Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/323830343a346362633a3a2f33322d3332203d3e203532383732.roa
File:                     323830343a346362633a3a2f33322d3332203d3e203532383732.roa (raw, json)
Hash identifier:          Vli6YKj8Mj51RuoGUmS11RAnBEIh47L3UDo1mnvndfw=
Subject key identifier:   30:B1:FA:7A:96:63:D6:85:B2:F1:39:A1:5B:13:E7:87:98:E0:18:D7
Certificate issuer:       /CN=33C015248532BCE3959F73092749FDE164934402
Certificate serial:       1140B0BFC80BF057ECD3018DA7FBD40C2FAE9716
Authority key identifier: 33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/323830343a346362633a3a2f33322d3332203d3e203532383732.roa
Signing time:             Mon 13 Nov 2023 19:11:28 +0000
ROA not before:           Mon 13 Nov 2023 19:06:28 +0000
ROA not after:            Mon 11 Nov 2024 19:11:28 +0000
asID:                     52872
IP address blocks:        2804:4cbc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:40:b0:bf:c8:0b:f0:57:ec:d3:01:8d:a7:fb:d4:0c:2f:ae:97:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33C015248532BCE3959F73092749FDE164934402
        Validity
            Not Before: Nov 13 19:06:28 2023 GMT
            Not After : Nov 11 19:11:28 2024 GMT
        Subject: CN=30B1FA7A9663D685B2F139A15B13E78798E018D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:99:33:b9:14:7d:df:62:c3:ec:51:1b:0c:
                    4c:b8:2a:13:7b:31:52:af:e3:83:e0:1e:d6:5e:86:
                    89:fa:f9:45:ec:22:23:13:d2:47:0c:76:9f:3f:18:
                    53:81:05:ea:f7:2a:7c:d5:8f:23:92:9a:0f:ce:02:
                    23:ec:d2:22:d3:1a:34:a0:51:fe:ca:eb:ea:25:69:
                    b1:c2:e7:70:1a:4a:56:1f:39:6b:eb:6a:28:8d:f1:
                    74:ef:d0:4e:f9:75:ba:c1:44:41:70:9b:76:66:ea:
                    20:76:67:32:5f:b3:c2:7f:0e:d6:d7:02:52:96:b8:
                    b1:b8:3e:ff:0e:0f:68:37:8d:ef:88:9b:d4:7e:01:
                    b6:c9:8a:e4:a9:e3:1e:20:29:55:df:9a:af:92:6c:
                    d0:4d:8f:96:c8:53:55:16:e8:60:be:fe:3d:65:99:
                    86:4c:52:4a:94:48:d9:c5:7f:a9:47:75:cc:71:c6:
                    3f:ef:ba:da:f2:aa:14:36:dc:9e:06:30:c5:a6:a8:
                    06:ab:da:91:de:6f:52:04:53:40:c9:27:79:62:a8:
                    d2:c9:e0:1c:b0:c0:f4:c7:5e:48:e0:53:85:9e:a8:
                    45:90:63:3c:fa:51:b8:16:04:04:99:e1:b6:9c:77:
                    c2:d6:09:48:3a:11:9b:6b:de:aa:e8:eb:d2:7b:e5:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B1:FA:7A:96:63:D6:85:B2:F1:39:A1:5B:13:E7:87:98:E0:18:D7
            X509v3 Authority Key Identifier:
                keyid:33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/33C015248532BCE3959F73092749FDE164934402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/323830343a346362633a3a2f33322d3332203d3e203532383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:47:67:aa:05:88:0a:18:b3:63:a2:d1:7f:f1:c2:98:bd:13:
         cb:06:c1:21:eb:6e:c2:88:ec:47:45:7b:95:3a:e1:a1:03:53:
         c0:be:f9:6a:f5:81:6f:9e:51:d2:88:c7:a2:4b:f2:13:c3:87:
         ea:d0:50:e4:ca:ee:9f:3c:c5:14:d6:15:a4:bd:4a:b2:69:4b:
         6b:70:79:c5:2e:1e:4a:6e:b0:a2:1e:a1:61:57:05:81:74:aa:
         4d:a6:69:b7:fc:0d:c0:75:40:4a:f8:4c:66:e9:6d:87:8c:fe:
         18:cc:61:68:9c:87:53:96:08:5a:aa:4a:81:7f:1e:f7:8c:d7:
         bf:be:3b:3d:6d:88:a8:22:87:cb:fb:03:2c:5d:d5:71:9a:98:
         bd:8a:81:5b:16:41:93:c0:3b:51:9f:c1:43:b1:13:f6:0d:97:
         13:b8:cb:e1:5a:30:63:dc:3d:b5:65:06:7c:80:77:b7:28:f2:
         89:e3:59:22:f1:d0:96:4e:ff:bb:e6:8f:ec:9c:86:e5:3a:74:
         6e:d8:90:da:df:f4:df:25:38:bd:63:cf:09:83:48:23:4a:63:
         39:c6:84:f8:57:10:26:40:d8:09:60:b8:80:55:bf:8c:e0:99:
         c4:ac:80:ea:16:4f:69:4e:99:68:d2:95:5f:6c:73:fa:cc:bc:
         a6:4d:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----