Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/0/323830343a323336343a3a2f33322d3438203d3e20323634313539.roa
File:                     323830343a323336343a3a2f33322d3438203d3e20323634313539.roa (raw, json)
Hash identifier:          GvM7rurGX42teTKH2py4QmARh+wSpsm+d8tvwd/eVO0=
Subject key identifier:   CF:85:E8:B4:2C:82:12:1E:C5:59:B7:37:3E:05:62:F1:8A:F5:F9:40
Certificate issuer:       /CN=65501EFC3B1110CB16C391F797BB378146CDCE0C
Certificate serial:       3D6FBDC3FBF5DE62BDD5DF6E6A13C8D54FF2DC0F
Authority key identifier: 65:50:1E:FC:3B:11:10:CB:16:C3:91:F7:97:BB:37:81:46:CD:CE:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65501EFC3B1110CB16C391F797BB378146CDCE0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/0/323830343a323336343a3a2f33322d3438203d3e20323634313539.roa
Signing time:             Tue 16 May 2023 12:07:03 +0000
ROA not before:           Tue 16 May 2023 12:02:03 +0000
ROA not after:            Tue 14 May 2024 12:07:03 +0000
asID:                     264159
IP address blocks:        2804:2364::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6f:bd:c3:fb:f5:de:62:bd:d5:df:6e:6a:13:c8:d5:4f:f2:dc:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65501EFC3B1110CB16C391F797BB378146CDCE0C
        Validity
            Not Before: May 16 12:02:03 2023 GMT
            Not After : May 14 12:07:03 2024 GMT
        Subject: CN=CF85E8B42C82121EC559B7373E0562F18AF5F940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cf:8a:c9:ca:bd:db:3d:db:29:83:a5:6c:55:
                    28:94:50:b8:78:14:bd:fd:77:ab:54:7b:d9:02:ad:
                    5c:f7:34:77:02:ae:00:08:c0:63:9e:c0:12:12:c5:
                    68:95:6c:c8:2c:7e:f0:4f:a6:b7:e6:cc:2b:a8:bc:
                    83:3a:25:68:76:ff:e0:23:2d:0d:5d:ed:79:24:dc:
                    3f:c5:a7:75:47:e0:54:2a:c2:a9:15:f5:8d:da:80:
                    3b:7c:65:a5:12:66:9a:7c:3f:de:f1:88:fc:3a:dc:
                    04:94:2d:f1:19:f7:60:54:27:3f:9e:00:11:e8:f3:
                    ad:0b:79:17:82:63:f1:00:73:b2:e7:34:3c:a1:c7:
                    d3:4d:00:d7:ca:33:32:87:03:4f:de:0f:b5:42:91:
                    c3:a8:9c:31:fb:3a:3f:51:22:24:d7:d2:00:16:a0:
                    8c:39:31:2c:bf:e8:47:12:8e:43:91:03:08:6e:f1:
                    b9:01:c8:e5:4e:f9:dc:dd:16:41:14:43:56:4c:6a:
                    e9:b5:a4:8a:63:e2:f2:60:e7:ec:b0:19:66:53:2a:
                    93:81:3e:e1:5d:a9:d4:1f:c4:26:3c:c6:22:a2:94:
                    ce:c2:4b:6a:93:9b:be:45:00:34:2e:1c:2e:d7:f6:
                    00:5a:d2:20:26:ec:64:86:02:5e:2f:43:30:3f:8f:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:85:E8:B4:2C:82:12:1E:C5:59:B7:37:3E:05:62:F1:8A:F5:F9:40
            X509v3 Authority Key Identifier:
                keyid:65:50:1E:FC:3B:11:10:CB:16:C3:91:F7:97:BB:37:81:46:CD:CE:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/0/65501EFC3B1110CB16C391F797BB378146CDCE0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65501EFC3B1110CB16C391F797BB378146CDCE0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/0/323830343a323336343a3a2f33322d3438203d3e20323634313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2364::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:e5:8e:cf:57:34:2a:e7:e7:fe:c3:0d:0f:8c:ab:11:70:b0:
         ab:36:29:47:f8:a5:82:b9:15:7e:ff:cc:b0:ec:84:1c:e9:41:
         ee:a3:b0:21:e2:dc:b9:c9:b2:6f:4c:8a:95:dc:d1:ea:eb:e6:
         f9:b4:b3:44:38:b2:9f:f6:0c:90:92:c3:09:8c:a6:47:ad:ad:
         ae:8f:e4:97:54:58:93:e4:17:a6:e0:bc:34:f4:30:2f:66:8a:
         a8:3a:11:f9:de:b1:52:99:92:03:25:21:3e:b2:40:be:47:01:
         c9:ff:95:28:6b:34:9e:03:5f:d2:26:23:eb:bb:f0:85:75:cd:
         7c:8c:2f:b0:2d:d8:46:ef:37:2b:cc:5f:48:22:22:75:4c:13:
         f0:3e:ca:f3:94:5c:97:33:b7:71:f3:c9:ae:3b:41:40:d2:34:
         73:c7:b8:6b:f5:b6:57:3d:3c:43:21:05:23:2a:c3:f2:23:3e:
         1b:a9:68:39:a7:ca:a0:0e:6b:a6:12:66:1c:0f:06:aa:a0:41:
         09:7b:63:d6:c0:00:77:ca:e3:53:9d:80:65:54:38:bf:f6:f7:
         0d:2e:b4:28:a1:6a:73:25:e4:e5:57:49:ff:1e:0a:e4:ee:67:
         b3:d8:43:de:73:36:6d:78:05:13:10:38:fa:9b:5e:75:fa:f0:
         e5:20:02:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----