Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/323830343a326633633a3a2f33322d3434203d3e20323634383739.roa
File:                     323830343a326633633a3a2f33322d3434203d3e20323634383739.roa (raw, json)
Hash identifier:          djRiEe8Rxf64nXx0cN8NosdqEr6OQ0JPVop7yUGTOfc=
Subject key identifier:   0F:97:DC:E1:82:45:CA:C7:DB:42:8D:32:29:2C:3B:BD:4C:FF:CF:4F
Certificate issuer:       /CN=B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228
Certificate serial:       2DDB3BAA381342F9442F50F4C39E07E1462D7E4C
Authority key identifier: B5:54:1D:2F:C4:F0:FE:E0:33:E6:8E:EC:7D:7F:F7:D4:BD:34:92:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/323830343a326633633a3a2f33322d3434203d3e20323634383739.roa
Signing time:             Thu 13 Jul 2023 20:26:49 +0000
ROA not before:           Thu 13 Jul 2023 20:21:49 +0000
ROA not after:            Thu 11 Jul 2024 20:26:49 +0000
asID:                     264879
IP address blocks:        2804:2f3c::/32 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:db:3b:aa:38:13:42:f9:44:2f:50:f4:c3:9e:07:e1:46:2d:7e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228
        Validity
            Not Before: Jul 13 20:21:49 2023 GMT
            Not After : Jul 11 20:26:49 2024 GMT
        Subject: CN=0F97DCE18245CAC7DB428D32292C3BBD4CFFCF4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:c3:5b:eb:e3:a5:89:f6:1f:07:06:44:89:
                    7b:81:e5:48:66:e7:e2:ad:96:30:c4:71:c7:e5:2e:
                    24:1a:73:66:da:6d:a9:35:87:db:21:ab:48:0b:54:
                    01:e2:74:41:44:72:28:78:8b:a2:3f:9c:3e:b0:14:
                    8c:8e:c1:e2:33:82:a5:12:9e:ec:4b:f4:3b:b9:50:
                    97:45:28:b0:25:1f:3e:a9:79:89:95:91:81:ca:92:
                    fa:fa:b6:ec:e3:f8:bc:e4:78:2a:72:02:26:dc:79:
                    e4:1e:84:f9:a1:b7:b1:bc:5a:08:60:f7:c0:1d:27:
                    8e:1d:d4:de:51:07:4a:d6:39:7c:38:0e:3b:60:5e:
                    61:09:b0:49:a7:7a:2b:4a:a2:08:a9:22:c4:3e:5e:
                    39:19:71:4c:e5:a0:09:41:99:be:c8:c8:c4:7f:03:
                    3d:3b:c2:29:14:3e:83:39:f7:4e:5f:df:fe:69:ea:
                    f8:65:32:fd:f2:02:09:58:c6:f3:44:f0:e4:29:57:
                    75:0e:00:ac:61:0a:d7:74:40:d8:c5:33:8a:7d:f3:
                    87:da:c8:63:ba:e8:b9:85:8b:01:22:ec:3f:0c:eb:
                    bd:3a:9d:b0:63:21:66:44:5d:ab:b0:a5:06:d3:d5:
                    00:75:59:6c:20:fd:43:0f:e0:03:d3:2a:17:9e:84:
                    b5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:97:DC:E1:82:45:CA:C7:DB:42:8D:32:29:2C:3B:BD:4C:FF:CF:4F
            X509v3 Authority Key Identifier:
                keyid:B5:54:1D:2F:C4:F0:FE:E0:33:E6:8E:EC:7D:7F:F7:D4:BD:34:92:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/323830343a326633633a3a2f33322d3434203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:b9:9e:d6:35:84:11:fb:92:58:b9:1c:bc:d3:2e:48:14:b3:
         d0:e0:ce:e2:dd:e6:eb:e3:b0:43:09:2b:6f:22:e5:f0:b9:46:
         c1:2f:8b:6e:40:a3:ec:ba:6e:e1:12:b7:11:e9:7c:91:bb:10:
         3a:e9:1a:31:55:31:5a:ef:71:96:ad:cf:60:cf:74:92:96:57:
         34:42:0c:12:89:87:a1:93:fe:fc:fc:07:de:b7:47:c0:2b:09:
         bf:95:39:85:65:b8:7f:b2:68:66:47:31:1f:37:3a:2b:ec:9e:
         03:97:b2:1d:82:69:3c:1f:22:ef:e6:b6:05:34:8d:f1:2a:38:
         3e:88:49:c7:f3:1c:0c:c3:a2:be:2d:d9:96:55:27:4c:ee:f1:
         e5:4f:e3:bc:ed:7b:0d:e7:a6:a0:d7:d1:b5:8b:85:8a:d4:8e:
         fb:66:6e:5a:f8:d4:e1:29:3d:60:73:7d:74:d3:32:4e:35:9b:
         c3:23:e6:ff:24:a4:8e:7e:d7:1d:53:ff:e8:97:d0:95:c5:25:
         f3:c5:85:5e:25:1c:2f:4b:62:b8:6b:0c:5b:e2:81:98:61:8f:
         12:26:94:4c:6e:07:5a:b5:73:dd:3e:1f:d6:51:f0:07:86:ef:
         25:2a:45:67:c4:10:72:92:11:47:dd:29:82:74:8d:c6:47:e6:
         f5:24:93:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----