Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          q6IW7Z6B8OzIs5UKo8+c/TFObZrildRrIYnUibNjl00=
Subject key identifier:   1A:20:DA:1E:DA:0F:2C:E5:E9:60:27:7C:5E:59:0D:B4:7D:3D:56:6A
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       150024C4C4128716C73FB1102AA6C763F960256A
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:00 +0000
ROA not before:           Tue 12 Sep 2023 04:55:00 +0000
ROA not after:            Tue 10 Sep 2024 05:00:00 +0000
asID:                     262713
IP address blocks:        2804:640::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:00:24:c4:c4:12:87:16:c7:3f:b1:10:2a:a6:c7:63:f9:60:25:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:00 2023 GMT
            Not After : Sep 10 05:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e2:76:ac:a6:c3:85:c1:e5:70:a6:e1:6b:47:
                    ff:b0:f6:ba:e7:a2:20:40:f9:76:fe:e7:f9:15:62:
                    24:0f:16:7b:6d:9b:1a:6c:2c:79:a0:6c:d2:b7:bb:
                    12:67:6b:b3:ea:84:84:45:ed:83:61:69:ac:44:8c:
                    f2:87:15:2c:d5:8d:09:18:d8:b3:e7:46:75:6b:1f:
                    23:d6:52:98:c2:a3:ad:0b:71:5b:fc:96:f0:ba:75:
                    31:a7:b8:8a:07:f0:dd:f0:3d:92:b1:76:71:4a:83:
                    57:1d:07:6f:58:77:8e:99:e7:81:6b:ba:46:77:ef:
                    fe:60:bc:76:9e:e7:75:a3:49:38:97:e3:0a:d1:43:
                    9f:56:1e:88:cb:7e:11:de:ab:35:f5:62:b2:25:7b:
                    93:77:36:bf:74:1a:aa:5f:a3:6d:07:f7:d0:37:ef:
                    9d:4c:88:ef:f6:e6:36:7a:c9:a2:96:20:36:9b:d2:
                    4e:0c:2a:c9:24:25:1f:1f:0c:65:1a:49:49:a6:d1:
                    e6:e1:08:24:c7:bd:31:70:06:31:22:a3:19:26:0f:
                    59:aa:5c:bb:c7:04:32:bf:bf:18:d1:a8:fd:95:3a:
                    96:85:9a:78:fa:b5:24:79:b0:47:b0:fb:5a:91:28:
                    80:2f:43:da:47:ff:01:31:03:73:65:07:53:1e:95:
                    1d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:20:DA:1E:DA:0F:2C:E5:E9:60:27:7C:5E:59:0D:B4:7D:3D:56:6A
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:38:98:71:68:be:c8:6f:2f:8e:4b:17:1b:ea:8e:4d:5b:f5:
         65:7c:b0:20:24:5d:fc:8f:da:f0:21:fb:fb:9a:71:16:77:82:
         1b:8f:72:a5:3d:30:60:e9:e6:07:c3:4f:a9:68:a4:37:a7:86:
         91:28:40:37:ae:61:55:30:25:5e:88:18:cb:8f:7d:b9:61:d5:
         3e:c1:45:28:84:31:a9:a2:a1:82:ff:9f:93:c4:f3:5f:c6:ae:
         83:2d:34:41:fd:bd:78:25:f2:d5:f2:41:4d:93:92:54:0b:2d:
         92:0b:16:20:ae:cd:48:cb:80:e3:98:7c:42:6c:a1:1a:c0:81:
         d7:bd:7f:5a:97:ed:89:44:f4:ea:8a:5e:fa:7d:4e:4e:45:23:
         36:6d:41:24:d0:b8:c2:86:96:eb:e2:1a:f2:77:61:04:10:10:
         b6:fa:c2:78:68:fa:40:ad:7e:58:cd:4a:1a:91:1b:6a:4d:cb:
         1b:f1:b1:4c:d0:0d:43:34:5c:d6:f4:1a:dc:31:e3:3c:ea:7a:
         48:85:13:eb:f4:f8:1e:0b:86:82:e2:c3:2f:30:6f:e6:e5:c0:
         95:73:80:a6:e9:89:53:f0:4c:42:53:05:12:e1:67:38:33:9a:
         40:1f:21:97:00:ae:ae:cf:b0:1f:4a:12:ad:9f:0a:94:0b:76:
         af:ce:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----