Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/323830343a386361383a3a2f33322d3334203d3e20323733383133.roa
File:                     323830343a386361383a3a2f33322d3334203d3e20323733383133.roa (raw, json)
Hash identifier:          YBB49AtJnWlZRyO3ETfTBubV5UqA6B31clJeghLbWkU=
Subject key identifier:   47:66:F0:5F:32:F6:4C:A8:53:6A:4C:DC:24:FB:7A:82:1F:0A:B5:26
Certificate issuer:       /CN=4438F82E71FEA523ED5A4CB621BCC4E846CC8AAD
Certificate serial:       5B7722A3CF1112852613AA897A448695CB8A5B1C
Authority key identifier: 44:38:F8:2E:71:FE:A5:23:ED:5A:4C:B6:21:BC:C4:E8:46:CC:8A:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4438F82E71FEA523ED5A4CB621BCC4E846CC8AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/323830343a386361383a3a2f33322d3334203d3e20323733383133.roa
Signing time:             Fri 06 Oct 2023 21:47:49 +0000
ROA not before:           Fri 06 Oct 2023 21:42:49 +0000
ROA not after:            Fri 04 Oct 2024 21:47:49 +0000
asID:                     273813
IP address blocks:        2804:8ca8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:77:22:a3:cf:11:12:85:26:13:aa:89:7a:44:86:95:cb:8a:5b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4438F82E71FEA523ED5A4CB621BCC4E846CC8AAD
        Validity
            Not Before: Oct  6 21:42:49 2023 GMT
            Not After : Oct  4 21:47:49 2024 GMT
        Subject: CN=4766F05F32F64CA8536A4CDC24FB7A821F0AB526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:02:82:c2:75:a9:b5:a9:1a:18:b4:98:f6:de:
                    94:14:15:c9:f5:a5:eb:5e:53:4b:71:c6:f3:fb:0d:
                    d7:b4:c3:0c:f4:b5:ba:7b:11:90:28:1f:e1:43:44:
                    c5:aa:fa:30:8f:69:d2:13:0a:62:f7:21:11:dc:27:
                    d4:31:7f:93:22:81:bd:09:d3:6c:82:ed:53:f1:a1:
                    1a:3c:95:99:7c:44:44:fd:ce:ae:4e:ea:32:8e:6c:
                    39:7e:01:28:00:e1:a8:55:f4:66:23:46:27:a3:ab:
                    a2:0d:07:de:61:c8:ec:ab:aa:c5:73:58:a6:e9:32:
                    e3:21:d1:38:d6:a6:5f:f1:fe:17:50:f8:a3:3f:38:
                    01:7b:0b:d8:30:fb:1b:cd:a0:5f:be:1e:4a:da:52:
                    38:ce:77:1c:90:0c:27:a0:50:7b:5c:fa:c3:81:8f:
                    fb:b1:e2:4a:32:0c:2b:b7:31:e4:f2:11:d9:24:7f:
                    a9:63:34:52:d8:93:5c:4e:b9:21:0e:f0:b4:4c:3e:
                    8b:a8:5e:33:75:0f:5a:33:4e:29:8d:75:30:a9:2e:
                    73:8a:da:0b:86:d4:f2:b6:69:6d:9d:63:15:5f:1b:
                    b2:b6:72:a9:e5:84:9c:b4:2b:57:3a:43:9a:be:17:
                    91:9f:38:5c:7c:4f:41:cf:40:b9:a5:21:ed:ef:c2:
                    c3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:66:F0:5F:32:F6:4C:A8:53:6A:4C:DC:24:FB:7A:82:1F:0A:B5:26
            X509v3 Authority Key Identifier:
                keyid:44:38:F8:2E:71:FE:A5:23:ED:5A:4C:B6:21:BC:C4:E8:46:CC:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/4438F82E71FEA523ED5A4CB621BCC4E846CC8AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4438F82E71FEA523ED5A4CB621BCC4E846CC8AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/323830343a386361383a3a2f33322d3334203d3e20323733383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ca8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:1c:8e:5b:14:43:db:fe:b7:d6:ae:ed:0d:9d:4f:fa:42:91:
         62:48:6b:93:a4:02:df:02:cf:b8:ed:d3:e9:e3:d9:be:b6:1b:
         28:7a:08:d0:30:4a:20:8b:1d:1e:0b:e0:d9:bd:72:7e:35:ba:
         68:d2:45:86:b8:87:42:12:51:78:b4:b8:59:17:f3:ab:39:da:
         b8:20:05:e3:0f:67:92:83:ec:ba:8f:13:41:44:b0:a1:89:2b:
         00:e4:49:34:f5:4b:50:10:25:16:f7:c3:47:31:c2:03:63:bd:
         b0:3a:3b:02:ea:59:6f:6f:19:dc:6b:a2:16:26:98:90:7c:2b:
         26:9d:e4:08:24:3e:00:59:87:f3:18:08:bb:39:e9:07:3b:af:
         0c:6a:ce:c4:85:4c:9c:2a:c4:ac:30:2f:a2:b3:ce:e7:28:8e:
         e1:cc:b0:41:b1:24:e4:9f:81:9a:5d:e6:3a:ed:9d:97:34:75:
         b9:d6:ec:eb:b5:84:29:90:b6:af:ec:41:91:e0:6f:0a:d7:21:
         4e:e7:9f:4f:23:ad:5a:b4:e2:3b:61:18:44:ab:df:65:e0:aa:
         8f:16:03:1e:4d:7c:58:79:ae:d4:9f:b4:6d:e1:36:ff:6e:47:
         a0:58:82:b4:48:db:5d:e8:25:64:77:21:8d:2d:34:6e:40:87:
         12:af:db:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----