Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/323830343a3261633a3a2f33322d3634203d3e203238333030.roa
File:                     323830343a3261633a3a2f33322d3634203d3e203238333030.roa (raw, json)
Hash identifier:          G0l/PtKkaM8r8d7LRokAC85tHlkRDvL+G3NPPUIMew8=
Subject key identifier:   D6:2C:BF:FC:F6:F4:99:1B:65:8D:C3:FF:48:9B:2E:26:C5:A9:FB:90
Certificate issuer:       /CN=FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E
Certificate serial:       1ADC9F5249D3F41980AD86B13C1DB646BB1AB41F
Authority key identifier: FC:0F:0B:AA:A7:91:BC:20:BB:92:36:3E:D7:04:50:B3:EA:08:AB:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/323830343a3261633a3a2f33322d3634203d3e203238333030.roa
Signing time:             Thu 23 Mar 2023 19:40:13 +0000
ROA not before:           Thu 23 Mar 2023 19:35:13 +0000
ROA not after:            Thu 21 Mar 2024 19:40:13 +0000
asID:                     28300
IP address blocks:        2804:2ac::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:dc:9f:52:49:d3:f4:19:80:ad:86:b1:3c:1d:b6:46:bb:1a:b4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E
        Validity
            Not Before: Mar 23 19:35:13 2023 GMT
            Not After : Mar 21 19:40:13 2024 GMT
        Subject: CN=D62CBFFCF6F4991B658DC3FF489B2E26C5A9FB90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:42:38:02:da:9a:bc:e7:f6:9e:f7:2b:eb:
                    c7:51:05:a6:66:a7:50:aa:d2:f3:d3:8e:1e:0a:5c:
                    d1:0f:54:3d:ad:da:51:5a:6f:b4:d8:a3:78:af:fa:
                    a7:06:cd:29:1d:ce:38:aa:36:a0:fd:13:b8:4a:5b:
                    a3:b5:3b:e7:81:42:dd:85:b1:3a:ea:54:c7:1e:d4:
                    4f:ff:30:cf:71:e2:b3:2b:61:8b:ab:7a:9d:30:c1:
                    bd:58:e9:ef:5e:26:4c:8a:6e:cc:12:c7:3b:a8:21:
                    9d:5d:a4:31:31:d6:06:ea:06:ed:17:79:05:3a:35:
                    68:a4:99:3c:2f:63:6e:e5:83:c7:b9:9b:73:7e:e8:
                    25:6a:d7:79:c8:58:86:ef:0a:e9:30:67:88:5a:94:
                    11:b9:0f:05:dd:3d:55:86:be:96:d4:12:e4:7c:4f:
                    00:2e:a9:51:2a:85:6b:8e:4d:7f:d7:93:aa:65:d3:
                    3d:95:5f:c3:49:e6:e6:bf:12:45:25:3d:61:81:7f:
                    dc:5c:b3:b3:95:b2:b8:a5:45:94:f1:a1:02:c7:5f:
                    d2:da:37:21:12:5b:4d:13:cf:5e:29:5f:05:29:5a:
                    3b:27:5f:98:25:a0:e0:30:a5:14:ed:6e:fb:61:27:
                    03:d8:a5:43:66:e0:b6:a8:ad:c9:77:54:c1:cc:18:
                    ec:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2C:BF:FC:F6:F4:99:1B:65:8D:C3:FF:48:9B:2E:26:C5:A9:FB:90
            X509v3 Authority Key Identifier:
                keyid:FC:0F:0B:AA:A7:91:BC:20:BB:92:36:3E:D7:04:50:B3:EA:08:AB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/323830343a3261633a3a2f33322d3634203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         d8:e9:b8:6f:66:01:20:9f:59:ca:c8:ee:63:4e:7b:89:d8:3c:
         bd:7c:58:c2:4c:08:1c:88:99:11:23:d5:df:f0:3e:62:2b:b7:
         cf:69:c1:5c:ad:b7:26:69:ac:72:65:e6:27:8d:a0:cd:ea:f7:
         c0:f6:7e:03:60:bc:62:66:28:55:c8:e5:e9:4c:fd:04:1d:91:
         7c:95:15:fc:e4:c2:51:d5:52:bc:da:35:30:ee:35:e5:22:24:
         6d:db:48:fc:2d:cd:43:9a:9b:42:6c:f5:9c:80:49:2e:58:44:
         7e:20:a9:70:44:97:6a:fd:8a:fd:6a:27:65:01:b8:10:07:0e:
         5b:33:db:03:32:fa:59:ab:2a:dd:7a:b8:a1:0e:7d:80:1c:75:
         5e:2b:4c:13:34:af:5b:1b:6c:8e:96:36:12:2a:f2:a0:8b:19:
         f5:42:bd:87:32:2d:eb:3f:f4:dd:76:72:be:c0:00:4b:22:98:
         ca:ed:ca:c9:81:bd:34:99:1a:f4:9a:ea:72:6a:93:f0:c6:ba:
         87:6a:d3:e5:b1:51:83:18:c4:e0:e3:0b:d6:f6:2c:a0:57:17:
         9d:47:ba:b3:a1:53:39:18:df:40:c9:51:f8:6f:e1:61:8c:8e:
         da:ad:3c:2b:43:90:50:7b:74:94:a2:8e:37:fa:17:a9:ba:ff:
         cc:07:db:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----