Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/323830343a326137633a3a2f33322d3332203d3e20323634303735.roa
File:                     323830343a326137633a3a2f33322d3332203d3e20323634303735.roa (raw, json)
Hash identifier:          oMD4z1trC52d3ZhcYeMxX7wE4xOIzivhKZKCU35cPFs=
Subject key identifier:   B8:73:2D:BF:8C:A4:36:64:F8:4D:59:CD:B0:A9:9C:2B:38:74:26:8A
Certificate issuer:       /CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
Certificate serial:       34D831590C7A6D2D4828CBA952E0ACAB3BD63A9D
Authority key identifier: 8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/323830343a326137633a3a2f33322d3332203d3e20323634303735.roa
Signing time:             Tue 31 Jan 2023 19:37:08 +0000
ROA not before:           Tue 31 Jan 2023 19:32:08 +0000
ROA not after:            Tue 30 Jan 2024 19:37:08 +0000
asID:                     264075
IP address blocks:        2804:2a7c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d8:31:59:0c:7a:6d:2d:48:28:cb:a9:52:e0:ac:ab:3b:d6:3a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
        Validity
            Not Before: Jan 31 19:32:08 2023 GMT
            Not After : Jan 30 19:37:08 2024 GMT
        Subject: CN=B8732DBF8CA43664F84D59CDB0A99C2B3874268A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:6d:2a:fe:e8:4c:18:5f:53:91:89:d8:36:
                    55:30:df:24:c3:a5:95:a5:88:97:d8:03:c5:1e:a4:
                    b5:04:b0:fd:88:07:84:70:7c:50:84:d0:61:01:ac:
                    1d:46:dd:f5:79:b0:f6:4a:27:bf:b1:12:27:49:4e:
                    d9:8f:f0:af:f2:bb:c9:44:56:02:35:f8:04:c5:0e:
                    6b:ff:c8:00:0d:6d:7e:64:09:31:f9:e7:d0:1c:72:
                    c4:d1:da:ff:f3:fd:28:44:dc:81:e8:bd:c9:dc:ff:
                    b3:bd:00:76:1a:f1:92:af:1c:10:7d:17:e6:48:e3:
                    b6:60:6f:c4:40:15:80:77:14:c2:84:e9:de:2d:bc:
                    5b:a1:6c:d8:75:9e:e2:fd:7e:2b:f7:f4:e5:55:09:
                    f5:d6:e1:fa:17:14:fd:d8:0a:8f:f8:bc:43:80:90:
                    4e:b8:20:bf:d6:cb:76:f9:e5:8d:5e:64:95:2e:5a:
                    d2:18:a1:3a:84:5b:6f:33:e6:4f:77:8c:2e:3b:f2:
                    60:42:f2:8c:96:4e:3c:9b:7f:f2:34:90:b9:8e:e8:
                    40:b3:f4:5b:f7:ff:97:80:7d:47:ed:5e:4b:34:21:
                    57:e8:83:ec:da:8d:42:4e:d0:c3:26:61:47:1f:40:
                    80:98:17:98:74:09:2c:8e:71:f2:b4:87:8d:15:be:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:73:2D:BF:8C:A4:36:64:F8:4D:59:CD:B0:A9:9C:2B:38:74:26:8A
            X509v3 Authority Key Identifier:
                keyid:8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/323830343a326137633a3a2f33322d3332203d3e20323634303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:1f:cd:e4:b8:a9:ea:9c:06:9d:70:e5:e2:f3:88:0e:15:ed:
         8a:d8:45:59:97:28:d7:42:93:89:8e:18:41:15:3c:da:41:29:
         d2:da:a2:dd:ca:15:36:42:0c:5f:6d:e3:f3:7a:9b:74:75:9f:
         db:bb:9f:7f:c0:3c:c6:e0:9c:48:77:de:52:93:17:ca:70:3d:
         b2:ab:65:fe:22:f8:00:1a:de:fc:82:7a:19:a8:ff:59:16:90:
         2c:8d:ad:45:2d:3c:a1:89:86:9b:81:1c:81:13:c3:b4:f1:a6:
         65:93:63:fc:0f:4f:49:64:74:6e:02:02:98:ae:2a:51:ac:52:
         47:38:18:af:b0:29:59:d7:b1:3a:18:db:d9:7b:9d:b8:99:9d:
         82:08:1b:a2:bd:34:f4:a5:d4:48:0e:b6:47:a3:f0:f9:a8:65:
         7a:da:92:13:02:ab:5c:a6:b5:b7:84:74:24:be:cc:26:d9:0f:
         d4:90:a2:5d:a1:09:89:d4:79:ca:2b:f4:5d:ae:85:7c:dc:45:
         90:c6:42:42:a2:98:e0:02:3b:6d:e3:2a:ef:b9:55:b8:68:4a:
         b0:79:0a:0c:30:21:e2:38:3b:94:7a:f5:6e:53:64:62:ab:d9:
         8c:33:86:f1:22:bf:2c:1c:f6:82:4e:e2:48:31:77:0e:11:24:
         e9:88:22:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----