Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/323830343a373533343a3a2f33322d3332203d3e20323731303331.roa
File:                     323830343a373533343a3a2f33322d3332203d3e20323731303331.roa (raw, json)
Hash identifier:          ukBhPgMSFvYukIEI2hPr2bAGo++/H7Be7T0Ns8KrqjU=
Subject key identifier:   D3:75:BA:4A:93:88:72:AC:A2:51:EC:17:0B:E3:BD:E2:D9:40:08:51
Certificate issuer:       /CN=347031E886A1761CE1CBE9ACB8541F33592066CC
Certificate serial:       72D045DC7A53FBD94822A198FE3F0052817548C5
Authority key identifier: 34:70:31:E8:86:A1:76:1C:E1:CB:E9:AC:B8:54:1F:33:59:20:66:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/347031E886A1761CE1CBE9ACB8541F33592066CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/323830343a373533343a3a2f33322d3332203d3e20323731303331.roa
Signing time:             Thu 02 Nov 2023 03:46:04 +0000
ROA not before:           Thu 02 Nov 2023 03:41:04 +0000
ROA not after:            Thu 31 Oct 2024 03:46:04 +0000
asID:                     271031
IP address blocks:        2804:7534::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d0:45:dc:7a:53:fb:d9:48:22:a1:98:fe:3f:00:52:81:75:48:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347031E886A1761CE1CBE9ACB8541F33592066CC
        Validity
            Not Before: Nov  2 03:41:04 2023 GMT
            Not After : Oct 31 03:46:04 2024 GMT
        Subject: CN=D375BA4A938872ACA251EC170BE3BDE2D9400851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:84:c3:27:e7:43:88:90:02:46:10:3d:e2:
                    d5:5e:3d:0c:71:9b:e4:9b:a6:7b:ac:17:cf:48:eb:
                    84:95:2f:01:80:14:4d:4d:79:e2:5a:53:82:74:5e:
                    17:19:a0:96:36:e5:09:91:aa:6a:4a:83:4f:3e:c6:
                    94:8b:81:e6:95:a4:7a:7e:27:6f:4c:e1:91:bd:aa:
                    ea:86:3d:76:2f:93:f2:d9:98:ee:83:38:2d:a6:f1:
                    72:7d:97:6d:54:41:45:30:a8:75:8b:f3:5e:a2:87:
                    0f:be:fc:3b:25:50:0e:6e:d1:60:d4:eb:3d:35:52:
                    8f:6e:54:39:77:f6:45:0c:bb:e4:13:ed:55:dd:2d:
                    d9:06:c4:98:46:f7:e9:78:24:48:ac:68:55:ac:ce:
                    7d:6b:07:ce:22:3e:fc:e0:94:0b:92:b9:e6:74:47:
                    d7:2c:cf:8f:ca:87:b3:d4:6c:da:ce:dc:9f:38:05:
                    1d:7f:68:63:17:37:88:de:8a:7a:7c:f6:72:6f:6b:
                    7d:1c:55:6d:5b:48:6b:dc:c8:9a:45:36:92:cf:b6:
                    e2:32:e3:9f:4f:38:42:ce:68:ee:d2:c1:31:85:d9:
                    cf:ee:b4:e4:ce:42:9a:5f:51:97:db:d4:e4:ea:8b:
                    35:35:f0:7a:f9:62:dc:b4:6a:8a:fa:8e:93:79:68:
                    0d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:75:BA:4A:93:88:72:AC:A2:51:EC:17:0B:E3:BD:E2:D9:40:08:51
            X509v3 Authority Key Identifier:
                keyid:34:70:31:E8:86:A1:76:1C:E1:CB:E9:AC:B8:54:1F:33:59:20:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/347031E886A1761CE1CBE9ACB8541F33592066CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/347031E886A1761CE1CBE9ACB8541F33592066CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/323830343a373533343a3a2f33322d3332203d3e20323731303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7534::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:41:03:4c:cd:4e:dc:bb:96:ec:2d:00:ee:38:d7:1f:c1:95:
         f6:d0:8a:e8:b4:69:fc:f0:aa:54:d2:45:ac:a1:09:3a:e7:79:
         d9:ba:e4:1b:3b:2c:a9:24:67:d8:d7:aa:9d:8b:9b:39:0b:86:
         71:5b:71:72:2a:f2:2e:e3:d2:08:f1:e8:dd:1b:02:cf:69:f4:
         36:ad:08:ec:f3:cb:12:be:0e:2a:a0:b5:1f:d2:59:76:c2:ad:
         93:ca:23:36:6b:f2:ff:28:96:61:47:61:7e:2d:69:1b:86:5a:
         ab:69:85:c1:19:b5:ad:3a:32:3c:f6:31:09:03:28:df:eb:06:
         e7:cb:e7:82:93:dd:f6:92:c1:53:1d:18:e4:28:83:40:ba:34:
         ba:6e:c4:e2:cc:4d:9b:50:a4:8e:f5:e5:4f:74:23:51:17:7a:
         07:b6:68:45:c3:a4:f3:55:3b:7c:f8:72:43:83:02:c6:70:9a:
         2b:e8:9f:d5:58:10:9b:9d:e0:55:f5:3d:c4:ed:3d:95:a4:f8:
         fa:70:42:5d:47:a8:36:17:f0:04:70:73:fd:63:6c:04:c2:b5:
         ca:b6:0f:27:43:a7:d4:08:f1:14:69:00:13:de:a5:ea:6b:bb:
         5e:bb:45:0d:e9:69:a8:02:b0:f1:47:c6:fd:7f:09:45:7f:74:
         9f:28:9a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----