Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/323830343a336333633a3a2f33332d3333203d3e20323636313938.roa
File:                     323830343a336333633a3a2f33332d3333203d3e20323636313938.roa (raw, json)
Hash identifier:          4oW8X5MHnigmC386eCKTSSSI5AbuHMMpq2+Yup1kFx0=
Subject key identifier:   7C:50:B4:46:ED:83:25:47:52:1F:56:BA:D0:28:B5:F4:2D:B8:3F:BA
Certificate issuer:       /CN=08569896B950AF614AD919489CA9496B4E462F59
Certificate serial:       0568447CC2BEC2509A19C4C811E636AE484967F2
Authority key identifier: 08:56:98:96:B9:50:AF:61:4A:D9:19:48:9C:A9:49:6B:4E:46:2F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08569896B950AF614AD919489CA9496B4E462F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/323830343a336333633a3a2f33332d3333203d3e20323636313938.roa
Signing time:             Tue 31 Oct 2023 20:43:58 +0000
ROA not before:           Tue 31 Oct 2023 20:38:58 +0000
ROA not after:            Tue 29 Oct 2024 20:43:58 +0000
asID:                     266198
IP address blocks:        2804:3c3c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:68:44:7c:c2:be:c2:50:9a:19:c4:c8:11:e6:36:ae:48:49:67:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08569896B950AF614AD919489CA9496B4E462F59
        Validity
            Not Before: Oct 31 20:38:58 2023 GMT
            Not After : Oct 29 20:43:58 2024 GMT
        Subject: CN=7C50B446ED832547521F56BAD028B5F42DB83FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d0:f9:1e:22:71:ad:89:9e:e9:d3:1c:b1:79:
                    33:8d:53:ff:93:7a:89:fe:27:b6:86:44:6e:0d:8f:
                    b2:67:68:8f:e8:2a:65:12:70:ab:04:8d:a5:8e:95:
                    12:5d:28:cf:2b:5e:38:1a:92:c4:63:ef:70:8d:a4:
                    33:e0:12:9b:ce:c8:d0:da:1b:7b:a8:66:04:d3:8c:
                    ea:e1:ea:4c:b3:e5:a4:b1:1f:78:9d:90:3f:84:e7:
                    0e:e8:55:13:1d:c9:c2:d5:8f:f4:e5:e7:3b:0f:5a:
                    0b:ae:be:8b:bc:84:32:8d:7f:2b:23:e0:32:8d:58:
                    39:3f:fb:eb:7c:e7:34:2f:5a:90:ca:7f:22:6d:ff:
                    79:e1:93:f6:16:ed:e6:c9:51:80:d0:db:f8:06:3e:
                    ab:f3:7e:fa:1c:77:2e:e2:b2:64:d8:7b:80:c9:6f:
                    51:c7:31:53:27:53:3e:db:15:42:ed:6d:8b:a3:8e:
                    28:16:0b:6d:fe:7a:04:0d:c1:a2:3c:b3:62:35:ee:
                    2a:c0:8b:28:6e:05:a3:37:88:f0:5a:bf:49:bc:54:
                    e8:1e:42:16:45:5c:62:bf:8a:e2:41:f5:75:86:60:
                    47:65:29:85:6a:69:49:d1:d9:19:1e:51:c3:0b:c8:
                    58:dc:3c:8b:83:a6:63:b1:cc:ea:21:88:42:8e:80:
                    b1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:50:B4:46:ED:83:25:47:52:1F:56:BA:D0:28:B5:F4:2D:B8:3F:BA
            X509v3 Authority Key Identifier:
                keyid:08:56:98:96:B9:50:AF:61:4A:D9:19:48:9C:A9:49:6B:4E:46:2F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/08569896B950AF614AD919489CA9496B4E462F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08569896B950AF614AD919489CA9496B4E462F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/323830343a336333633a3a2f33332d3333203d3e20323636313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c3c::/33

    Signature Algorithm: sha256WithRSAEncryption
         8c:00:73:9a:a2:f0:7f:99:db:76:8d:dd:71:63:1f:fb:93:58:
         9e:f7:a3:6f:4a:19:84:9a:cc:3a:9f:9d:f4:f2:0f:0d:65:44:
         f2:18:79:19:91:ae:7f:fc:5e:db:ae:04:25:45:52:7c:c2:c9:
         ce:17:87:2c:0d:d3:79:a9:a8:6a:d2:79:c9:b2:09:4f:6f:7f:
         b1:04:f0:60:69:0f:72:4b:4b:76:c5:45:27:cb:80:2b:a4:0c:
         bd:e1:32:7a:22:40:a8:67:95:fe:03:e6:e5:c8:e7:19:ff:88:
         f4:8a:f9:0d:86:55:8d:5b:1f:c7:3e:cc:fd:0a:f9:fe:f1:2f:
         18:26:97:a8:f3:1a:0c:2f:ed:ff:84:42:b7:3b:42:cb:d5:9c:
         73:eb:01:bd:d8:af:73:f7:58:79:a6:70:e6:f5:c7:5e:f1:2b:
         12:93:c8:a5:97:a3:12:03:7e:e9:2b:ba:fe:a2:ba:2c:3c:78:
         47:7c:af:65:61:a2:5e:b3:09:81:d3:76:40:14:99:6c:b8:39:
         3d:5c:d3:eb:51:2e:1f:90:19:61:76:fe:8c:68:87:a7:fc:37:
         e4:ae:d7:95:14:13:7a:a3:78:bf:e9:f7:cb:70:71:62:22:6f:
         13:69:00:0a:1f:e8:89:2b:d2:39:f7:85:c3:53:4d:6e:0e:b5:
         76:f1:1e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----