Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3332203d3e203238333532.roa
File:                     323830343a6165303a3a2f33322d3332203d3e203238333532.roa (raw, json)
Hash identifier:          q06tS5QRPgktWJOnNIyQb0nLDxUxmZ7pBIf8bR48yuA=
Subject key identifier:   54:49:D1:C6:08:41:39:EB:8D:F0:D1:7E:0F:F3:A6:FF:3F:81:CE:D8
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       1FF20141FEF35E83C83DD0D170E0775175E19830
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3332203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:56 +0000
ROA not before:           Fri 13 Oct 2023 14:31:56 +0000
ROA not after:            Fri 11 Oct 2024 14:36:56 +0000
asID:                     28352
IP address blocks:        2804:ae0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f2:01:41:fe:f3:5e:83:c8:3d:d0:d1:70:e0:77:51:75:e1:98:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:56 2023 GMT
            Not After : Oct 11 14:36:56 2024 GMT
        Subject: CN=5449D1C6084139EB8DF0D17E0FF3A6FF3F81CED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e7:21:16:ea:8f:c6:10:09:bf:67:5a:c2:60:
                    8f:8c:8f:19:38:c4:18:78:66:68:53:58:e8:59:91:
                    a3:ec:76:69:0a:74:b3:8c:44:a5:15:2b:8f:28:4d:
                    ab:a2:3b:d3:99:af:bd:92:a0:fc:0e:44:0f:44:24:
                    21:8f:c5:ab:1a:7c:51:bc:54:14:7d:6b:af:1d:48:
                    c9:bf:45:e2:42:cc:5f:79:d2:06:6f:d7:cd:fc:1e:
                    0b:af:9e:35:44:6b:63:57:1a:62:a4:91:bf:09:2e:
                    dd:3b:10:94:65:da:c0:77:28:b1:b5:84:da:91:12:
                    ad:d0:39:aa:2d:a5:0d:eb:15:ef:f1:45:77:43:98:
                    77:b9:b6:7f:a4:f6:f9:7d:ea:05:63:60:3f:b3:75:
                    f0:04:13:98:d3:9c:ac:e4:2e:55:dd:fb:9f:55:9c:
                    e9:a3:b1:23:19:5b:3d:6f:df:5b:5c:56:4c:da:76:
                    c6:b0:83:21:b5:c0:38:43:a9:9f:29:09:b5:6e:c0:
                    ff:98:ad:ee:8e:37:37:b0:e5:0e:20:0e:ec:f2:13:
                    df:dd:41:fc:37:dd:be:51:c3:cb:a2:99:a9:2f:e4:
                    fc:ac:8b:13:9e:a9:3e:a6:98:8d:89:5c:e8:b7:ae:
                    1b:e7:5e:74:ce:4c:ac:7b:73:b0:d2:95:14:86:a2:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:49:D1:C6:08:41:39:EB:8D:F0:D1:7E:0F:F3:A6:FF:3F:81:CE:D8
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3332203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:bc:e6:67:4b:8f:a9:b6:9d:a4:7b:7a:60:93:f3:d4:27:4e:
         20:e0:e8:a0:01:11:89:cc:09:24:41:7a:05:4a:60:5d:57:60:
         f1:2a:b4:2e:96:a2:6a:d9:33:4a:c3:97:5d:fb:14:fa:e0:9d:
         c9:d4:d8:11:75:88:44:e8:d5:17:e0:86:a7:ef:79:16:ed:6d:
         50:7b:a6:8a:ff:13:28:78:89:3b:02:bb:e5:0f:b9:9a:72:62:
         b0:e5:09:1e:c0:03:b1:1a:f9:9f:ab:fa:49:58:7e:3d:a0:72:
         d5:6d:3b:89:ff:9e:e1:13:27:b7:a6:a6:83:ac:90:e5:e0:3e:
         2b:bc:e0:76:51:91:6c:da:eb:18:39:8f:23:1d:0b:7b:5e:4f:
         34:23:6b:5e:35:2e:9e:bc:58:aa:d1:43:d2:cc:51:8c:9e:9f:
         80:8f:09:68:3a:cc:7a:c4:b5:72:f5:95:c4:2f:52:07:70:89:
         44:91:a8:98:bf:2a:64:dc:32:38:22:ae:75:d3:cb:ff:8e:bd:
         9b:e7:5a:38:31:cc:49:88:a7:3d:3e:ff:30:3f:30:14:50:1b:
         cf:44:e0:3d:9f:92:c0:86:75:d3:83:18:b1:7e:d6:ca:9d:a0:
         69:51:fd:f3:48:df:ea:a5:9d:07:ca:73:18:d5:2e:fa:dc:59:
         64:d1:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----