77:b0:eb:27:
                    12:49:3c:2c:5c:7e:82:e8:d8:5f:0f:4d:4f:34:d9:
                    0f:eb:50:44:80:f2:5c:d1:e0:14:cf:1d:36:a1:58:
                    e2:5b:d2:4c:f0:a1:80:5a:9a:a3:5a:5b:bb:ca:10:
                    87:29:9b:0e:89:0c:5c:5c:76:0c:c6:b7:19:51:eb:
                    3d:a0:98:6d:4f:d1:f2:2a:30:ff:51:ba:99:4e:18:
                    3c:78:85:b1:ad:88:8c:e8:18:55:ab:de:19:44:79:
                    78:fd:47:c8:72:e3:bd:ce:f8:c7:16:bd:be:74:30:
                    cb:04:02:a3:f9:47:4d:2d:cd:ae:8c:a6:53:c6:e4:
                    bd:1d:f1:54:3a:ac:f8:f5:5a:d0:79:bc:91:c7:e3:
                    8c:44:ab:ed:1e:2f:3c:84:65:65:ce:33:a8:8e:05:
                    c9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:35:10:E1:97:26:16:C8:F5:5F:97:CC:DF:0E:FB:B5:93:C7:BD:69
            X509v3 Authority Key Identifier:
                keyid:E1:2A:4D:AF:B4:E8:BE:DC:6B:15:AD:55:AA:C7:A0:38:A4:28:75:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0/E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0/323830343a373931633a3a2f33322d3334203d3e20323731323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:791c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:59:f0:db:f0:64:41:cf:5e:ff:6f:02:cd:f1:94:f6:2b:d4:
         62:a7:da:92:78:a6:52:07:8e:fd:f2:5f:a5:40:76:37:dc:d1:
         1d:14:7d:df:0d:18:cf:9f:3f:ba:11:e3:e7:69:24:70:73:1c:
         b3:75:88:e0:5d:8d:a1:e7:c4:a0:78:17:88:59:11:80:2e:a4:
         d1:7f:33:cd:0c:e1:a6:35:1d:97:37:b7:dc:63:a1:8f:57:61:
         b1:b1:23:e5:9b:8f:cf:d9:d6:4f:e6:bd:3a:43:ed:78:5d:18:
         5e:86:29:02:b9:2c:20:f2:8a:d1:c0:65:90:da:c1:c6:e4:50:
         aa:c4:fc:f6:3a:e6:c7:c2:95:dc:cc:21:4e:bb:f3:b0:bc:91:
         0a:8a:4a:ae:06:ad:2b:72:74:96:d5:64:67:53:1a:27:05:47:
         92:4d:36:a0:02:bc:21:e5:9c:50:78:3a:72:5d:8e:a1:90:54:
         d4:f0:ad:d0:88:d2:68:e4:7c:55:68:bb:a1:21:e7:bc:db:51:
         ea:e1:f4:3b:07:5c:e1:78:40:4a:f3:93:cb:a0:80:30:df:9e:
         ab:01:da:33:05:2e:81:0a:07:5b:be:01:38:75:f4:3f:fd:d5:
         af:ac:a8:ad:1e:bb:85:9e:6f:92:76:22:fe:a6:71:ee:0b:4c:
         3d:1c:03:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----