Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/323830343a313462633a383030303a3a2f33332d3333203d3e20323633333437.roa
File:                     323830343a313462633a383030303a3a2f33332d3333203d3e20323633333437.roa (raw, json)
Hash identifier:          k8kIareDqE5T5KTb03f/m89TkqLeNaXPPm0C+LojjDI=
Subject key identifier:   39:21:33:CD:64:D7:9A:81:9D:36:A3:24:16:A9:7A:BB:18:D3:C0:96
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       10B0765D05E8428A2681E4AD30FBFACC400F083C
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/323830343a313462633a383030303a3a2f33332d3333203d3e20323633333437.roa
Signing time:             Tue 20 Jun 2023 01:03:29 +0000
ROA not before:           Tue 20 Jun 2023 00:58:29 +0000
ROA not after:            Tue 18 Jun 2024 01:03:29 +0000
asID:                     263347
IP address blocks:        2804:14bc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b0:76:5d:05:e8:42:8a:26:81:e4:ad:30:fb:fa:cc:40:0f:08:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Jun 20 00:58:29 2023 GMT
            Not After : Jun 18 01:03:29 2024 GMT
        Subject: CN=392133CD64D79A819D36A32416A97ABB18D3C096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:b8:87:5b:10:f5:e1:2b:51:bb:f0:3b:62:
                    0d:77:21:06:92:14:36:79:5d:6f:aa:33:bd:ff:a5:
                    29:80:ff:54:8c:4a:91:d7:71:70:a2:96:ff:96:36:
                    a5:c4:e7:71:8c:bb:e0:69:a9:7b:8e:c0:75:02:24:
                    d4:89:2c:f9:02:13:fa:3e:dd:2a:9a:d1:52:60:c1:
                    02:33:47:84:f6:e0:6e:72:10:20:69:b8:fb:ea:83:
                    9c:4e:0e:48:2b:be:44:a0:92:cd:f1:42:07:3b:01:
                    7c:bc:e1:27:e0:b2:33:65:11:9c:d0:a9:c9:9d:8b:
                    61:c7:70:4c:30:ae:e4:36:5f:91:32:85:f5:16:ec:
                    c5:5e:96:26:97:1c:6a:ff:6e:3c:b6:3f:3e:10:9d:
                    db:ed:ee:aa:4d:13:e7:97:6e:87:87:a2:ec:df:7a:
                    6f:81:40:f4:62:a5:8a:d9:92:5d:55:7e:fe:36:a6:
                    6a:cb:ae:05:c0:2d:63:0e:b3:8d:19:1a:35:d6:85:
                    d0:ae:00:b8:a5:0c:a5:55:f9:4e:6e:07:b8:ea:b4:
                    04:70:66:bd:bb:89:34:de:8c:18:ed:f1:08:e6:bd:
                    9f:71:3f:89:c4:c0:7d:37:3b:d5:de:c4:e5:15:34:
                    99:62:3a:c6:54:36:60:b3:a6:34:19:fd:68:29:85:
                    23:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:21:33:CD:64:D7:9A:81:9D:36:A3:24:16:A9:7A:BB:18:D3:C0:96
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/323830343a313462633a383030303a3a2f33332d3333203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14bc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         12:35:26:dd:a2:84:cd:c4:3a:d6:27:f1:2a:97:af:1c:72:6e:
         1c:3b:a6:6b:11:00:50:7c:2d:a1:eb:53:bc:ee:a4:fb:12:c1:
         6f:a1:e0:a8:31:01:1c:6f:ec:be:b9:00:88:69:7d:6f:58:a9:
         93:48:95:b4:f9:13:52:65:0b:f1:2a:61:77:04:ab:8b:2b:c7:
         3a:f0:50:cf:60:2f:ea:cf:fc:ae:44:15:fc:9d:b0:e3:97:e2:
         06:9e:a2:18:34:d5:85:9e:e8:64:76:9b:e4:85:d1:3f:35:76:
         f5:71:32:4c:df:49:3d:7c:a8:bb:bb:42:a9:24:79:c1:c6:f1:
         a6:6f:e3:d2:2c:02:ef:34:d6:ac:74:14:b0:d4:21:8d:be:d2:
         97:bb:32:cc:7a:6c:c4:12:80:c2:7c:25:ff:f5:82:62:02:b4:
         92:df:a0:f3:ba:c9:b9:d7:27:2f:0a:75:0e:a4:bf:bb:29:8f:
         40:12:1e:51:40:e6:89:8f:ad:da:c9:a0:58:77:2f:69:38:25:
         fe:21:a4:4b:7b:85:b8:ed:12:72:e3:51:be:c1:de:55:6e:3a:
         40:9a:9f:19:0c:6d:8a:f8:e7:33:d8:15:9f:6d:b7:6d:05:ef:
         da:ec:ee:b2:6a:66:39:47:10:c1:e7:da:78:2a:11:59:61:8f:
         5c:77:d0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----