Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/323830343a343031343a3a2f33322d3334203d3e20323635393333.roa
File:                     323830343a343031343a3a2f33322d3334203d3e20323635393333.roa (raw, json)
Hash identifier:          Z49QTD4vymuhyaBLtVZKUanhDXMwuUc5ayHy0FknhCo=
Subject key identifier:   C5:F1:0A:49:96:4D:15:31:68:56:AA:61:3C:1A:F6:88:29:AA:63:03
Certificate issuer:       /CN=ACBA5F61E02D7A1D7A11E817F8EC8D2F65F8CA91
Certificate serial:       18DBCD3A4C9F83C996FACFCDFAA63F3CD6C73B2A
Authority key identifier: AC:BA:5F:61:E0:2D:7A:1D:7A:11:E8:17:F8:EC:8D:2F:65:F8:CA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACBA5F61E02D7A1D7A11E817F8EC8D2F65F8CA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/323830343a343031343a3a2f33322d3334203d3e20323635393333.roa
Signing time:             Mon 17 Apr 2023 16:16:27 +0000
ROA not before:           Mon 17 Apr 2023 16:11:27 +0000
ROA not after:            Mon 15 Apr 2024 16:16:27 +0000
asID:                     265933
IP address blocks:        2804:4014::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:db:cd:3a:4c:9f:83:c9:96:fa:cf:cd:fa:a6:3f:3c:d6:c7:3b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACBA5F61E02D7A1D7A11E817F8EC8D2F65F8CA91
        Validity
            Not Before: Apr 17 16:11:27 2023 GMT
            Not After : Apr 15 16:16:27 2024 GMT
        Subject: CN=C5F10A49964D15316856AA613C1AF68829AA6303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:b6:3f:23:1e:4d:ae:b7:e9:fa:87:a1:64:
                    e9:75:2a:9f:ea:09:4b:da:96:01:ba:33:59:ae:c6:
                    db:3b:01:2f:c1:a2:56:8c:77:5e:74:db:e0:1d:7a:
                    a6:da:46:69:b0:e3:82:3f:e3:3b:91:a9:4f:77:3c:
                    94:b9:36:ef:df:38:08:7c:02:ce:f0:72:f0:9c:4d:
                    37:29:c4:15:40:d4:7e:f4:fe:7f:7f:e5:cc:64:60:
                    91:88:87:6a:0c:b8:85:7d:81:e0:ea:72:b2:8b:00:
                    a9:70:19:4e:9d:de:1f:4e:35:6d:01:80:f0:d0:81:
                    79:75:a4:18:0c:e5:9b:14:57:89:c7:a6:2c:31:bf:
                    03:18:b9:d2:01:f9:92:ab:16:ca:61:9b:9b:25:1b:
                    7b:b2:af:49:9f:a9:e7:75:f6:6d:c6:fe:22:a7:57:
                    33:49:03:97:73:d5:02:3b:43:25:13:84:5d:e6:23:
                    9d:c8:30:0c:d9:61:cc:08:8e:a2:e1:20:aa:2d:50:
                    3b:7d:fd:f7:4d:a7:b0:69:9e:02:75:17:fa:c3:1d:
                    1b:39:5a:3e:ba:ab:c3:e8:dc:4e:e0:1e:94:5c:f3:
                    57:71:1b:65:3f:72:75:53:55:5c:91:70:62:20:7c:
                    f0:2b:91:45:78:95:00:39:5e:5e:e8:70:ce:da:c4:
                    11:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F1:0A:49:96:4D:15:31:68:56:AA:61:3C:1A:F6:88:29:AA:63:03
            X509v3 Authority Key Identifier:
                keyid:AC:BA:5F:61:E0:2D:7A:1D:7A:11:E8:17:F8:EC:8D:2F:65:F8:CA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/ACBA5F61E02D7A1D7A11E817F8EC8D2F65F8CA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACBA5F61E02D7A1D7A11E817F8EC8D2F65F8CA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/323830343a343031343a3a2f33322d3334203d3e20323635393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4014::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:52:bd:f4:e3:52:5c:be:8e:c4:6d:55:ab:72:6e:53:60:ff:
         0a:14:d2:7e:97:8a:64:a9:b7:eb:a5:0f:0f:21:92:42:ef:55:
         3d:b8:37:c1:78:ff:32:77:c4:62:c9:27:26:63:e6:af:a7:c6:
         5d:fa:a8:33:a5:a9:41:e9:cb:5d:d0:ec:61:85:fa:ca:70:b9:
         89:3f:9c:03:dc:16:02:7b:6c:ef:14:d3:8d:b9:67:74:c5:4a:
         83:de:1a:b9:07:0c:3e:34:ee:55:17:56:5e:ea:fb:e1:15:82:
         b3:ea:f5:9c:bf:13:1c:bb:d1:45:81:dd:1d:18:17:ce:15:5b:
         70:cf:47:d6:fc:6d:c6:ed:6b:73:c6:f6:37:ee:e4:16:cf:07:
         f4:22:bb:95:c3:f1:be:4a:7b:4b:6d:27:a8:2e:51:93:b1:d5:
         f5:07:33:59:c6:bf:d4:81:fd:72:43:96:ea:7f:34:ed:e0:15:
         2a:e3:ea:34:17:19:94:b8:fc:48:fb:21:19:c9:a6:93:fe:74:
         37:bd:50:cf:4c:c8:a3:19:a7:da:90:a8:86:b3:ba:1d:bd:12:
         0a:51:cb:23:3f:d7:c6:e3:45:a4:15:07:61:ab:cd:c8:08:0c:
         c6:13:96:68:a5:a7:32:9a:dd:30:c5:09:17:9c:31:7e:59:8b:
         6d:cc:44:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----