Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a323030303a3a2f33352d3335203d3e20323632363131.roa
File:                     323830343a326663383a323030303a3a2f33352d3335203d3e20323632363131.roa (raw, json)
Hash identifier:          V/5cpc5C3QnSX8aJe13uHUUPhWW0wGj9wuVgozK6bDQ=
Subject key identifier:   F0:81:F1:04:D4:16:43:36:E4:CE:79:16:4F:F8:A1:13:C4:CF:63:FC
Certificate issuer:       /CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
Certificate serial:       693B504FBC793E26F644DFD1BEC67968B6DC60BE
Authority key identifier: AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a323030303a3a2f33352d3335203d3e20323632363131.roa
Signing time:             Fri 11 Aug 2023 11:30:01 +0000
ROA not before:           Fri 11 Aug 2023 11:25:01 +0000
ROA not after:            Fri 09 Aug 2024 11:30:01 +0000
asID:                     262611
IP address blocks:        2804:2fc8:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:3b:50:4f:bc:79:3e:26:f6:44:df:d1:be:c6:79:68:b6:dc:60:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
        Validity
            Not Before: Aug 11 11:25:01 2023 GMT
            Not After : Aug  9 11:30:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:17:4d:0f:eb:ea:04:eb:1a:4f:e5:d7:71:e5:
                    30:c4:5c:11:34:2e:77:99:90:15:d4:77:d6:a9:ed:
                    fe:2a:f4:c8:66:4d:5c:b8:21:1b:08:6b:19:f8:ed:
                    7a:84:7e:bf:cd:18:3f:57:2b:9c:8d:0b:58:40:c4:
                    d3:87:45:51:07:f9:54:0e:8c:2c:09:99:a2:0c:33:
                    e2:5e:c9:67:3f:e6:9e:29:2f:2d:68:1e:29:f6:4a:
                    c8:02:08:7e:22:10:45:ef:de:c4:01:6a:83:39:9a:
                    fe:cd:b8:7d:98:76:11:8b:b8:0c:5c:00:77:ec:bc:
                    3b:64:4a:bd:6c:35:a6:2a:ce:2e:86:f4:5c:ba:6a:
                    98:6e:4c:82:76:4e:71:67:a9:a2:f9:ad:6c:ef:e7:
                    16:6e:82:f0:9b:d6:6c:74:0b:dd:3e:f3:a3:f3:ab:
                    e5:3c:4b:9f:00:e7:1b:04:1b:0d:6f:92:0f:58:d9:
                    d4:b1:41:df:f9:e4:cb:d0:9c:38:44:a5:f4:09:7f:
                    b6:6e:e8:df:ee:20:c5:e3:8d:b1:bb:0d:db:3b:47:
                    d7:23:45:3d:24:d5:6c:14:bf:83:9a:61:fa:9f:86:
                    ce:75:d3:cb:7c:04:3d:d4:69:ef:27:35:21:02:fa:
                    16:3a:55:b4:e6:51:36:73:fa:bb:9c:bc:78:da:79:
                    85:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:81:F1:04:D4:16:43:36:E4:CE:79:16:4F:F8:A1:13:C4:CF:63:FC
            X509v3 Authority Key Identifier:
                keyid:AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a323030303a3a2f33352d3335203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fc8:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         34:9a:23:6e:32:21:f2:59:26:08:ea:92:42:ac:bc:67:5f:47:
         ff:47:18:18:c1:ec:7f:c0:3b:a7:30:fb:92:51:42:d6:31:db:
         2f:5d:e9:85:a8:dd:12:89:df:83:38:d7:e3:03:31:1d:73:2f:
         69:a8:77:14:5c:19:d9:85:cd:62:2f:e7:bf:29:85:ed:09:02:
         e7:08:27:fd:21:0b:ac:9f:b7:57:56:f9:d5:80:ed:b4:f1:68:
         ed:e7:eb:14:29:09:c7:c8:8f:76:7f:82:b3:f9:ba:92:0d:eb:
         65:db:8c:0f:b1:2f:f7:f7:0b:7b:ff:9e:97:a8:0d:6f:da:32:
         e8:e2:2b:96:4c:20:ea:83:dc:3d:fd:ed:2f:9a:25:af:da:0d:
         73:70:0f:11:3b:89:d3:c3:30:08:22:6d:54:89:8d:27:8f:39:
         a7:ba:b2:1d:19:26:27:eb:91:28:ef:ee:b0:05:70:84:ea:da:
         a3:79:87:18:b9:87:6b:4c:d3:54:81:c1:8f:97:4b:6e:dd:bd:
         af:7c:ff:4c:fe:e9:46:c4:63:c9:90:81:a6:b3:bf:e4:4a:87:
         8b:c6:f5:57:f5:c9:b0:49:88:ce:02:2f:ad:e5:3c:7e:5b:af:
         21:7c:59:f7:4a:ab:d9:fb:19:04:d0:90:d7:7a:4f:7f:c0:ad:
         6e:84:0c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----