Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/0/323830343a353138383a3a2f33322d3334203d3e20323638343538.roa
File:                     323830343a353138383a3a2f33322d3334203d3e20323638343538.roa (raw, json)
Hash identifier:          Kh7OV2hvwwnhY2UhAp1zdAB1kBRdlKGQD80JWYgNkOs=
Subject key identifier:   B2:F0:30:0C:F1:E3:33:12:D1:3C:32:07:0D:C4:BC:CB:E4:8B:20:F5
Certificate issuer:       /CN=A15D1076F82853139FB51345CAEBDCF33166789B
Certificate serial:       42427E777DC4D6ADEE79C9872474B31EDEC66DE5
Authority key identifier: A1:5D:10:76:F8:28:53:13:9F:B5:13:45:CA:EB:DC:F3:31:66:78:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A15D1076F82853139FB51345CAEBDCF33166789B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/0/323830343a353138383a3a2f33322d3334203d3e20323638343538.roa
Signing time:             Tue 15 Aug 2023 20:00:25 +0000
ROA not before:           Tue 15 Aug 2023 19:55:25 +0000
ROA not after:            Tue 13 Aug 2024 20:00:25 +0000
asID:                     268458
IP address blocks:        2804:5188::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:42:7e:77:7d:c4:d6:ad:ee:79:c9:87:24:74:b3:1e:de:c6:6d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A15D1076F82853139FB51345CAEBDCF33166789B
        Validity
            Not Before: Aug 15 19:55:25 2023 GMT
            Not After : Aug 13 20:00:25 2024 GMT
        Subject: CN=B2F0300CF1E33312D13C32070DC4BCCBE48B20F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:9d:a4:d6:37:5a:05:40:e2:a3:e6:43:ad:
                    2b:68:8d:57:74:dd:2c:58:a9:bb:4d:af:51:ad:2f:
                    67:59:cc:f5:15:69:a2:8e:cd:92:31:aa:58:39:6d:
                    7b:8c:2e:0c:5a:f8:5c:4f:0b:21:24:9e:4d:80:8b:
                    9b:df:f9:c6:83:39:e2:6a:01:0c:b4:7a:8f:ed:b4:
                    01:1a:0c:35:43:64:c6:f0:d8:88:e7:85:d5:e9:32:
                    4b:bb:84:ef:88:5e:c9:29:84:8e:03:b8:46:18:f6:
                    ec:3d:1d:0a:b7:74:a2:33:65:9a:ee:7b:31:84:d0:
                    f4:25:ec:89:0f:bb:dd:73:6d:09:50:cd:88:bd:19:
                    04:71:b7:b0:f9:d3:db:b0:9f:19:99:15:31:e5:ee:
                    b8:f7:3a:25:82:45:44:8e:85:33:65:18:a6:83:27:
                    8a:c0:e6:47:b6:3a:20:05:55:ea:1e:d7:61:bb:bf:
                    25:dd:c8:30:52:c1:23:52:e0:ca:61:bf:02:84:2c:
                    d3:ec:07:a6:5d:0e:d6:54:92:96:77:50:42:13:f1:
                    25:b3:9e:90:65:f2:fc:42:85:fc:d0:db:02:77:d5:
                    d6:cf:f9:8d:25:70:d1:bd:fb:2d:d2:93:1f:20:d2:
                    4f:c6:ab:40:9c:dd:86:94:70:d7:b8:f5:79:87:b6:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F0:30:0C:F1:E3:33:12:D1:3C:32:07:0D:C4:BC:CB:E4:8B:20:F5
            X509v3 Authority Key Identifier:
                keyid:A1:5D:10:76:F8:28:53:13:9F:B5:13:45:CA:EB:DC:F3:31:66:78:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/0/A15D1076F82853139FB51345CAEBDCF33166789B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A15D1076F82853139FB51345CAEBDCF33166789B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/0/323830343a353138383a3a2f33322d3334203d3e20323638343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5188::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:42:8d:30:b7:22:fd:8e:93:ce:39:e3:04:14:3e:ff:4d:a5:
         8f:ec:63:1f:87:c0:7a:0c:75:6d:7e:79:64:3d:8f:8f:3c:bc:
         23:7b:c3:3f:c2:8b:60:74:1e:67:88:f3:71:0c:46:74:c0:4b:
         91:23:70:32:04:84:e4:af:50:d8:e8:7f:1b:25:b5:8a:67:4f:
         8a:3f:61:e2:7b:8a:57:48:bb:a3:26:db:fd:7a:f0:60:84:12:
         7b:48:7b:a0:4d:40:b2:10:4b:bd:9b:d8:d0:f6:01:09:38:bd:
         24:06:ec:4d:a7:4c:c8:29:d0:1f:a6:be:bf:fa:9b:aa:aa:4b:
         12:23:04:dd:e4:5c:8c:50:dc:26:81:f5:71:eb:0a:4f:1e:1f:
         76:90:d4:81:1f:c6:21:4d:98:ee:46:6d:4e:22:8e:48:73:9f:
         62:79:a8:e2:9f:40:c6:97:37:50:fd:07:fb:93:8c:3b:11:f3:
         0e:22:d7:54:92:71:7a:bb:81:31:15:b3:0c:d4:0b:07:d6:13:
         c8:a2:ae:0b:1d:11:fa:c5:f5:e4:24:b5:e0:1d:0e:8e:66:ab:
         0e:34:4a:09:81:a6:eb:40:6d:49:fb:6f:1a:49:b8:7e:ea:7b:
         d7:15:ba:c9:dd:d7:91:2a:04:3b:9d:80:80:15:4c:56:ec:fd:
         74:dd:b2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----