Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/323830343a316538383a3a2f33322d3332203d3e20323634343334.roa
File:                     323830343a316538383a3a2f33322d3332203d3e20323634343334.roa (raw, json)
Hash identifier:          2zB70vdUzWCIVXMdXdxGgEurw8Xuw1AE+VVTtCzouGk=
Subject key identifier:   47:B2:FB:93:F0:BA:6F:35:3E:8C:7C:20:D4:4D:E9:63:4E:43:7F:45
Certificate issuer:       /CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
Certificate serial:       255A1F7AFE53E30BF0239C54806A30BEDBDB3BD2
Authority key identifier: 5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/323830343a316538383a3a2f33322d3332203d3e20323634343334.roa
Signing time:             Wed 10 May 2023 13:28:15 +0000
ROA not before:           Wed 10 May 2023 13:23:15 +0000
ROA not after:            Wed 08 May 2024 13:28:15 +0000
asID:                     264434
IP address blocks:        2804:1e88::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5a:1f:7a:fe:53:e3:0b:f0:23:9c:54:80:6a:30:be:db:db:3b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
        Validity
            Not Before: May 10 13:23:15 2023 GMT
            Not After : May  8 13:28:15 2024 GMT
        Subject: CN=47B2FB93F0BA6F353E8C7C20D44DE9634E437F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:04:e9:8a:ff:89:ed:55:d0:af:64:31:56:
                    10:9b:6a:13:18:f0:a4:c2:0f:86:15:e2:bd:62:f8:
                    53:2a:79:c2:68:c8:80:67:09:25:2a:1b:6a:5b:7a:
                    a9:d0:3e:8d:2d:83:5c:b5:e0:fe:7b:3a:5e:5c:d2:
                    09:a7:d5:39:a1:69:a6:31:2d:3c:a5:6f:bd:89:59:
                    93:8e:31:e2:1d:d4:8d:d9:54:e2:86:f5:0a:b2:f2:
                    af:aa:41:ed:74:2b:57:6c:67:34:6d:a7:85:be:1b:
                    49:af:84:74:eb:76:c1:08:1e:60:a1:e9:52:f8:3c:
                    c6:1a:73:18:e6:56:d9:9b:a6:f4:80:4d:e2:ac:e5:
                    9e:67:42:80:b9:8e:9f:fd:18:27:6b:9b:ab:e9:ab:
                    7c:24:ec:f7:96:f6:60:1c:b6:a5:8f:78:cb:df:cf:
                    93:f4:34:93:49:ca:74:9d:8b:bf:8c:3e:ad:d3:a8:
                    e1:5c:5c:2f:81:78:b3:81:61:9a:02:98:bf:1b:86:
                    bd:2f:67:7a:c2:45:fe:1d:be:df:28:50:d1:4e:2a:
                    c0:8a:46:4f:33:ba:03:f5:c5:14:44:a1:20:fb:f5:
                    c9:09:44:ff:ef:ee:71:4a:d5:71:89:40:72:73:04:
                    d4:0d:11:32:e2:48:8a:c9:94:b5:9a:91:e5:83:22:
                    43:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B2:FB:93:F0:BA:6F:35:3E:8C:7C:20:D4:4D:E9:63:4E:43:7F:45
            X509v3 Authority Key Identifier:
                keyid:5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/323830343a316538383a3a2f33322d3332203d3e20323634343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e88::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:21:0c:84:9b:28:e1:83:f9:32:31:28:ac:9a:6e:db:54:2b:
         0f:5f:74:b0:7e:39:b2:c5:74:3f:a6:4f:79:5a:5a:be:26:64:
         27:5c:f6:07:0d:22:98:47:31:39:09:11:98:bd:6c:15:fa:3f:
         44:2c:9b:22:ae:61:bf:cb:f2:c8:e5:32:a4:76:f6:60:06:0a:
         38:55:4c:8e:97:00:bf:c4:29:74:8f:f6:bb:6a:25:37:22:a1:
         29:10:c2:e9:e1:86:a2:67:9f:82:fe:ce:c5:c0:d8:8b:06:db:
         38:57:fd:00:9b:f8:fd:30:cd:fa:9b:4b:10:d0:6f:6e:12:eb:
         3b:c1:23:ca:e1:86:02:a6:ab:4d:8e:09:0f:e3:5f:e2:5c:a8:
         1e:7d:5f:ed:ce:eb:c6:48:0e:f9:9a:8b:fc:07:71:72:98:e9:
         ea:72:17:85:5f:6f:68:2b:8d:cc:df:86:c5:9b:3d:4e:d4:ea:
         ee:7a:3e:fd:b0:67:f3:cf:e7:6c:5a:5f:c2:8c:54:7a:83:77:
         69:77:30:93:f7:11:e2:29:63:3f:d2:a9:e3:b5:86:40:cc:9d:
         c1:fa:e4:a3:ac:78:ee:d1:4e:bd:ba:01:4a:1c:17:c2:ce:02:
         b5:ea:fe:af:bf:50:ad:d9:df:14:e6:f5:4a:8a:64:ff:bf:e5:
         8f:64:8a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----