Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/323830343a333734383a3a2f33322d3332203d3e20323636343031.roa
File:                     323830343a333734383a3a2f33322d3332203d3e20323636343031.roa (raw, json)
Hash identifier:          VpY2GXTa7mD3K3yUVhqxxid1a+7+IHXRbRrVPjuAhZc=
Subject key identifier:   91:76:EE:7A:4B:B6:50:AC:BA:90:2E:CC:15:CD:34:FE:6B:30:E5:75
Certificate issuer:       /CN=E30427505E0181222934723688BA4A47B7054C75
Certificate serial:       2B6D6677059270EC6CC51A2CF2FB1E767C223C35
Authority key identifier: E3:04:27:50:5E:01:81:22:29:34:72:36:88:BA:4A:47:B7:05:4C:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E30427505E0181222934723688BA4A47B7054C75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/323830343a333734383a3a2f33322d3332203d3e20323636343031.roa
Signing time:             Wed 08 Mar 2023 14:49:35 +0000
ROA not before:           Wed 08 Mar 2023 14:44:35 +0000
ROA not after:            Wed 06 Mar 2024 14:49:35 +0000
asID:                     266401
IP address blocks:        2804:3748::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6d:66:77:05:92:70:ec:6c:c5:1a:2c:f2:fb:1e:76:7c:22:3c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E30427505E0181222934723688BA4A47B7054C75
        Validity
            Not Before: Mar  8 14:44:35 2023 GMT
            Not After : Mar  6 14:49:35 2024 GMT
        Subject: CN=9176EE7A4BB650ACBA902ECC15CD34FE6B30E575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1f:71:6f:79:43:8a:8e:56:5c:50:d9:75:df:
                    88:d8:b8:7c:0a:9b:0d:e4:0a:22:91:11:2f:0f:a0:
                    93:da:41:37:1c:7d:cc:12:52:4d:70:71:dc:dd:cc:
                    ea:c3:44:80:2b:36:6c:e2:14:73:6f:48:00:13:b5:
                    ac:91:ce:dc:b8:60:af:bf:c3:6d:67:cb:c1:b4:e8:
                    fd:3e:ba:d8:15:82:33:cb:f1:75:04:dc:dc:c3:b5:
                    33:73:02:19:2f:12:50:5c:d1:dd:b8:7f:68:4a:d5:
                    55:db:d9:97:76:48:6b:28:b7:a1:2b:a7:17:f8:1b:
                    21:ec:b2:0c:ec:4f:e1:22:d7:d2:26:fa:78:37:2c:
                    69:ea:eb:cf:88:74:62:34:ac:ab:8f:7a:b2:e8:0b:
                    ef:41:52:27:3d:e3:6a:5a:30:43:82:aa:93:9b:76:
                    4d:d3:e5:e4:a8:c7:0f:d3:ad:50:5b:35:55:79:59:
                    f1:e3:c0:0e:d9:7a:83:10:aa:bb:6d:1c:ad:04:1c:
                    de:86:1e:52:15:ff:ff:54:21:af:2c:06:8b:68:0a:
                    ab:7c:75:8d:3f:39:e4:d5:c2:af:90:fe:fa:3a:63:
                    61:e1:04:48:ff:2c:2d:51:d3:4b:b9:91:25:eb:9f:
                    fd:bd:a8:48:82:14:ef:1e:b4:5c:ea:5e:db:d9:aa:
                    8f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:76:EE:7A:4B:B6:50:AC:BA:90:2E:CC:15:CD:34:FE:6B:30:E5:75
            X509v3 Authority Key Identifier:
                keyid:E3:04:27:50:5E:01:81:22:29:34:72:36:88:BA:4A:47:B7:05:4C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/E30427505E0181222934723688BA4A47B7054C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E30427505E0181222934723688BA4A47B7054C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/323830343a333734383a3a2f33322d3332203d3e20323636343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3748::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:75:21:aa:7c:d7:49:d2:2d:bf:8f:11:65:da:4d:84:e1:5a:
         11:d3:9a:8e:fb:05:56:d4:d0:4a:d5:08:15:5b:d0:a3:85:21:
         6f:1f:5c:01:9b:74:69:d5:13:4f:80:8a:1a:ff:75:3e:2f:3a:
         c7:19:30:96:19:1d:75:3d:83:3c:63:93:ae:cd:e7:df:a5:77:
         ee:70:aa:82:bc:4a:44:9f:29:03:ed:d0:47:52:d8:5f:b8:a0:
         4c:55:de:d1:c6:bf:e7:86:1c:cc:7b:7f:54:a1:34:61:f1:18:
         b5:2a:e7:58:a7:ec:16:b7:09:e5:88:a1:d7:8f:cd:3a:06:b6:
         a8:8e:e0:b0:12:21:a9:fd:aa:b5:fd:fe:ec:a5:3d:db:67:92:
         ae:4e:af:c1:c2:33:d2:73:ac:c2:36:14:1a:ff:d2:fd:13:b8:
         7a:53:1c:74:59:99:01:f7:8f:49:b2:86:88:c9:d1:23:ee:3c:
         b6:b2:c9:19:87:c9:3c:2b:42:ef:64:85:86:c6:ee:84:5c:11:
         90:4d:54:86:ea:07:e7:32:2d:7f:66:70:e7:e7:24:d5:f9:2f:
         e1:95:20:79:0f:3b:fb:07:d9:7e:4b:ff:70:96:21:2e:bc:51:
         7b:7c:f4:b2:a4:85:e7:b4:26:a5:f4:fc:40:42:62:bc:31:d6:
         29:ef:73:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----