Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/323830343a333566633a383030303a3a2f33332d3333203d3e20323636333139.roa
File:                     323830343a333566633a383030303a3a2f33332d3333203d3e20323636333139.roa (raw, json)
Hash identifier:          TbQdFB22xnS8H1bJBe8Xoup9eoz8ByNwi5Q7+judr6Y=
Subject key identifier:   49:A0:BE:CF:85:6B:FE:49:73:DC:42:6E:F2:0A:64:DB:1E:D7:40:C2
Certificate issuer:       /CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
Certificate serial:       380FA8D514F040D71A7BFB9F69DBB043E0E2D133
Authority key identifier: 3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/323830343a333566633a383030303a3a2f33332d3333203d3e20323636333139.roa
Signing time:             Fri 26 May 2023 19:00:00 +0000
ROA not before:           Fri 26 May 2023 18:55:00 +0000
ROA not after:            Fri 24 May 2024 19:00:00 +0000
asID:                     266319
IP address blocks:        2804:35fc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0f:a8:d5:14:f0:40:d7:1a:7b:fb:9f:69:db:b0:43:e0:e2:d1:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
        Validity
            Not Before: May 26 18:55:00 2023 GMT
            Not After : May 24 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9b:cc:39:66:02:3f:2f:9e:e1:0d:30:28:fc:
                    9a:bc:0d:0a:84:aa:9d:e1:25:2d:27:13:4d:d5:82:
                    51:0d:86:97:3d:58:dc:af:54:b9:b6:db:c0:5f:d8:
                    7d:27:f7:f7:69:d7:67:6c:4e:b5:e1:a1:ac:45:51:
                    ed:49:86:92:e9:92:90:be:c9:c4:6f:72:f1:0f:44:
                    e2:31:07:96:0d:1e:a1:8c:3d:5d:9f:f9:e6:c0:a6:
                    92:44:d6:10:8d:0e:76:4d:bb:95:6f:2a:78:46:22:
                    9e:c9:3a:e3:65:f5:e6:5e:f9:dc:19:f0:37:7d:fb:
                    fd:ec:3e:1f:7d:48:af:db:89:dd:f5:ed:f3:96:15:
                    4d:9d:65:4c:f6:09:cc:83:28:37:96:52:f6:6a:7c:
                    0f:35:f0:9d:fc:b1:d7:29:f4:34:4d:fd:16:65:73:
                    6a:73:59:49:76:2c:0c:c0:5b:3b:61:52:c6:91:8e:
                    cf:d4:14:fe:5c:cf:7c:3f:e7:97:b5:db:57:76:44:
                    8f:56:8e:3b:98:fb:94:5a:7b:da:c8:ee:d5:96:f7:
                    72:3c:5b:0e:49:9d:f8:6c:51:73:4b:75:3c:99:19:
                    69:79:85:f8:7c:4f:3a:d5:b6:31:eb:ba:c0:b8:af:
                    b0:fd:25:d5:c9:72:82:e2:f1:0c:25:5a:52:c0:9c:
                    46:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A0:BE:CF:85:6B:FE:49:73:DC:42:6E:F2:0A:64:DB:1E:D7:40:C2
            X509v3 Authority Key Identifier:
                keyid:3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/323830343a333566633a383030303a3a2f33332d3333203d3e20323636333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35fc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3c:83:30:ae:ca:b2:f1:94:08:55:c4:67:09:e7:bf:aa:ef:8c:
         0f:0f:8a:5e:b5:91:40:ab:28:52:2a:f7:8b:7c:3c:d6:28:a6:
         2c:32:85:98:35:ec:c5:24:c5:4a:3c:c0:b0:36:3c:bf:2e:fb:
         46:02:91:2e:88:c2:22:5e:df:9e:20:ec:fd:dd:8a:c5:f4:2b:
         4b:ef:7a:f2:c5:1d:ed:d8:61:23:32:4b:88:b5:ff:cb:86:bf:
         57:e6:d1:1f:ae:62:42:6b:81:28:f0:1a:03:9a:e9:5f:4b:c1:
         a2:82:9e:69:c3:07:10:4c:55:15:88:0a:29:a1:0a:00:db:0f:
         2f:31:c0:09:db:38:9b:5b:13:19:12:fc:bd:16:ad:75:55:d1:
         f9:3a:5b:b7:24:50:c3:ae:81:ff:c4:1e:45:a4:d0:4e:c8:54:
         c3:b6:df:e4:2d:6d:39:82:b6:00:76:7f:91:28:f3:8a:81:26:
         59:38:a1:eb:f3:87:0b:c7:98:ec:a0:37:35:16:7a:4a:0a:98:
         7d:03:c9:88:7a:fc:c3:e9:1d:f4:c4:97:c4:76:45:a6:28:ae:
         3d:ad:86:eb:65:6c:2f:5d:10:5b:bf:c8:99:db:1b:24:2f:7c:
         a9:8e:18:3f:7e:52:22:3c:45:e0:cc:c7:0c:3a:66:b5:1f:92:
         4e:3c:ec:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----