Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3334203d3e203238333532.roa
File:                     323830343a6165303a3a2f33322d3334203d3e203238333532.roa (raw, json)
Hash identifier:          FBdkVLh72CnttRqu0vbhOWspTWpKuqYDo8iDTxhuEDY=
Subject key identifier:   D2:EC:E6:58:12:88:AE:80:7D:DE:1E:8E:4E:4C:AA:5F:49:3C:02:97
Certificate issuer:       /CN=3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5
Certificate serial:       730A5C383C02F113C9FC49ED880CF654C62028A0
Authority key identifier: 3E:D6:45:BC:CA:E5:5E:7F:42:FC:CB:42:EB:66:12:E3:9B:FC:EC:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3334203d3e203238333532.roa
Signing time:             Wed 05 Apr 2023 18:39:27 +0000
ROA not before:           Wed 05 Apr 2023 18:34:27 +0000
ROA not after:            Wed 03 Apr 2024 18:39:27 +0000
asID:                     28352
IP address blocks:        2804:ae0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0a:5c:38:3c:02:f1:13:c9:fc:49:ed:88:0c:f6:54:c6:20:28:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5
        Validity
            Not Before: Apr  5 18:34:27 2023 GMT
            Not After : Apr  3 18:39:27 2024 GMT
        Subject: CN=D2ECE6581288AE807DDE1E8E4E4CAA5F493C0297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:50:84:37:f3:62:19:01:6a:63:ec:c6:b5:
                    26:1a:32:25:93:df:2e:97:7e:33:14:a3:3e:4e:6b:
                    01:12:21:f4:21:d4:5b:26:5a:d6:73:77:07:0c:24:
                    1a:64:54:39:f9:20:a1:64:6c:a2:ac:cd:d4:84:b5:
                    e2:22:80:f3:a5:19:91:df:76:d2:e1:14:41:aa:f3:
                    1f:0f:a4:2f:8a:20:21:96:e7:3b:20:e3:43:62:93:
                    32:19:7c:73:25:f3:04:5c:27:3c:8a:19:29:9e:a9:
                    86:13:dc:59:e6:05:1c:60:40:22:90:03:9d:0a:8d:
                    c8:3c:a1:af:46:36:a4:b5:db:bb:3d:db:a0:fb:a0:
                    26:92:43:2d:e6:f2:ef:ed:dc:cf:67:a7:07:24:33:
                    c2:49:a5:51:23:02:f5:dc:bd:f1:a5:9a:0d:80:3e:
                    b2:e9:6b:1b:49:11:7f:f6:e0:ca:29:cf:c0:42:ec:
                    53:a2:a6:fe:a0:94:47:97:72:ab:6d:fe:5c:a7:ae:
                    de:ff:13:54:a4:9d:f8:e2:63:85:1c:9c:73:2b:8e:
                    14:84:62:45:ba:31:20:76:a8:f4:1f:da:9a:dd:23:
                    1b:dc:6b:b9:20:0b:7f:52:0a:16:c8:af:44:db:e1:
                    c8:e5:69:14:33:0f:d0:70:b1:08:ad:d2:7c:52:e9:
                    19:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EC:E6:58:12:88:AE:80:7D:DE:1E:8E:4E:4C:AA:5F:49:3C:02:97
            X509v3 Authority Key Identifier:
                keyid:3E:D6:45:BC:CA:E5:5E:7F:42:FC:CB:42:EB:66:12:E3:9B:FC:EC:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3334203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:0d:a1:ac:e4:92:bc:88:2e:6e:75:0b:78:ca:15:20:c3:7a:
         bf:1b:bc:b9:53:a7:25:01:43:4f:93:e4:ec:e2:0c:d2:55:9b:
         fa:81:3a:25:39:41:cd:bc:bc:50:32:2e:2e:2f:5d:30:c3:f4:
         fd:18:23:c2:07:e5:c7:df:11:f2:d6:d6:6f:13:43:f4:ec:e5:
         f2:27:23:05:20:a6:be:4e:e0:06:ff:16:ef:a8:b5:3d:a5:fb:
         bd:9e:2b:91:c7:0c:54:73:90:2c:69:d9:d2:f1:1d:cb:21:2a:
         e8:42:f0:75:b8:92:5d:e9:b1:d3:fc:45:56:04:a2:c7:49:53:
         d4:42:dc:05:19:e1:c6:c0:11:ac:02:e9:c4:06:e4:fb:ae:f4:
         67:a9:34:ba:7a:8f:98:5f:e0:c3:bd:06:e4:70:b9:97:4e:19:
         7c:dc:ed:65:86:f0:39:98:f4:92:2c:63:6b:20:6e:da:f5:a7:
         3e:9e:13:0b:e3:a7:cf:12:95:97:13:75:79:7c:18:77:8e:b2:
         64:fb:c1:2d:50:f0:d5:95:20:6b:29:c3:42:9b:a6:b3:83:23:
         c5:1c:bf:07:ed:84:02:fc:15:d2:9a:c3:27:c4:20:c9:02:d6:
         34:1e:6b:79:23:9b:4b:96:dc:67:bc:cc:d5:3b:14:c4:3b:02:
         5c:90:ec:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----