Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/1/323830343a363032343a3a2f33322d3438203d3e20323639313438.roa
File:                     323830343a363032343a3a2f33322d3438203d3e20323639313438.roa (raw, json)
Hash identifier:          JYROSkPDYN3+TerghSMaNoqqNt9FNXHM6Mrqj+vybB4=
Subject key identifier:   6E:90:2B:9C:C5:88:D8:19:5E:80:69:46:1E:AC:2F:4A:06:73:E3:86
Certificate issuer:       /CN=3CBA4628C5BCEF416B6C50BD9E59EAA9D38112B7
Certificate serial:       34ED45DA77E0759D35734F77560B64378A2C79B9
Authority key identifier: 3C:BA:46:28:C5:BC:EF:41:6B:6C:50:BD:9E:59:EA:A9:D3:81:12:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CBA4628C5BCEF416B6C50BD9E59EAA9D38112B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/1/323830343a363032343a3a2f33322d3438203d3e20323639313438.roa
Signing time:             Thu 18 May 2023 17:53:50 +0000
ROA not before:           Thu 18 May 2023 17:48:50 +0000
ROA not after:            Thu 16 May 2024 17:53:50 +0000
asID:                     269148
IP address blocks:        2804:6024::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ed:45:da:77:e0:75:9d:35:73:4f:77:56:0b:64:37:8a:2c:79:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CBA4628C5BCEF416B6C50BD9E59EAA9D38112B7
        Validity
            Not Before: May 18 17:48:50 2023 GMT
            Not After : May 16 17:53:50 2024 GMT
        Subject: CN=6E902B9CC588D8195E8069461EAC2F4A0673E386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:3c:00:03:9c:39:ab:eb:f9:c5:90:b0:c1:
                    85:0d:ed:1c:dc:51:0e:90:a2:cb:cd:4c:43:e0:53:
                    6c:37:34:c2:f4:20:b1:33:78:16:b5:cc:52:1b:68:
                    d0:27:7c:23:e6:2d:f3:41:d0:be:38:d1:be:8c:fc:
                    42:36:d0:dd:1d:4a:7a:d4:96:1e:67:ed:ba:3d:c4:
                    7f:81:8f:2c:73:31:94:7d:a2:8d:55:6c:40:04:63:
                    f6:b9:61:e8:83:b3:17:f6:dd:c9:bd:68:28:fa:fa:
                    59:38:cf:28:04:b8:51:5a:63:c6:28:1b:0e:fe:21:
                    44:53:6c:f7:42:e4:46:5a:ed:b1:53:0a:2e:d0:a6:
                    0c:cc:08:7d:33:4e:9f:9a:0c:99:d0:7b:bd:9b:20:
                    4e:e5:4b:47:fb:28:0c:c7:fe:ef:a4:b7:2a:a1:b0:
                    1b:2f:8e:72:3a:e4:6c:72:6b:e8:18:38:7f:e8:81:
                    ce:86:9f:b3:80:a5:9e:32:ae:f1:fa:96:81:62:4d:
                    5d:5e:d5:08:5d:4d:39:b7:53:ef:b6:f1:1a:13:80:
                    ee:7c:6f:d4:2a:c1:5c:d5:f5:4f:60:13:d0:c5:eb:
                    df:11:36:b0:1c:f8:e8:1e:d9:b6:83:7e:f6:6c:99:
                    8c:c1:1b:36:91:3c:32:f0:9d:9c:6b:9c:bc:18:b0:
                    6b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:90:2B:9C:C5:88:D8:19:5E:80:69:46:1E:AC:2F:4A:06:73:E3:86
            X509v3 Authority Key Identifier:
                keyid:3C:BA:46:28:C5:BC:EF:41:6B:6C:50:BD:9E:59:EA:A9:D3:81:12:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/1/3CBA4628C5BCEF416B6C50BD9E59EAA9D38112B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CBA4628C5BCEF416B6C50BD9E59EAA9D38112B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/1/323830343a363032343a3a2f33322d3438203d3e20323639313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6024::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:ff:91:ec:13:0f:a0:63:2b:15:2d:ef:64:10:79:57:17:67:
         b1:74:a0:05:1c:ff:17:df:d9:4d:92:db:fa:d0:70:4d:d0:3b:
         91:b5:a2:92:c1:d0:ce:7a:77:d6:95:19:c4:f1:39:aa:74:d6:
         dd:7a:ad:99:cc:65:1d:dc:02:ea:59:0a:6a:67:40:42:b3:b9:
         5e:5b:5b:4e:0b:04:a1:60:2d:79:ee:37:55:7c:b1:b0:3e:06:
         fc:6e:1d:f6:c7:30:ff:f6:c3:2c:a2:37:2e:3b:6b:47:2c:11:
         76:cf:b6:91:f6:81:ed:b9:07:48:1f:c9:23:8b:af:1b:e1:9a:
         40:59:62:8b:cf:bb:5c:05:ae:91:5d:1d:44:93:53:8d:3c:94:
         c6:9d:5b:eb:0d:4f:87:11:8d:ed:a8:42:c7:80:69:9f:0e:10:
         31:58:71:17:f0:99:e4:11:e9:8c:63:b5:42:9f:a1:e1:d4:40:
         b4:53:0c:31:c5:bb:00:47:93:83:51:e3:42:72:6a:51:f2:c0:
         62:73:d7:78:fe:04:0f:5b:bf:a2:2a:90:82:39:65:93:45:f1:
         e4:27:88:2f:d8:a4:8b:a2:f2:a3:1a:50:a9:ee:69:3a:74:dd:
         86:e1:4a:6b:6e:92:27:c4:ac:59:0e:01:8e:70:f3:ed:57:66:
         b8:3d:2b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----