Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/0/323830343a353465303a3a2f33322d3336203d3e20323638363735.roa
File:                     323830343a353465303a3a2f33322d3336203d3e20323638363735.roa (raw, json)
Hash identifier:          u0t7PscYo4KsXjXCChgMHK8FOJPEELdYMT29CQ6/sDI=
Subject key identifier:   20:D0:7D:34:92:D9:4F:2E:C7:61:DB:A0:8E:03:26:CA:25:AB:11:88
Certificate issuer:       /CN=F76EFD7BAD5DAB91CE5C0AF713AECDEB2684C509
Certificate serial:       3AE1DE98C032C4E14F2494DAD20B5AFC4796B705
Authority key identifier: F7:6E:FD:7B:AD:5D:AB:91:CE:5C:0A:F7:13:AE:CD:EB:26:84:C5:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F76EFD7BAD5DAB91CE5C0AF713AECDEB2684C509.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/0/323830343a353465303a3a2f33322d3336203d3e20323638363735.roa
Signing time:             Thu 03 Aug 2023 22:00:00 +0000
ROA not before:           Thu 03 Aug 2023 21:55:00 +0000
ROA not after:            Thu 01 Aug 2024 22:00:00 +0000
asID:                     268675
IP address blocks:        2804:54e0::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e1:de:98:c0:32:c4:e1:4f:24:94:da:d2:0b:5a:fc:47:96:b7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F76EFD7BAD5DAB91CE5C0AF713AECDEB2684C509
        Validity
            Not Before: Aug  3 21:55:00 2023 GMT
            Not After : Aug  1 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:0a:06:d7:f3:5b:10:ae:d9:bd:f1:79:bb:
                    26:d7:be:08:0d:fc:e5:d1:cc:a3:0c:e2:2f:c2:f6:
                    5f:c0:d0:7d:6e:35:15:69:a4:e1:51:67:41:9e:75:
                    d5:92:9f:4f:1d:00:13:c3:64:85:b0:3a:df:75:c5:
                    48:2b:f4:10:eb:4c:53:2c:20:58:c6:56:fc:e2:71:
                    7d:04:36:2e:13:73:53:a6:0e:78:c2:d7:da:3c:36:
                    7a:d3:5e:f5:d7:2a:78:3e:26:09:7d:83:ee:c0:b1:
                    a4:da:81:d0:6b:60:4e:3d:a4:13:b0:51:ea:3a:17:
                    d1:9d:40:b1:e9:d7:35:ea:c3:cc:e6:a5:e4:c7:3f:
                    d8:00:a6:7a:17:26:a2:ef:54:e0:03:c4:ca:f7:7b:
                    3b:0d:9f:2e:6e:9a:70:97:0b:fb:4a:b2:5e:a6:1c:
                    02:ce:cb:f1:98:e6:b1:fa:99:28:f5:a6:15:db:b3:
                    16:3a:cd:a8:21:c9:c4:92:b9:37:89:00:28:ac:79:
                    95:b5:37:4f:35:27:aa:0c:be:c1:39:41:6c:2c:e6:
                    fb:40:1a:6f:fe:24:eb:72:d3:7f:84:cf:db:8e:24:
                    5b:51:b5:31:d8:86:4e:b0:8a:eb:44:47:48:15:96:
                    fd:13:42:f6:26:3d:b3:d7:ce:6f:c6:89:ab:81:82:
                    4c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D0:7D:34:92:D9:4F:2E:C7:61:DB:A0:8E:03:26:CA:25:AB:11:88
            X509v3 Authority Key Identifier:
                keyid:F7:6E:FD:7B:AD:5D:AB:91:CE:5C:0A:F7:13:AE:CD:EB:26:84:C5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/0/F76EFD7BAD5DAB91CE5C0AF713AECDEB2684C509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F76EFD7BAD5DAB91CE5C0AF713AECDEB2684C509.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/0/323830343a353465303a3a2f33322d3336203d3e20323638363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:e4:73:58:ec:24:95:25:a2:52:b9:bd:9d:6d:f7:1f:11:8f:
         9c:f3:82:7d:11:d9:e0:1c:9a:3c:42:fd:60:44:46:34:10:00:
         0d:ba:da:07:63:aa:5d:21:b8:5b:2a:d9:df:ea:bf:d1:44:b1:
         6e:9f:fe:a2:43:85:d5:ff:ba:3a:bf:52:b6:8a:53:3a:b0:e5:
         3e:c0:6d:93:38:c8:1f:76:cf:76:cc:cb:c7:cb:5e:6e:14:16:
         77:01:ba:e6:1e:56:5a:2c:a4:bf:9e:81:6d:29:ef:af:b3:19:
         0b:5e:61:da:24:56:dd:48:cd:ee:da:c7:1f:60:f8:39:8e:d3:
         35:bc:08:39:f0:cd:5b:90:67:a1:4d:d4:07:b3:0d:17:3d:28:
         49:92:a1:10:ce:e6:b2:ab:14:93:c3:3b:70:b1:73:40:30:a6:
         4b:cb:96:28:70:23:c3:a6:0a:60:5e:f4:73:8e:db:4d:52:2d:
         a7:bf:a8:37:a4:22:cd:fc:13:69:08:1f:93:86:9d:63:7c:dd:
         7c:1b:18:47:ee:b6:b1:94:37:06:cc:67:4d:2b:dd:0b:3b:d6:
         47:ad:12:8f:38:35:39:11:25:ca:f0:aa:0b:70:2d:a5:4a:f8:
         8a:fa:f1:f3:85:5e:55:c5:b8:dc:8e:85:4e:c4:b7:ad:2d:8d:
         f5:c2:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----