Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/323830343a333062383a3a2f33322d3438203d3e203238313534.roa
File:                     323830343a333062383a3a2f33322d3438203d3e203238313534.roa (raw, json)
Hash identifier:          24scM3/Vlcpuu3t2q8+tzoaGB5ytsI4/K4uNc1Z/MMw=
Subject key identifier:   82:06:7A:D6:E1:60:D1:70:7F:65:2A:C4:42:CF:70:AA:DF:E3:0D:66
Certificate issuer:       /CN=9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD
Certificate serial:       16B91405D95A8EEBB141C494E0DE4DA6B1CF9EB0
Authority key identifier: 9B:FF:34:B9:5C:9F:93:E1:E6:9C:B0:42:1F:FC:F2:F2:FE:1C:26:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/323830343a333062383a3a2f33322d3438203d3e203238313534.roa
Signing time:             Fri 31 Mar 2023 19:03:25 +0000
ROA not before:           Fri 31 Mar 2023 18:58:25 +0000
ROA not after:            Fri 29 Mar 2024 19:03:25 +0000
asID:                     28154
IP address blocks:        2804:30b8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b9:14:05:d9:5a:8e:eb:b1:41:c4:94:e0:de:4d:a6:b1:cf:9e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD
        Validity
            Not Before: Mar 31 18:58:25 2023 GMT
            Not After : Mar 29 19:03:25 2024 GMT
        Subject: CN=82067AD6E160D1707F652AC442CF70AADFE30D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:88:24:1f:fe:80:2d:a8:05:f2:3a:3c:63:
                    6f:3d:0b:ee:71:09:ae:a3:8d:25:eb:38:5a:51:95:
                    c0:a3:6b:a1:00:41:7b:65:62:d7:d7:7d:70:56:d1:
                    4f:2b:6d:19:c3:92:dc:75:c4:64:46:06:7d:ef:9e:
                    08:76:1f:fc:35:05:e9:93:3b:e5:6b:e4:4c:7f:0c:
                    d7:6a:7f:5e:71:f3:a0:46:9a:1f:5f:5f:d1:a4:d1:
                    40:fe:b0:a5:24:9d:da:b1:de:fc:ed:85:ca:44:e8:
                    78:e3:4b:8a:38:73:d0:4e:7f:ef:17:2c:48:44:38:
                    42:ed:fc:f9:0b:04:5a:62:1f:a6:8b:96:00:e0:b4:
                    77:c0:4b:9d:96:2c:d9:42:18:63:60:e6:76:a6:d0:
                    3c:c5:74:8c:3e:55:82:72:f9:35:4b:19:18:7d:21:
                    b4:06:3d:61:5b:15:cb:2d:69:41:8d:5c:8c:d1:9b:
                    77:28:b7:ec:99:57:94:72:d1:39:a9:b0:91:d9:96:
                    8a:83:28:88:36:5b:f0:bd:30:d3:3b:59:a8:c8:03:
                    9b:4a:c3:1d:a1:a9:68:65:16:3b:58:59:65:04:5d:
                    29:0e:ef:16:41:16:42:7f:dd:e6:62:17:b9:b3:92:
                    ed:74:b9:8e:ad:08:a7:c4:b1:dd:e4:4b:18:0a:95:
                    c8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:06:7A:D6:E1:60:D1:70:7F:65:2A:C4:42:CF:70:AA:DF:E3:0D:66
            X509v3 Authority Key Identifier:
                keyid:9B:FF:34:B9:5C:9F:93:E1:E6:9C:B0:42:1F:FC:F2:F2:FE:1C:26:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/323830343a333062383a3a2f33322d3438203d3e203238313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:f9:81:8c:a6:ac:b0:94:cd:ab:36:56:e2:96:e7:42:c5:1d:
         fd:16:1b:75:a9:01:4f:0e:59:81:5a:b3:5a:d1:30:40:2b:82:
         c2:c6:dd:a4:66:79:38:ba:e4:51:85:67:ae:46:dd:8b:a8:b7:
         d2:62:df:30:b1:6c:0e:f0:2d:b1:47:18:27:d3:d0:ac:9c:80:
         1f:31:bb:05:26:45:a9:bf:d4:cb:27:82:57:b8:8b:a4:01:70:
         43:3d:25:32:8e:be:56:01:41:e2:ce:92:f7:11:d9:9c:c8:03:
         bb:46:e3:fb:58:26:4e:53:22:d6:06:10:96:13:86:f5:01:20:
         26:93:43:c4:39:2c:60:8d:58:0e:45:ce:a6:43:23:21:b3:ad:
         f3:2f:ae:b6:2a:98:8a:4e:b4:37:6d:7d:e7:4f:0f:67:81:8f:
         c6:26:b0:c1:0c:e1:7a:5f:42:47:6e:6c:fb:de:9f:f1:f9:08:
         e1:88:fe:5e:a5:80:8d:9e:e3:f5:53:df:e1:91:3b:4a:25:bf:
         43:91:00:41:11:0c:94:7a:b0:af:6f:29:36:65:3e:c0:97:7c:
         9e:8b:b2:6b:ae:56:61:22:00:d9:db:c6:7e:a1:b8:e7:da:ce:
         5a:28:af:7f:c2:9e:b1:36:58:47:d0:bf:b5:1a:e4:67:88:64:
         c6:b8:01:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----