Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33342d3334203d3e20323732313832.roa
File:                     323830343a383333303a3a2f33342d3334203d3e20323732313832.roa (raw, json)
Hash identifier:          McbPOKdSXny4Io3tNbdSl5BeEr0gMCqFGfI6ALHTK6Q=
Subject key identifier:   B4:BA:98:F2:54:75:EB:B5:23:F2:5C:BB:F2:FB:23:C7:91:3B:DA:4A
Certificate issuer:       /CN=8676DCF1D873533AB6D8D41ADF1DB8078DE7F289
Certificate serial:       07AAB241E9DB4638C6C1EF1747F31179CCBB6FC4
Authority key identifier: 86:76:DC:F1:D8:73:53:3A:B6:D8:D4:1A:DF:1D:B8:07:8D:E7:F2:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8676DCF1D873533AB6D8D41ADF1DB8078DE7F289.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33342d3334203d3e20323732313832.roa
Signing time:             Tue 08 Aug 2023 21:00:00 +0000
ROA not before:           Tue 08 Aug 2023 20:55:00 +0000
ROA not after:            Tue 06 Aug 2024 21:00:00 +0000
asID:                     272182
IP address blocks:        2804:8330::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:aa:b2:41:e9:db:46:38:c6:c1:ef:17:47:f3:11:79:cc:bb:6f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8676DCF1D873533AB6D8D41ADF1DB8078DE7F289
        Validity
            Not Before: Aug  8 20:55:00 2023 GMT
            Not After : Aug  6 21:00:00 2024 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:38:6d:36:c1:ee:d7:18:4a:04:2c:e2:de:
                    34:aa:cb:7c:6f:86:60:0d:9c:85:02:91:2b:6d:b8:
                    f3:63:55:73:e6:d6:bb:20:14:94:16:92:a3:5c:f1:
                    97:63:87:1d:0a:df:28:94:b6:5d:30:76:8c:96:16:
                    6e:f7:49:0c:59:a2:23:6f:5d:63:b4:07:b1:c5:26:
                    7f:69:46:e3:61:3c:e9:22:3b:64:f6:ec:64:1d:f3:
                    75:22:03:fa:38:cd:1b:58:3b:a6:48:60:7c:78:c4:
                    1e:4d:2d:e4:74:7c:b5:cb:13:4b:1b:a8:fe:32:d0:
                    9c:66:1e:16:b2:1d:b3:5c:da:88:f2:6a:85:29:53:
                    1e:56:4a:e0:99:be:22:50:1e:e9:dd:b6:b0:f1:cc:
                    b0:c4:25:33:c8:f1:60:a3:14:37:d4:b3:d4:86:70:
                    b5:4a:ed:56:73:c3:4f:8f:87:ac:58:8f:77:82:30:
                    6d:97:63:5a:a0:08:65:c2:5c:a2:f6:cf:c0:e1:26:
                    d5:1b:d3:bd:09:70:ce:91:63:66:56:fa:49:53:d7:
                    86:55:e2:19:bc:5d:03:a8:91:91:8d:b2:b9:4c:7a:
                    5e:34:71:49:35:e0:55:6e:3a:08:92:2b:f6:b2:e8:
                    13:d0:00:13:08:76:83:e5:43:5e:d4:b9:57:00:09:
                    e3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BA:98:F2:54:75:EB:B5:23:F2:5C:BB:F2:FB:23:C7:91:3B:DA:4A
            X509v3 Authority Key Identifier:
                keyid:86:76:DC:F1:D8:73:53:3A:B6:D8:D4:1A:DF:1D:B8:07:8D:E7:F2:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/8676DCF1D873533AB6D8D41ADF1DB8078DE7F289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8676DCF1D873533AB6D8D41ADF1DB8078DE7F289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33342d3334203d3e20323732313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8330::/34

    Signature Algorithm: sha256WithRSAEncryption
         96:0d:7a:f2:93:36:cd:68:9a:5b:04:33:2d:bf:13:5e:08:ad:
         29:cd:bb:ff:1e:d5:d3:fa:85:e0:d3:ab:30:f5:b8:8f:1b:9e:
         6d:fc:d2:dc:47:1b:67:fc:12:94:d9:8b:ba:89:8d:bd:f8:71:
         46:13:b2:76:e5:57:f8:57:a2:15:b5:45:a6:65:e5:f8:15:63:
         0d:de:95:95:ab:67:87:e0:e0:23:09:3d:57:f3:4b:95:d4:30:
         56:b8:91:7d:75:1d:8a:83:f6:90:26:36:8c:75:53:a2:01:00:
         fa:d8:8b:4e:1a:96:ba:1e:9e:27:08:43:e4:e2:da:82:87:e1:
         25:d4:92:91:a8:e4:53:2e:8e:f5:93:04:60:2a:03:0a:54:c2:
         d6:ea:4b:fe:7f:52:3c:03:cf:e3:ec:bc:0a:b3:c8:e8:08:17:
         ad:7f:18:08:18:8c:99:0a:16:6a:c8:02:0f:8f:81:8a:93:47:
         2c:a9:a2:33:b3:c8:18:f1:93:95:9f:96:0b:b0:d8:c7:8d:48:
         9e:db:f2:57:6c:7e:2b:cf:9c:0a:57:7d:c4:38:d6:98:96:de:
         73:82:b1:97:ac:38:c1:25:b3:53:5e:8e:a9:05:4f:68:3a:f7:
         26:3e:39:8c:11:c8:c2:47:b4:f1:36:55:cc:ab:0f:51:7e:bb:
         2c:62:d8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----