Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/323830343a356664633a3a2f33322d3332203d3e20323639313238.roa
File:                     323830343a356664633a3a2f33322d3332203d3e20323639313238.roa (raw, json)
Hash identifier:          q7f1uYsDW+bamJvui+SIAQ+lqgaR3/TKydekmPxXYxs=
Subject key identifier:   1E:81:13:9C:DD:FE:1A:39:E8:58:C6:64:C4:0D:4C:A4:F2:78:21:77
Certificate issuer:       /CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
Certificate serial:       70DBFC37C568DD27D6620C93935A33E8A3954D02
Authority key identifier: BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/323830343a356664633a3a2f33322d3332203d3e20323639313238.roa
Signing time:             Tue 16 May 2023 02:18:56 +0000
ROA not before:           Tue 16 May 2023 02:13:56 +0000
ROA not after:            Tue 14 May 2024 02:18:56 +0000
asID:                     269128
IP address blocks:        2804:5fdc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:db:fc:37:c5:68:dd:27:d6:62:0c:93:93:5a:33:e8:a3:95:4d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
        Validity
            Not Before: May 16 02:13:56 2023 GMT
            Not After : May 14 02:18:56 2024 GMT
        Subject: CN=1E81139CDDFE1A39E858C664C40D4CA4F2782177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:d2:cc:72:77:0b:af:9d:a7:d9:4b:6a:70:
                    8a:c4:05:16:31:8f:d6:c8:78:52:94:b8:46:68:e3:
                    28:1f:84:62:cc:37:62:d2:5c:2f:bd:78:27:be:e6:
                    3d:2b:30:db:10:d5:98:56:f2:76:4c:20:ab:14:b6:
                    53:ef:7a:1a:41:d6:9d:42:d4:2f:62:03:4d:4a:0a:
                    9a:3a:02:d3:71:b4:19:f7:47:d9:07:6b:d8:f2:41:
                    f1:8d:b8:0b:97:87:40:c3:ef:9c:59:f1:41:9a:4a:
                    ca:41:3c:e8:4b:ad:c5:3b:59:55:87:8e:c6:6a:3f:
                    f2:48:da:7c:f9:2b:c5:c2:af:35:97:38:c4:2d:84:
                    dc:8a:1b:d6:dc:4b:43:db:81:59:c3:43:82:1c:d9:
                    cb:af:1d:7e:1b:92:c7:f8:73:ce:ff:75:9a:2d:a1:
                    2a:9f:e8:98:be:46:f4:24:cf:b1:d7:88:80:48:85:
                    9e:7c:fd:62:4d:d9:dd:b9:6f:03:c7:07:55:70:5c:
                    88:d8:d4:df:e1:d7:07:61:0d:e7:47:43:5c:7d:0c:
                    70:93:90:a5:60:b6:81:da:2d:d5:de:db:06:b9:fd:
                    77:d7:4c:99:2b:17:ff:cf:c9:82:77:38:09:91:7e:
                    81:7a:d9:b5:e0:49:eb:06:e5:74:43:78:92:db:fe:
                    4c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:81:13:9C:DD:FE:1A:39:E8:58:C6:64:C4:0D:4C:A4:F2:78:21:77
            X509v3 Authority Key Identifier:
                keyid:BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/323830343a356664633a3a2f33322d3332203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:bd:88:02:27:6f:19:79:0b:3d:54:13:9f:f4:e6:e2:a3:ed:
         a2:88:41:c9:eb:e7:b8:6b:4a:bb:94:6b:fb:69:7a:b2:af:4c:
         d8:48:4d:53:c1:f6:6c:6d:9c:10:25:18:80:4f:d3:71:64:ed:
         ca:f9:7e:87:27:7e:71:32:4f:cd:8e:78:14:61:98:6b:ae:b9:
         7b:11:28:a5:48:30:9e:44:0d:74:e9:f2:6e:9d:62:00:be:ae:
         21:51:29:a7:0a:4c:4b:bb:8f:76:39:37:58:64:45:60:47:ff:
         b5:28:50:3c:3f:55:7f:2e:93:b6:d1:9c:03:40:88:b3:d5:01:
         00:49:4e:24:3d:f4:91:1c:4c:2d:b7:8e:5f:0f:c0:39:65:83:
         15:47:12:97:7e:91:78:28:6b:52:51:73:11:1d:9a:95:18:ee:
         8b:4e:c2:71:e3:d7:6e:34:c6:de:a5:0c:2e:5d:df:be:e2:f0:
         55:11:8d:0f:1f:f7:4f:7f:72:ab:4d:c9:92:b7:1c:0d:1b:6b:
         f6:18:8e:6a:64:5d:1c:db:8a:39:e3:48:46:ee:b3:7f:a9:19:
         9c:89:9a:31:3e:a4:f9:8e:f6:74:63:74:67:0a:79:06:89:95:
         67:5b:1b:63:46:10:d3:58:b8:65:2a:28:16:0c:88:81:a4:61:
         d1:bb:d2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----