Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33332d3333203d3e203238333532.roa
File:                     323830343a6165303a3a2f33332d3333203d3e203238333532.roa (raw, json)
Hash identifier:          g56022wOtGQ1X+GBqC3QvMORtPvqgSjw/5Fl+Riq8yU=
Subject key identifier:   F2:8D:79:2A:2F:66:47:50:7C:19:01:61:4C:B1:73:14:74:D1:4F:71
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       29ED6F564DEC7A0234AD2A3E7C5F948EEEF8B433
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33332d3333203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:56 +0000
ROA not before:           Fri 13 Oct 2023 14:31:56 +0000
ROA not after:            Fri 11 Oct 2024 14:36:56 +0000
asID:                     28352
IP address blocks:        2804:ae0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ed:6f:56:4d:ec:7a:02:34:ad:2a:3e:7c:5f:94:8e:ee:f8:b4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:56 2023 GMT
            Not After : Oct 11 14:36:56 2024 GMT
        Subject: CN=F28D792A2F6647507C1901614CB1731474D14F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:6b:ab:fd:7f:a8:42:ab:9c:ea:c9:9d:7a:
                    13:ac:cb:81:25:55:12:22:dc:dd:40:21:13:94:ce:
                    f1:7d:e6:d3:1b:f1:03:dd:32:cf:3e:44:b0:f5:fc:
                    b4:68:a0:d3:46:d9:cc:2f:4c:b2:00:bf:ca:94:be:
                    98:2e:ca:c4:60:46:74:b0:8f:ce:91:de:ea:e0:26:
                    8d:9f:4e:2e:df:4e:52:aa:d8:47:a4:cd:4e:6f:6c:
                    fe:83:07:a4:42:eb:5b:ed:0b:63:a5:c6:f4:1b:76:
                    fa:53:f5:40:8c:3c:28:1d:93:9e:9d:de:15:12:75:
                    4e:60:02:45:74:f8:67:48:d3:da:91:cd:a6:ea:41:
                    ff:c0:c5:a6:a2:e6:b1:f2:08:f2:fc:bc:c1:de:0f:
                    d8:56:d6:1a:fd:b4:66:fe:af:04:4f:f7:f4:fa:d8:
                    18:b2:ae:1b:0f:5d:cb:6d:c7:7a:74:e5:0a:e2:75:
                    30:f5:4f:67:1a:b2:17:14:ad:df:83:3f:19:7f:f8:
                    97:bb:0b:16:e6:6e:e5:32:92:38:0a:92:80:f2:d9:
                    74:9d:63:ab:39:40:39:72:cd:5b:a1:30:7b:98:73:
                    c3:35:2d:14:dd:70:c9:29:17:01:93:9e:80:73:7a:
                    5c:bb:96:72:eb:40:ea:7d:5d:02:74:08:fc:7a:ab:
                    79:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8D:79:2A:2F:66:47:50:7C:19:01:61:4C:B1:73:14:74:D1:4F:71
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33332d3333203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ae0::/33

    Signature Algorithm: sha256WithRSAEncryption
         70:9b:de:6a:af:c5:7b:99:16:62:7e:9f:92:4e:46:4a:9b:2d:
         ee:7c:ba:17:59:e4:15:ee:1d:65:ec:32:7a:bc:13:a8:4c:d4:
         3a:b2:64:67:06:d3:66:64:2b:30:59:aa:13:b0:fc:13:2f:cc:
         ac:83:21:71:73:90:0f:27:30:a3:fa:fa:cf:26:8c:b3:b1:41:
         ee:13:11:a3:ea:a5:2b:8e:96:88:f3:c9:96:f8:57:7f:65:bb:
         d2:a4:3e:f4:03:e4:68:70:76:b2:8c:40:6f:9d:9b:28:4c:93:
         66:37:26:54:1e:38:10:c2:03:8e:e9:5e:1d:e6:d0:4e:a0:7f:
         3a:b1:bc:8d:04:d8:a1:f5:e3:85:00:a8:6c:57:de:ba:e6:bf:
         3e:94:6b:e1:89:2b:57:91:dc:21:b9:56:28:71:73:77:b0:e2:
         4b:85:84:cb:df:db:b9:77:1b:95:1e:2b:c6:3e:62:2f:45:02:
         57:e7:66:35:3f:81:54:73:2e:18:7f:dc:72:af:b5:95:39:4d:
         31:4c:07:9d:de:42:5c:27:f2:3b:71:e7:ee:6f:aa:59:7b:26:
         87:44:e5:df:32:30:b0:52:06:b9:02:1a:68:70:95:04:40:18:
         bd:b0:eb:54:cc:ac:40:12:00:8f:c2:05:5a:33:14:07:e8:fd:
         8c:da:31:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----