Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/0/323830343a333332383a3a2f33322d3332203d3e20323635333738.roa
File:                     323830343a333332383a3a2f33322d3332203d3e20323635333738.roa (raw, json)
Hash identifier:          tHHuvA/eK3QzSPVvTebBENN+pObM9P1YQZe8A7ta6tc=
Subject key identifier:   71:20:35:39:19:F2:5C:F8:26:E6:EF:FA:C0:26:3A:70:CA:40:3F:1D
Certificate issuer:       /CN=488250699EA593A12DBCA068B1EB47DFCD0FAC3E
Certificate serial:       7DFF1C6ED1BEBC86AFB62600C71B500358257AD2
Authority key identifier: 48:82:50:69:9E:A5:93:A1:2D:BC:A0:68:B1:EB:47:DF:CD:0F:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/488250699EA593A12DBCA068B1EB47DFCD0FAC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/0/323830343a333332383a3a2f33322d3332203d3e20323635333738.roa
Signing time:             Wed 14 Feb 2024 02:01:28 +0000
ROA not before:           Wed 14 Feb 2024 01:56:28 +0000
ROA not after:            Wed 12 Feb 2025 02:01:28 +0000
asID:                     265378
IP address blocks:        2804:3328::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ff:1c:6e:d1:be:bc:86:af:b6:26:00:c7:1b:50:03:58:25:7a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488250699EA593A12DBCA068B1EB47DFCD0FAC3E
        Validity
            Not Before: Feb 14 01:56:28 2024 GMT
            Not After : Feb 12 02:01:28 2025 GMT
        Subject: CN=7120353919F25CF826E6EFFAC0263A70CA403F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:42:87:41:23:fd:a7:4c:ba:41:70:b1:6a:ab:
                    ee:0b:24:3a:6a:61:36:3d:ba:cb:c9:65:97:d3:ba:
                    21:2d:96:8d:99:07:f6:92:96:34:ac:cd:d1:18:a5:
                    d7:0d:25:d6:d1:65:95:f9:71:e2:80:16:ff:7d:89:
                    b9:5c:61:58:a4:d8:36:65:fe:81:b3:3b:5d:80:1f:
                    df:05:06:93:0b:3b:93:7a:cd:6f:73:05:cc:78:fc:
                    e3:cc:3a:36:a9:8b:43:48:16:f2:7a:99:13:a6:7c:
                    ec:80:c9:7e:09:99:5f:51:b2:7e:b4:19:e0:9e:7d:
                    8c:69:03:8f:d5:19:d6:bc:5b:60:9d:4b:27:d2:ed:
                    2f:fd:e3:2e:1d:47:89:f0:37:9e:b6:0c:65:25:df:
                    ff:d3:dd:5a:9d:4b:ea:98:ae:8a:e9:a5:2f:10:ae:
                    e6:fd:dd:a3:e5:f7:7b:ac:ac:8e:bf:97:5a:29:42:
                    1d:ed:b9:fa:ce:f6:d7:ce:0a:58:74:d8:a2:3f:e5:
                    d8:e1:35:46:f5:8a:ae:7a:ff:e4:c5:cb:87:89:17:
                    0a:a5:e0:d6:82:1a:11:e8:8a:65:49:e7:03:74:8f:
                    65:16:5e:03:c1:ac:ac:db:2b:f7:6b:d4:03:3f:f5:
                    39:78:af:c2:4f:4a:c6:3f:b7:82:1d:bc:3d:64:18:
                    45:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:20:35:39:19:F2:5C:F8:26:E6:EF:FA:C0:26:3A:70:CA:40:3F:1D
            X509v3 Authority Key Identifier:
                keyid:48:82:50:69:9E:A5:93:A1:2D:BC:A0:68:B1:EB:47:DF:CD:0F:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/0/488250699EA593A12DBCA068B1EB47DFCD0FAC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/488250699EA593A12DBCA068B1EB47DFCD0FAC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/0/323830343a333332383a3a2f33322d3332203d3e20323635333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3328::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:9c:3f:89:f2:a1:2e:fe:4f:b0:61:10:82:f8:73:e6:42:8c:
         37:03:df:dc:72:eb:18:17:f2:0b:a2:10:58:68:20:08:1f:b2:
         32:6f:ab:2d:f8:12:01:ad:d1:2b:98:2a:04:08:5d:97:f0:92:
         1c:a6:31:d9:d8:4b:bf:63:6f:d5:b5:06:ad:7c:8f:1c:68:d0:
         a5:ab:07:e2:06:95:7a:1a:06:1a:14:2c:66:85:a5:63:e3:20:
         33:bf:cc:c2:6f:a1:a5:62:8e:19:c5:88:30:25:b1:7a:19:22:
         6c:6c:8a:c9:39:0d:42:e7:1b:e9:09:84:ed:5f:70:99:21:32:
         0a:d0:1d:9b:9c:a9:a4:3e:75:7a:70:52:e4:ad:21:95:fa:81:
         ae:c2:67:e5:a6:64:8f:c8:ea:47:b7:7b:bd:9c:b1:77:7f:9f:
         47:2f:de:b0:2a:91:e6:77:25:67:18:cc:1f:ee:f0:2f:2f:11:
         31:39:f0:84:84:d7:85:b1:ff:d5:33:e9:08:6c:e1:b6:a5:ef:
         8d:e7:e0:22:b0:a4:ef:4c:86:79:a5:ab:56:6e:0e:16:25:d2:
         d8:5a:76:bd:cc:ad:0f:38:77:d4:01:52:69:08:a1:16:bc:2a:
         72:e8:34:77:f7:fa:72:33:39:a2:6f:af:bc:f9:3d:f4:8c:f8:
         24:d0:2d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----