Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/323830343a333164633a3a2f33322d3332203d3e20323635303431.roa
File:                     323830343a333164633a3a2f33322d3332203d3e20323635303431.roa (raw, json)
Hash identifier:          XDy15rWA47xoOAAMI+rPYvnHHtwU0kM1sWU3UNOJdrY=
Subject key identifier:   86:84:83:4D:7D:4D:E2:7B:02:D8:A3:2C:6A:00:5E:9B:04:FB:DB:66
Certificate issuer:       /CN=37834545A38892C3FF1B7141126084730A12B7AC
Certificate serial:       6FF989A3473069336D9E89D78937884026B2CE37
Authority key identifier: 37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/323830343a333164633a3a2f33322d3332203d3e20323635303431.roa
Signing time:             Wed 23 Aug 2023 00:04:06 +0000
ROA not before:           Tue 22 Aug 2023 23:59:06 +0000
ROA not after:            Wed 21 Aug 2024 00:04:06 +0000
asID:                     265041
IP address blocks:        2804:31dc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f9:89:a3:47:30:69:33:6d:9e:89:d7:89:37:88:40:26:b2:ce:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37834545A38892C3FF1B7141126084730A12B7AC
        Validity
            Not Before: Aug 22 23:59:06 2023 GMT
            Not After : Aug 21 00:04:06 2024 GMT
        Subject: CN=8684834D7D4DE27B02D8A32C6A005E9B04FBDB66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:1e:aa:d9:6f:2b:57:de:0d:84:29:b8:fb:
                    3f:ec:a3:82:c3:70:e2:66:f5:be:90:e9:13:04:eb:
                    de:3b:07:2a:5f:55:b0:60:ed:3a:02:a2:a4:10:da:
                    da:99:0c:fd:40:30:f8:6b:c2:ed:2b:77:fb:c0:91:
                    45:b1:72:cc:11:13:34:0b:a5:45:9b:db:a5:48:c4:
                    20:32:99:74:94:6a:54:d9:fc:bb:fe:c9:8c:90:2a:
                    da:74:ad:ce:8e:5b:8b:70:a1:ff:5f:d9:8e:24:26:
                    5c:e0:b3:83:8c:63:76:5c:3b:e4:16:89:c0:6d:31:
                    e5:bd:a0:dc:c5:57:ee:a4:b3:e7:24:d7:7d:eb:9a:
                    6c:bc:d4:8d:b9:9e:9e:d0:0b:65:9f:69:98:80:c1:
                    8c:5b:7f:37:c2:b5:3d:35:a9:d5:15:77:f9:1c:83:
                    48:52:ce:3f:2a:ef:7a:8e:07:1a:6f:92:2f:00:67:
                    2b:89:e0:89:11:a4:70:1f:f8:e2:8d:50:92:c0:f0:
                    40:3c:4c:17:d9:1c:d5:af:c4:f2:43:11:72:69:ac:
                    00:66:5f:63:b6:c2:6f:23:56:10:42:7e:b2:f4:bd:
                    4a:47:68:8d:11:3e:d2:a7:76:76:b2:bd:39:bc:f0:
                    61:60:d4:53:97:b2:5a:e7:fe:94:2f:7d:17:03:b4:
                    dd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:84:83:4D:7D:4D:E2:7B:02:D8:A3:2C:6A:00:5E:9B:04:FB:DB:66
            X509v3 Authority Key Identifier:
                keyid:37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/37834545A38892C3FF1B7141126084730A12B7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/323830343a333164633a3a2f33322d3332203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:35:8a:6f:ff:36:f3:09:82:13:4d:04:6e:6a:a1:66:3c:d8:
         5c:1c:10:e1:84:3b:71:97:2e:85:28:89:81:86:8c:30:d7:1d:
         98:db:9f:bb:ef:e1:cd:bd:ea:a3:f9:43:33:bb:c4:9f:7f:6d:
         4f:a4:fe:07:33:9b:48:d7:f4:f4:37:19:b2:c6:72:4c:c9:36:
         06:71:1e:08:6e:2e:2a:82:72:98:99:81:6d:75:a8:37:91:c1:
         30:17:c6:2d:be:ff:d8:1c:8e:74:c6:80:e5:70:a3:57:29:58:
         a6:78:75:53:d5:83:d8:71:1d:65:c6:c0:6b:a1:95:b7:6b:c5:
         c0:67:4e:ad:b4:df:83:c6:c4:52:8b:c2:df:20:34:a0:24:e7:
         e2:4a:4f:5c:aa:de:f3:6e:14:b3:82:34:4c:a8:0e:8e:b7:68:
         75:65:5e:e6:6f:5f:98:bd:f2:72:13:76:2a:81:77:b2:20:52:
         5b:0f:e5:ff:fa:44:44:c0:37:2e:32:33:81:02:72:08:19:83:
         c0:9c:f6:c1:d7:95:3e:84:fc:0a:79:e0:ec:45:62:34:a7:57:
         18:6c:29:33:61:50:85:6a:e1:78:d4:74:12:66:47:fe:71:c4:
         96:3b:00:d0:a4:f0:46:a8:06:80:5f:6e:1a:98:89:b9:94:3b:
         25:cd:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----