Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/323830343a323233303a3a2f33322d3332203d3e20323634353930.roa
File:                     323830343a323233303a3a2f33322d3332203d3e20323634353930.roa (raw, json)
Hash identifier:          NFkxjlbA3NzIVb9zrn0lqJshVVoo9ofwwg5JE3vNMms=
Subject key identifier:   F2:01:94:3D:BD:C4:35:2E:B4:40:E5:9D:DC:CC:B2:C3:7C:1E:6C:0C
Certificate issuer:       /CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
Certificate serial:       68C713507974CF91A9EF59026F68BA6502C2C474
Authority key identifier: DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/323830343a323233303a3a2f33322d3332203d3e20323634353930.roa
Signing time:             Tue 10 Oct 2023 20:00:00 +0000
ROA not before:           Tue 10 Oct 2023 19:55:00 +0000
ROA not after:            Tue 08 Oct 2024 20:00:00 +0000
asID:                     264590
IP address blocks:        2804:2230::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c7:13:50:79:74:cf:91:a9:ef:59:02:6f:68:ba:65:02:c2:c4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
        Validity
            Not Before: Oct 10 19:55:00 2023 GMT
            Not After : Oct  8 20:00:00 2024 GMT
        Subject: CN=F201943DBDC4352EB440E59DDCCCB2C37C1E6C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:c1:27:92:f1:f7:80:3b:df:23:bd:7f:50:
                    0c:ba:bb:0a:8d:fb:81:4f:b0:c1:8b:c2:ee:d2:21:
                    41:ea:5c:7c:02:f6:ed:93:fb:e4:aa:3c:54:13:41:
                    49:4a:6d:2b:1d:f6:93:2c:1a:82:fb:16:b4:3f:a6:
                    d3:e8:d6:fc:35:28:2e:0c:a8:02:0d:af:20:5a:7d:
                    f0:ab:2d:48:6f:45:ae:a4:e8:df:cf:7d:69:35:8c:
                    26:f8:f2:25:35:ea:3c:fd:2f:f1:07:76:b6:20:96:
                    f9:1d:5b:1c:03:25:ef:48:a2:5a:06:ff:ab:b2:eb:
                    e0:26:7a:21:92:2b:93:fd:58:41:67:53:74:48:bf:
                    e6:a4:09:2c:d8:ff:c5:d0:68:4c:d7:bc:0a:ba:b3:
                    f0:e2:55:58:c6:2c:15:ce:d5:d3:cd:0d:f6:3c:92:
                    9e:33:7a:c6:f7:60:9e:d3:26:0a:a6:25:82:8a:b3:
                    ba:7c:e2:0a:80:c9:73:db:8a:9e:e2:ca:75:11:d8:
                    39:e8:ad:2f:d6:7b:e7:46:a8:76:db:27:a2:41:a9:
                    62:ac:c2:3b:de:4c:6b:1d:1d:b8:c8:ab:66:26:2d:
                    24:b8:8c:61:ab:3e:06:c1:ed:bf:f8:4d:3d:18:ba:
                    bb:dc:ca:dc:a9:6f:fa:58:60:62:62:df:dc:85:40:
                    1e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:01:94:3D:BD:C4:35:2E:B4:40:E5:9D:DC:CC:B2:C3:7C:1E:6C:0C
            X509v3 Authority Key Identifier:
                keyid:DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/323830343a323233303a3a2f33322d3332203d3e20323634353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2230::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:80:de:0c:ee:5e:01:21:31:14:b9:19:96:3a:59:5f:e0:ea:
         2c:de:d3:82:ab:b8:ec:d0:10:58:3b:eb:d7:ef:5a:e0:a0:ce:
         b8:f9:59:0b:3e:62:c6:1b:52:5e:7c:35:32:d2:4c:c9:19:88:
         f2:49:74:46:04:b9:b1:be:7e:fb:47:f3:31:66:75:37:fc:d1:
         ce:d2:8f:01:8e:c2:ea:da:8f:f9:3d:f9:9d:42:b9:34:88:f8:
         a0:c1:bf:59:17:9e:a4:b8:a7:a4:ab:cc:90:e8:95:96:d1:e0:
         7d:dc:7c:d3:59:2d:74:1f:53:0f:e7:7c:c7:d4:bc:b4:fe:d5:
         7a:ca:34:72:1a:30:56:0c:39:60:c6:a1:22:ad:74:09:ea:af:
         e9:e3:7f:b6:fa:a6:a3:96:2c:fa:ff:d8:7b:d9:f2:71:41:b3:
         1f:9d:81:ad:89:18:05:9f:8e:f7:eb:39:3a:f0:11:97:37:03:
         ec:d6:f8:a6:2b:d3:cd:93:4c:8d:f1:ee:94:b9:d9:ea:b1:cf:
         09:a9:60:0a:99:df:86:38:af:47:88:85:32:d6:2b:94:c0:6b:
         f4:8b:42:0b:3d:ad:3d:8f:67:97:1b:84:4a:c6:4c:a7:ce:d4:
         0a:f6:86:4b:18:0a:da:76:4e:cd:f8:2a:ed:a7:3c:16:65:df:
         5c:5e:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----