Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/323830343a373737343a3a2f33322d3332203d3e20323731313739.roa
File:                     323830343a373737343a3a2f33322d3332203d3e20323731313739.roa (raw, json)
Hash identifier:          dQzygxPuuVi0yU4FGCxpb8s20+TPY8SL0+nERDwAcFk=
Subject key identifier:   89:F1:26:69:DD:69:60:BD:E9:90:E6:4F:59:19:BA:EF:04:DB:71:63
Certificate issuer:       /CN=C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F
Certificate serial:       50EF44A05D8351F2640A1D2CA4CA65749551FE7B
Authority key identifier: C4:AE:25:DE:35:06:E1:B4:C4:3C:B9:DE:0E:96:15:7D:1C:CA:CA:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/323830343a373737343a3a2f33322d3332203d3e20323731313739.roa
Signing time:             Sun 10 Sep 2023 17:01:58 +0000
ROA not before:           Sun 10 Sep 2023 16:56:58 +0000
ROA not after:            Sun 08 Sep 2024 17:01:58 +0000
asID:                     271179
IP address blocks:        2804:7774::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ef:44:a0:5d:83:51:f2:64:0a:1d:2c:a4:ca:65:74:95:51:fe:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F
        Validity
            Not Before: Sep 10 16:56:58 2023 GMT
            Not After : Sep  8 17:01:58 2024 GMT
        Subject: CN=89F12669DD6960BDE990E64F5919BAEF04DB7163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:68:ec:9a:50:dc:cd:1c:8c:db:1d:79:e3:
                    5d:44:cd:cc:ad:6f:88:ac:78:fd:1f:4c:9d:66:f0:
                    8a:d4:5f:5f:ed:cf:12:55:6c:9b:ae:80:46:b6:1a:
                    22:aa:b7:f1:91:25:8b:66:81:72:59:a3:16:f0:42:
                    b4:51:bc:00:cb:61:2e:15:93:e8:7b:d1:70:c2:d2:
                    a4:73:eb:1b:b7:f3:6b:31:37:ff:e8:92:da:b6:7a:
                    1b:cb:49:c6:7f:ab:35:3e:de:c0:1f:1d:64:30:62:
                    03:c6:5b:75:52:52:20:f5:65:dd:48:e2:84:ed:a3:
                    63:00:48:df:11:29:53:2a:1f:f4:38:e1:a1:fd:71:
                    3b:53:d8:65:6e:95:3a:dc:0f:11:a1:ff:98:d7:d5:
                    c5:5d:18:98:c9:cf:18:e2:d5:9e:3d:71:11:8d:98:
                    f7:93:9a:8b:03:2e:06:54:fe:6e:64:1b:33:26:3c:
                    f8:4e:4e:33:f2:58:04:8f:8a:cc:5d:fc:eb:e1:21:
                    58:96:22:96:de:07:15:1a:8c:62:26:38:15:90:d6:
                    68:bd:87:85:07:17:e4:f4:2d:72:b3:db:db:30:ae:
                    33:69:df:ad:67:37:63:44:12:27:14:3b:2f:d3:0b:
                    52:4d:8c:2b:80:34:80:bc:a6:db:d2:d4:3d:9c:ef:
                    4d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F1:26:69:DD:69:60:BD:E9:90:E6:4F:59:19:BA:EF:04:DB:71:63
            X509v3 Authority Key Identifier:
                keyid:C4:AE:25:DE:35:06:E1:B4:C4:3C:B9:DE:0E:96:15:7D:1C:CA:CA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/323830343a373737343a3a2f33322d3332203d3e20323731313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7774::/32

    Signature Algorithm: sha256WithRSAEncryption
         e7:b1:1f:b5:d4:0e:6e:7f:e5:4e:0d:a3:3b:a9:72:5d:df:8b:
         99:bd:b6:7c:89:0a:f9:54:f6:17:1c:a7:29:9a:5e:e2:47:be:
         c3:bc:e4:52:b6:1b:75:1f:29:1a:4c:a4:ec:e0:d3:97:a0:df:
         69:40:32:de:33:f7:0d:37:ac:01:31:5f:37:60:ee:0d:51:b5:
         77:49:69:9f:91:24:b6:da:c9:e8:2b:02:c4:09:f1:27:a1:0c:
         43:f0:46:27:a6:b5:dc:00:cb:fc:47:b1:ed:20:7f:74:7a:57:
         ca:20:9a:ef:43:f7:c7:63:e0:48:e8:1c:34:b9:be:81:9f:28:
         1b:e1:ff:c5:c5:8f:57:7a:ab:7d:6a:32:97:ca:ea:92:cc:be:
         9b:d4:d0:7b:26:e8:19:17:9d:b4:7a:e7:30:72:19:5b:91:0f:
         17:73:6a:86:f4:7e:81:90:5d:4d:c8:d3:b2:ed:c8:f3:dc:4d:
         a3:34:a3:61:fb:14:1b:1a:86:cb:4b:b4:0c:af:1f:5f:df:7d:
         9b:cc:df:b5:92:02:29:fc:6e:52:df:9b:e8:07:ec:01:a3:d0:
         d0:ee:fc:9b:17:31:82:37:7e:81:9b:f4:3f:8c:cf:8e:11:85:
         db:ca:00:c1:e4:c5:7a:25:07:71:5a:45:5f:7a:b0:fe:de:57:
         6b:13:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----