Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a3a2f33322d3332203d3e20323635333238.roa
File:                     323830343a326532383a3a2f33322d3332203d3e20323635333238.roa (raw, json)
Hash identifier:          h6YIoJH6FKeS+y7/65QNtqQGnSOb1dEPrw6FOWRPqcY=
Subject key identifier:   DA:8F:E4:A5:B3:8A:E6:24:B7:93:3D:6C:F9:50:E4:6D:F9:07:CF:B4
Certificate issuer:       /CN=77947C88DBADADCA74224F342BBB9D3AE9B34D31
Certificate serial:       67B20847A0CA82825702F0EE7AEA7937F883EAA4
Authority key identifier: 77:94:7C:88:DB:AD:AD:CA:74:22:4F:34:2B:BB:9D:3A:E9:B3:4D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77947C88DBADADCA74224F342BBB9D3AE9B34D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a3a2f33322d3332203d3e20323635333238.roa
Signing time:             Fri 29 Sep 2023 17:22:21 +0000
ROA not before:           Fri 29 Sep 2023 17:17:21 +0000
ROA not after:            Fri 27 Sep 2024 17:22:21 +0000
asID:                     265328
IP address blocks:        2804:2e28::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b2:08:47:a0:ca:82:82:57:02:f0:ee:7a:ea:79:37:f8:83:ea:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77947C88DBADADCA74224F342BBB9D3AE9B34D31
        Validity
            Not Before: Sep 29 17:17:21 2023 GMT
            Not After : Sep 27 17:22:21 2024 GMT
        Subject: CN=DA8FE4A5B38AE624B7933D6CF950E46DF907CFB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:97:6a:31:99:0d:31:15:18:f9:dc:f5:24:
                    dd:2b:d5:7c:0f:ab:ac:d6:2c:6d:01:ad:96:de:29:
                    a2:24:6c:a7:7b:7b:c9:27:38:59:cc:54:31:b8:b3:
                    1d:c4:02:47:71:8d:6d:51:b0:52:1e:94:cd:13:a5:
                    19:7b:3a:4c:c2:a1:44:be:79:4f:d0:9d:5f:51:f9:
                    ae:b1:0f:e8:b8:3d:ee:08:28:47:e7:9b:75:da:f0:
                    1a:02:2d:65:f5:b9:7e:ca:32:66:e4:af:f9:61:f0:
                    e8:58:af:65:86:50:15:f4:cc:19:e0:48:20:97:65:
                    db:fd:e2:44:51:4e:cc:e2:b8:10:0f:08:c3:84:e9:
                    97:0b:8a:4c:73:44:ac:d3:fb:20:5b:53:0e:7a:0b:
                    fa:04:aa:3b:b5:62:0b:9a:d5:f9:fd:71:3d:09:89:
                    be:ad:d7:4c:aa:5f:9b:be:bc:73:98:2c:bf:e1:d1:
                    2c:ed:f5:a6:3e:81:f4:69:33:81:a4:8e:85:8a:a7:
                    cd:01:ef:4f:69:e6:75:86:e5:01:29:11:ba:cc:6c:
                    7b:1d:98:da:8c:c4:ff:bc:fd:df:23:11:e3:33:b6:
                    0d:57:5b:ad:28:6f:a2:70:34:94:40:74:9d:4f:70:
                    c6:44:eb:f1:40:35:5d:92:8b:47:c7:29:62:a7:80:
                    7d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8F:E4:A5:B3:8A:E6:24:B7:93:3D:6C:F9:50:E4:6D:F9:07:CF:B4
            X509v3 Authority Key Identifier:
                keyid:77:94:7C:88:DB:AD:AD:CA:74:22:4F:34:2B:BB:9D:3A:E9:B3:4D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/77947C88DBADADCA74224F342BBB9D3AE9B34D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77947C88DBADADCA74224F342BBB9D3AE9B34D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a3a2f33322d3332203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:83:c9:50:4e:2b:27:4c:6d:c6:36:2b:c9:e7:75:06:e1:1c:
         cc:61:0e:61:df:05:00:5f:80:9d:1c:29:55:de:a9:37:27:ea:
         0c:bc:83:d0:87:0b:13:fc:38:3f:52:2e:f4:6c:45:d4:b6:18:
         d4:15:d1:ae:20:61:da:39:d1:26:3d:4c:52:60:45:77:09:78:
         da:ce:ab:98:29:61:b5:e1:b8:77:aa:7b:5c:6e:20:60:e5:f9:
         94:43:1d:bc:d6:ef:ff:74:b9:cc:46:d9:c9:81:33:5b:2d:73:
         c4:9e:82:1b:fe:03:3e:ca:6f:37:6b:3b:8d:47:11:63:cf:29:
         22:76:e6:e2:f8:96:a2:24:5a:ca:b3:d5:06:5a:29:12:eb:bd:
         90:05:53:59:c8:18:75:13:0b:a5:96:5a:1e:ad:30:0d:67:c0:
         a7:ae:14:de:43:03:cc:22:96:46:6a:95:f5:85:77:07:4e:ec:
         c5:bc:0f:ec:66:bc:6b:64:d7:60:0a:b8:b3:9b:46:a3:f5:c7:
         b6:fe:bd:f3:de:bd:e5:76:03:d8:0f:82:b6:5f:ac:fe:16:a8:
         bc:41:be:37:ef:24:ed:f7:4a:62:3a:bf:9b:b9:ad:b7:ee:bd:
         d1:96:1e:74:27:d4:a0:90:40:5c:39:cd:22:98:52:40:2e:ee:
         b0:6a:82:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----