Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9EeU4iYKeEeQogRRLR8kWUcjCe3dCPT6aTrgDvheEVF6/0/323830343a376238303a3a2f3332203d3e20323632363130.roa
File:                     323830343a376238303a3a2f3332203d3e20323632363130.roa (raw, json)
Hash identifier:          EDh5Kx7w/noQV+ro53/3vtYjaKvujAddZd+ojnK316I=
Subject key identifier:   2C:B0:B4:8C:A6:CA:5D:2F:1B:D9:54:E5:1B:9C:11:1E:71:BB:A6:BC
Certificate issuer:       /CN=53591DD5E351B945FCF842C06D244EE12F738570
Certificate serial:       4B685FD5DBE846A3D3B6D7A139C457571769993C
Authority key identifier: 53:59:1D:D5:E3:51:B9:45:FC:F8:42:C0:6D:24:4E:E1:2F:73:85:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53591DD5E351B945FCF842C06D244EE12F738570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9EeU4iYKeEeQogRRLR8kWUcjCe3dCPT6aTrgDvheEVF6/0/323830343a376238303a3a2f3332203d3e20323632363130.roa
Signing time:             Tue 18 Jul 2023 16:00:00 +0000
ROA not before:           Tue 18 Jul 2023 15:55:00 +0000
ROA not after:            Thu 18 Jul 2024 16:00:00 +0000
asID:                     262610
IP address blocks:        2804:7b80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:68:5f:d5:db:e8:46:a3:d3:b6:d7:a1:39:c4:57:57:17:69:99:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53591DD5E351B945FCF842C06D244EE12F738570
        Validity
            Not Before: Jul 18 15:55:00 2023 GMT
            Not After : Jul 18 16:00:00 2024 GMT
        Subject: CN=3082010A0282010100D5A08A219AD24466DF40DC39FF689D564479B47D033448D62F80D41AE309DEF912288CCD9900D96C8002F238DAE50CF1E72A1E20607B1BF420056CD5302C8D0F7C4A93F04C8C14122BA75942FE5B99FC80E40FCB84EC2A20B5641FB205F54A7C337D25727B10DF7B79A51215425F1FA8051D113515E47141849AE4F083CDA3304685C2010FB8384111D21C3543091524BAB577D2D1F1D938107D5B429478A4821752D8736F9D00D47F7AE646CDF4ABA1802325668D151F75990AA738DE8C1103018466E29D99160DF11A5CD0C2C904433937C4CFEED41C2A8088F300D86FF4FC0537D902F7F5C5D942F02FB7AD5888B343F77E9F5E7785F779D021534F2C5BAB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a0:8a:21:9a:d2:44:66:df:40:dc:39:ff:68:
                    9d:56:44:79:b4:7d:03:34:48:d6:2f:80:d4:1a:e3:
                    09:de:f9:12:28:8c:cd:99:00:d9:6c:80:02:f2:38:
                    da:e5:0c:f1:e7:2a:1e:20:60:7b:1b:f4:20:05:6c:
                    d5:30:2c:8d:0f:7c:4a:93:f0:4c:8c:14:12:2b:a7:
                    59:42:fe:5b:99:fc:80:e4:0f:cb:84:ec:2a:20:b5:
                    64:1f:b2:05:f5:4a:7c:33:7d:25:72:7b:10:df:7b:
                    79:a5:12:15:42:5f:1f:a8:05:1d:11:35:15:e4:71:
                    41:84:9a:e4:f0:83:cd:a3:30:46:85:c2:01:0f:b8:
                    38:41:11:d2:1c:35:43:09:15:24:ba:b5:77:d2:d1:
                    f1:d9:38:10:7d:5b:42:94:78:a4:82:17:52:d8:73:
                    6f:9d:00:d4:7f:7a:e6:46:cd:f4:ab:a1:80:23:25:
                    66:8d:15:1f:75:99:0a:a7:38:de:8c:11:03:01:84:
                    66:e2:9d:99:16:0d:f1:1a:5c:d0:c2:c9:04:43:39:
                    37:c4:cf:ee:d4:1c:2a:80:88:f3:00:d8:6f:f4:fc:
                    05:37:d9:02:f7:f5:c5:d9:42:f0:2f:b7:ad:58:88:
                    b3:43:f7:7e:9f:5e:77:85:f7:79:d0:21:53:4f:2c:
                    5b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B0:B4:8C:A6:CA:5D:2F:1B:D9:54:E5:1B:9C:11:1E:71:BB:A6:BC
            X509v3 Authority Key Identifier:
                keyid:53:59:1D:D5:E3:51:B9:45:FC:F8:42:C0:6D:24:4E:E1:2F:73:85:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9EeU4iYKeEeQogRRLR8kWUcjCe3dCPT6aTrgDvheEVF6/0/53591DD5E351B945FCF842C06D244EE12F738570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53591DD5E351B945FCF842C06D244EE12F738570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9EeU4iYKeEeQogRRLR8kWUcjCe3dCPT6aTrgDvheEVF6/0/323830343a376238303a3a2f3332203d3e20323632363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:e4:f6:28:c8:0d:25:93:84:f3:e4:4a:d0:f9:fe:c7:60:e2:
         24:3d:ba:b6:c2:b4:85:6c:f9:ef:73:15:f2:bf:0f:70:2d:9f:
         1b:31:cb:2e:bf:b3:1d:a3:8c:64:0f:8c:1e:98:de:4f:eb:29:
         e0:da:e4:ef:b0:b6:fa:d7:ed:a9:9e:e8:5b:d6:45:6c:d8:c5:
         fb:bb:14:1e:c6:8c:5d:b2:28:38:c4:4c:ae:94:6d:5f:b0:b6:
         37:ad:84:51:c3:22:98:32:c2:80:8b:b4:66:6c:70:d2:8a:55:
         bb:f8:4d:e3:c7:4b:c3:ad:a2:31:6e:00:b0:16:6a:ac:14:99:
         42:d3:fa:bd:ce:86:e9:92:3d:6f:52:82:b4:7e:85:8d:17:9f:
         5d:fb:f1:39:6e:79:27:80:76:08:78:80:2f:ef:fb:07:d7:da:
         49:9d:30:1e:35:63:f9:dd:ec:75:f0:d0:9e:b2:2b:ee:f3:86:
         b7:c9:8a:97:52:63:83:05:7d:21:e8:6d:10:5b:ca:a2:0a:bd:
         ec:d4:d9:02:58:06:5e:9b:78:a0:ea:19:30:32:56:91:84:50:
         3d:6d:7e:04:40:57:bf:94:31:82:da:22:75:2f:58:b0:b3:a4:
         38:97:33:63:b7:27:6d:19:a3:cc:eb:27:ad:ca:c0:5b:46:28:
         42:2f:9f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----