Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/0/323830343a333865343a3a2f33322d3438203d3e20323636353038.roa
File:                     323830343a333865343a3a2f33322d3438203d3e20323636353038.roa (raw, json)
Hash identifier:          iLzyD1L6mL3wqqxXRMf5dLLwLGxhhHSK3A1/zM/ENOI=
Subject key identifier:   7D:81:0D:FD:D5:BD:A7:B9:73:C5:AC:19:9B:A7:7B:F8:A4:84:74:D5
Certificate issuer:       /CN=CDF3926C83D9599972E0ACFF737170CB3CDEED52
Certificate serial:       7DE1DB7D99F454D05610DFD840CE0174DC3B299D
Authority key identifier: CD:F3:92:6C:83:D9:59:99:72:E0:AC:FF:73:71:70:CB:3C:DE:ED:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDF3926C83D9599972E0ACFF737170CB3CDEED52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/0/323830343a333865343a3a2f33322d3438203d3e20323636353038.roa
Signing time:             Fri 30 Jun 2023 18:20:52 +0000
ROA not before:           Fri 30 Jun 2023 18:15:52 +0000
ROA not after:            Fri 28 Jun 2024 18:20:52 +0000
asID:                     266508
IP address blocks:        2804:38e4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e1:db:7d:99:f4:54:d0:56:10:df:d8:40:ce:01:74:dc:3b:29:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDF3926C83D9599972E0ACFF737170CB3CDEED52
        Validity
            Not Before: Jun 30 18:15:52 2023 GMT
            Not After : Jun 28 18:20:52 2024 GMT
        Subject: CN=7D810DFDD5BDA7B973C5AC199BA77BF8A48474D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:53:9f:2d:e3:a2:f7:b1:ac:bc:20:fc:11:7f:
                    30:7a:d9:2b:39:15:93:3f:00:de:4c:31:54:5d:de:
                    7a:a3:db:a9:0d:8f:aa:f6:e9:97:eb:f9:0a:ae:16:
                    e4:06:90:c1:63:1e:4b:ca:15:8a:57:a3:37:0d:e5:
                    38:4a:f0:c8:3c:5d:ce:58:96:3c:bf:1d:9e:4b:21:
                    7e:e4:34:41:69:1b:26:cd:5e:f8:e6:7c:9c:bf:6f:
                    3e:e6:77:84:0a:1a:9b:f5:40:0e:28:b7:25:97:4f:
                    ae:2f:4e:fa:2f:25:66:35:9f:63:a4:09:a4:f6:46:
                    1f:5d:51:2f:b6:5a:c2:b3:ed:10:13:8f:28:1a:3b:
                    91:60:bf:fe:68:42:e1:2f:dd:f3:fb:97:ea:7d:f8:
                    9c:08:cb:89:16:b1:4a:ec:c9:cc:2e:3d:00:a0:b0:
                    a9:7d:0a:ed:fb:9b:d3:a9:9d:b7:6b:de:58:45:15:
                    f2:2a:03:81:8b:a5:b9:aa:46:e5:d5:22:b3:63:77:
                    fa:36:f6:08:88:b0:66:5f:1d:ae:f8:41:f7:ea:ec:
                    22:58:2c:40:b6:21:41:60:ce:ec:0e:9e:ce:37:9b:
                    e2:29:6c:30:b5:1d:c3:f8:dc:1b:57:c8:d3:85:9d:
                    25:3e:ae:13:b9:da:0f:59:a4:a1:f1:9d:ac:f7:07:
                    2e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:81:0D:FD:D5:BD:A7:B9:73:C5:AC:19:9B:A7:7B:F8:A4:84:74:D5
            X509v3 Authority Key Identifier:
                keyid:CD:F3:92:6C:83:D9:59:99:72:E0:AC:FF:73:71:70:CB:3C:DE:ED:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/0/CDF3926C83D9599972E0ACFF737170CB3CDEED52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDF3926C83D9599972E0ACFF737170CB3CDEED52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/0/323830343a333865343a3a2f33322d3438203d3e20323636353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:3f:49:a0:d1:04:83:92:87:fe:99:eb:f2:0c:22:2e:ae:8e:
         76:a2:fd:f3:67:69:95:53:a3:b6:6e:f9:35:cc:f0:f0:5b:f7:
         b5:0f:90:14:2d:82:40:b5:90:cb:90:27:86:f1:01:86:7f:dd:
         99:e6:70:da:5a:f8:37:76:bc:0b:07:1d:9f:4f:90:b1:8a:bf:
         e7:4c:e1:f9:dd:d7:f3:78:5e:a6:29:61:48:46:66:34:fd:4c:
         ff:1c:a7:30:23:0c:80:d1:21:e7:04:16:e0:bf:2e:81:71:ed:
         54:10:6c:f9:f7:ff:70:f5:cf:f5:71:47:cd:e4:9c:86:54:64:
         5e:58:8b:a9:d4:2c:89:c3:48:0b:95:86:79:2b:9d:42:a9:b4:
         74:37:94:74:34:6e:d0:bc:5d:b3:d2:53:96:4a:e8:1d:25:d8:
         51:40:4e:7c:22:fb:26:04:6a:98:21:23:47:61:e8:21:16:2f:
         f4:40:ad:2e:8f:1e:57:51:f5:bc:be:09:34:d7:0f:17:50:b2:
         64:a1:e0:84:ec:4f:34:91:f8:9e:2c:f7:87:cc:fa:b2:99:0a:
         97:c8:31:fd:8e:35:17:56:d6:6a:7b:fe:9f:2b:5a:a5:3b:7e:
         49:f1:40:7e:e4:97:33:24:13:2e:44:17:02:92:95:76:d7:48:
         8a:21:14:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----