Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/323830343a6531383a3a2f33322d3438203d3e203532353434.roa
File:                     323830343a6531383a3a2f33322d3438203d3e203532353434.roa (raw, json)
Hash identifier:          xcSg5tHy+OOSBknydH1K4aBTfddWILcpAbAWCbaeOak=
Subject key identifier:   5E:4D:BD:9B:B9:4F:43:B3:FE:75:8A:60:F5:9C:0F:0A:46:E6:DF:CA
Certificate issuer:       /CN=31630A7A42C569095682EE8F32F19DBFE4BD81FC
Certificate serial:       18AFA42709312A3288F6DFFCBF80BC65B066F8E0
Authority key identifier: 31:63:0A:7A:42:C5:69:09:56:82:EE:8F:32:F1:9D:BF:E4:BD:81:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31630A7A42C569095682EE8F32F19DBFE4BD81FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/323830343a6531383a3a2f33322d3438203d3e203532353434.roa
Signing time:             Thu 05 Jan 2023 14:21:16 +0000
ROA not before:           Thu 05 Jan 2023 14:16:16 +0000
ROA not after:            Thu 04 Jan 2024 14:21:16 +0000
asID:                     52544
IP address blocks:        2804:e18::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:af:a4:27:09:31:2a:32:88:f6:df:fc:bf:80:bc:65:b0:66:f8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31630A7A42C569095682EE8F32F19DBFE4BD81FC
        Validity
            Not Before: Jan  5 14:16:16 2023 GMT
            Not After : Jan  4 14:21:16 2024 GMT
        Subject: CN=5E4DBD9BB94F43B3FE758A60F59C0F0A46E6DFCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:f0:2d:23:09:c2:c3:fb:b1:51:b9:ad:1d:
                    50:5f:57:4c:ea:51:2d:8a:63:9c:65:f9:cc:14:fd:
                    31:66:f4:68:43:eb:8f:b6:8d:f0:08:8b:b9:15:c9:
                    58:2f:97:ac:7d:9e:40:60:c3:5d:1c:ec:49:a9:f4:
                    a2:0e:59:07:79:6d:20:72:97:ba:37:d7:23:89:48:
                    56:ad:64:fd:2b:2c:2d:ca:66:f7:7b:8b:e7:93:0b:
                    90:67:35:89:b8:b1:ac:08:e5:a2:0e:95:dc:a5:e5:
                    d8:93:f5:3e:df:1b:60:53:1e:9d:98:70:5c:33:d1:
                    d5:37:6d:6b:a1:68:34:82:a5:5a:d4:c0:fd:c0:bc:
                    2f:aa:40:b8:81:45:b3:3e:a4:73:2a:9c:aa:16:e1:
                    da:4c:84:58:f4:42:f1:a6:66:2f:75:1a:88:ec:5e:
                    4b:e1:1a:26:5a:9a:ce:e5:92:29:91:ce:20:3d:27:
                    8f:1d:53:5b:5a:4e:37:21:bd:0f:e4:ee:19:6e:44:
                    88:51:26:58:96:07:7b:76:ef:a3:b5:85:5f:1d:80:
                    10:a3:57:38:59:5f:46:c4:c9:85:99:58:a9:ab:c4:
                    76:bb:bf:9b:d4:8b:a2:42:5f:c4:8a:1d:5a:47:a9:
                    d0:a5:43:d6:62:f7:ee:30:92:bd:c2:66:30:ff:32:
                    a9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4D:BD:9B:B9:4F:43:B3:FE:75:8A:60:F5:9C:0F:0A:46:E6:DF:CA
            X509v3 Authority Key Identifier:
                keyid:31:63:0A:7A:42:C5:69:09:56:82:EE:8F:32:F1:9D:BF:E4:BD:81:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/31630A7A42C569095682EE8F32F19DBFE4BD81FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31630A7A42C569095682EE8F32F19DBFE4BD81FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/323830343a6531383a3a2f33322d3438203d3e203532353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e18::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:70:1e:0d:6f:c1:4e:a1:a4:6b:08:78:d4:b6:6c:db:7e:9f:
         3c:a7:ad:38:b4:c8:83:a2:c9:5b:50:5b:97:f3:3f:0d:47:2c:
         6f:9a:0d:00:71:46:9b:fb:0a:73:2b:2b:5d:20:42:a8:36:ce:
         fc:d9:c3:bf:08:da:fd:25:88:24:3d:90:72:e8:12:a3:e2:9b:
         3a:52:4c:8d:b4:e1:91:9e:6f:c6:9c:e6:31:aa:7d:fb:bb:f5:
         f9:a8:4a:9b:54:f0:01:1a:8f:75:48:a0:c8:8a:ba:67:ab:e6:
         92:ed:ad:a3:75:a5:86:2a:75:59:54:34:09:50:dd:48:73:bd:
         8f:40:5a:ae:e4:27:3c:b0:65:b0:63:02:76:df:65:2e:50:b2:
         3e:e3:97:c8:88:1b:c4:01:d9:a2:1e:0f:a0:d0:a2:d9:b6:a3:
         5e:30:e6:f9:d4:78:9b:2f:ab:8d:fe:7d:f2:a2:c0:c1:ad:e3:
         d1:9a:04:16:bb:07:65:54:68:f5:76:b2:a3:19:ba:84:73:33:
         38:55:c5:3b:29:81:02:1f:34:95:a9:3a:6a:0f:43:d6:42:ac:
         5e:ed:7c:cd:31:e9:b5:09:c3:22:d1:6f:42:57:3b:71:14:51:
         e5:f4:16:7f:25:1d:77:af:fd:c1:ed:cf:ce:bc:dd:f3:be:bf:
         48:67:4e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----