Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a3a2f33322d3332203d3e20323633393334.roa
File:                     323830343a323830303a3a2f33322d3332203d3e20323633393334.roa (raw, json)
Hash identifier:          OFAkmU60upQ0AmbM50DQ2mW7TdJF3f9QE6yS6VSgyf8=
Subject key identifier:   D4:9B:EF:EE:A2:23:48:27:44:E6:95:40:01:C2:EF:B3:F9:4A:46:09
Certificate issuer:       /CN=38F2E02474ED87E3A76DE6DB986F752AFD10B8C2
Certificate serial:       6E78EAC683AE11F4AB4038751A00F4CEEC350936
Authority key identifier: 38:F2:E0:24:74:ED:87:E3:A7:6D:E6:DB:98:6F:75:2A:FD:10:B8:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a3a2f33322d3332203d3e20323633393334.roa
Signing time:             Fri 27 Jan 2023 20:21:32 +0000
ROA not before:           Fri 27 Jan 2023 20:16:32 +0000
ROA not after:            Fri 26 Jan 2024 20:21:32 +0000
asID:                     263934
IP address blocks:        2804:2800::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:78:ea:c6:83:ae:11:f4:ab:40:38:75:1a:00:f4:ce:ec:35:09:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F2E02474ED87E3A76DE6DB986F752AFD10B8C2
        Validity
            Not Before: Jan 27 20:16:32 2023 GMT
            Not After : Jan 26 20:21:32 2024 GMT
        Subject: CN=D49BEFEEA223482744E6954001C2EFB3F94A4609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6e:f4:74:b4:06:21:4f:ae:66:4b:98:b3:15:
                    e0:75:16:2b:ef:28:34:9d:d7:c0:e8:76:d8:f0:bb:
                    ce:4d:4a:ce:1d:17:76:01:6c:9f:49:96:59:be:17:
                    4b:2a:5b:db:90:4c:2b:94:e3:a9:38:aa:3f:e7:fe:
                    b3:bf:80:1e:85:80:97:13:fb:98:70:7a:0d:78:02:
                    4e:df:dd:06:07:9e:16:fc:59:a9:fa:30:95:27:13:
                    08:b4:25:f0:17:6d:fb:86:96:9c:80:55:0d:7c:f8:
                    64:79:9f:9a:57:fe:1e:e4:82:c6:12:69:46:17:d4:
                    0c:13:ea:7a:e7:56:b0:8d:5f:bb:a4:38:ec:e3:c8:
                    f1:43:2a:45:76:e8:0b:dc:a4:ab:9e:20:29:a6:55:
                    d5:fb:98:dd:84:bf:5e:ac:a3:c0:07:fb:07:05:3a:
                    42:ea:3b:7f:e3:18:6e:19:11:db:ca:b6:b5:37:a8:
                    d3:53:d7:72:e7:c9:51:f8:89:ca:da:88:1e:92:5a:
                    a1:50:7a:79:3d:a1:c7:4e:de:6e:e8:c6:3b:d5:a2:
                    cf:0c:1a:6e:7f:07:19:5e:46:d1:07:0f:35:c4:6f:
                    40:53:e6:d0:09:f6:56:2c:55:e1:19:ee:b5:f4:ef:
                    4a:fd:e4:95:6b:df:dc:20:9c:0a:a4:a3:ba:df:2a:
                    68:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9B:EF:EE:A2:23:48:27:44:E6:95:40:01:C2:EF:B3:F9:4A:46:09
            X509v3 Authority Key Identifier:
                keyid:38:F2:E0:24:74:ED:87:E3:A7:6D:E6:DB:98:6F:75:2A:FD:10:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a3a2f33322d3332203d3e20323633393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2800::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:a6:82:a6:26:42:cb:bd:eb:b4:08:d1:d8:33:1a:06:cc:12:
         b4:73:63:fd:78:ae:86:3f:96:b4:ea:8e:1d:71:54:e6:a8:b6:
         e9:3e:81:a8:df:ed:d6:5d:59:74:86:b4:9e:48:0d:67:3e:5a:
         35:05:f5:4c:9b:7a:ff:f8:22:1b:af:67:13:98:8d:fc:4c:c0:
         f0:b1:7e:3a:35:b5:de:46:38:b9:79:af:9e:12:76:c5:ca:4a:
         c9:e5:2d:ef:b0:33:27:83:75:1c:55:e4:0c:2b:65:23:45:db:
         fa:94:29:80:01:f4:6d:cd:12:22:21:b0:eb:88:9b:d5:0b:3b:
         82:75:1f:06:76:0f:7b:01:e1:99:ec:3e:41:72:28:77:80:36:
         a7:9c:35:ee:65:4b:24:e2:3e:be:21:29:5b:0b:14:ee:6f:c5:
         d4:a9:76:94:56:7c:ba:bf:7d:a1:53:24:d2:2b:5a:88:cc:c3:
         3c:20:a2:2f:16:11:88:83:47:b1:ef:b3:55:12:43:56:25:5d:
         6f:5f:6c:56:60:c9:75:45:65:ac:e3:d0:11:0d:4c:e4:d4:bb:
         55:de:90:41:97:c1:40:11:e1:98:02:1d:44:ab:0f:d9:37:ef:
         89:15:51:c2:87:be:fc:3e:88:98:f9:ef:14:75:da:fa:4c:fe:
         bc:fc:d3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----