Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/323830343a333966383a3a2f33322d313238203d3e20323636303632.roa
File:                     323830343a333966383a3a2f33322d313238203d3e20323636303632.roa (raw, json)
Hash identifier:          5GtesxQkQmcmP9X/xm5xoMSX8grs3QGCgb7dyCmbN+Q=
Subject key identifier:   8D:D4:46:D6:24:EB:9A:BC:5F:50:4C:73:54:8A:E0:84:9B:B9:12:F8
Certificate issuer:       /CN=782B1B9E5687D67604FD97F2541FFB4B3A396E33
Certificate serial:       0170A28DAB9978B11166F964B30A8912055FEC50
Authority key identifier: 78:2B:1B:9E:56:87:D6:76:04:FD:97:F2:54:1F:FB:4B:3A:39:6E:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/782B1B9E5687D67604FD97F2541FFB4B3A396E33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/323830343a333966383a3a2f33322d313238203d3e20323636303632.roa
Signing time:             Thu 30 Mar 2023 01:25:29 +0000
ROA not before:           Thu 30 Mar 2023 01:20:29 +0000
ROA not after:            Thu 28 Mar 2024 01:25:29 +0000
asID:                     266062
IP address blocks:        2804:39f8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:70:a2:8d:ab:99:78:b1:11:66:f9:64:b3:0a:89:12:05:5f:ec:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782B1B9E5687D67604FD97F2541FFB4B3A396E33
        Validity
            Not Before: Mar 30 01:20:29 2023 GMT
            Not After : Mar 28 01:25:29 2024 GMT
        Subject: CN=8DD446D624EB9ABC5F504C73548AE0849BB912F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:5c:4a:f2:6c:7f:24:67:00:77:70:e0:1c:
                    88:6a:c4:36:18:ef:ec:5b:53:c1:34:28:a5:39:41:
                    e7:3a:b1:52:df:ae:b8:7c:3e:0f:fb:f0:72:77:44:
                    41:47:2e:b3:e1:87:8f:e3:d7:b4:df:be:4f:31:ba:
                    38:b9:34:72:29:36:98:ef:52:fc:a5:70:6f:9a:91:
                    d2:3d:21:ba:f0:9d:49:b6:09:e1:5e:77:44:59:27:
                    bf:bb:c3:0d:f0:1d:fe:4c:aa:50:79:d7:37:38:09:
                    2c:c8:62:5e:dc:da:b5:99:bb:38:5b:ce:1b:c0:dc:
                    15:7b:c3:94:dc:6b:10:6f:a1:4f:ff:f0:b0:c0:c6:
                    10:f4:0d:4b:08:69:b7:3b:63:2e:df:08:23:d7:16:
                    a1:a2:cb:28:74:36:22:75:83:a1:8f:2b:08:4c:67:
                    40:3e:fd:02:6f:47:68:b3:ec:e7:bd:71:6a:6b:6c:
                    1f:92:84:85:f4:6b:98:59:14:df:92:91:d4:53:7f:
                    d2:29:61:95:e8:34:ed:89:c4:fd:3b:64:e3:bc:4f:
                    33:e1:83:ca:03:9b:cf:43:02:af:2d:83:af:86:a7:
                    63:58:8e:b4:7c:87:1b:d3:3a:5b:f8:18:da:68:62:
                    5a:e2:2a:4d:64:56:60:9d:46:69:da:7a:ee:ae:e4:
                    f6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D4:46:D6:24:EB:9A:BC:5F:50:4C:73:54:8A:E0:84:9B:B9:12:F8
            X509v3 Authority Key Identifier:
                keyid:78:2B:1B:9E:56:87:D6:76:04:FD:97:F2:54:1F:FB:4B:3A:39:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/782B1B9E5687D67604FD97F2541FFB4B3A396E33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/782B1B9E5687D67604FD97F2541FFB4B3A396E33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/323830343a333966383a3a2f33322d313238203d3e20323636303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:f2:73:e8:d4:9c:fb:c0:cf:88:14:a8:a1:af:de:7d:69:ae:
         17:b8:08:bc:76:2e:63:ec:a2:8a:da:1c:63:91:6d:9d:14:cb:
         d0:4b:f8:97:20:25:6e:69:10:cf:7f:2f:9d:71:7b:0b:b7:19:
         7b:94:93:d4:55:e7:90:ac:80:1d:68:5b:35:7f:73:b0:4e:b9:
         18:84:17:00:38:e2:10:c9:01:7c:22:42:a8:70:0a:25:cc:86:
         94:6d:39:c6:e1:1c:81:b3:46:96:64:9d:be:d4:dd:32:f8:63:
         f3:dc:7b:84:dc:e1:9d:f0:ff:55:be:3e:5e:36:12:91:80:f8:
         f1:c1:d4:be:0b:62:e8:e4:38:84:70:75:1d:80:1c:93:be:6a:
         fe:11:48:a1:0c:83:eb:f3:bc:ed:18:ec:65:74:0a:82:45:e9:
         94:93:85:93:c4:af:eb:29:4e:08:eb:d2:53:1e:44:ed:01:64:
         d5:76:de:52:c8:4b:19:e1:aa:49:23:54:d4:ee:e0:a3:22:ce:
         32:3e:77:36:5f:d4:dc:2c:ea:4d:6b:c4:c9:13:8d:b6:75:92:
         2c:2d:c9:ea:1a:af:d3:ed:1b:e4:99:74:40:e2:f2:fc:14:4a:
         20:5e:3d:ac:7d:33:a6:10:19:68:74:20:3c:a3:eb:12:2c:41:
         65:97:cf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----