Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a343030303a3a2f33352d3335203d3e20323632363131.roa
File:                     323830343a326663383a343030303a3a2f33352d3335203d3e20323632363131.roa (raw, json)
Hash identifier:          KudqKN2SHB3A+qS2MKyw1WAUETkhHreWUkNSWG98fn4=
Subject key identifier:   06:00:75:53:58:2B:53:F4:4E:34:79:1D:2F:78:EB:54:D2:3B:65:D2
Certificate issuer:       /CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
Certificate serial:       37207ACEEA3C76391115F76BCF89AAE2F2EE06F2
Authority key identifier: AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a343030303a3a2f33352d3335203d3e20323632363131.roa
Signing time:             Fri 11 Aug 2023 11:30:01 +0000
ROA not before:           Fri 11 Aug 2023 11:25:01 +0000
ROA not after:            Fri 09 Aug 2024 11:30:01 +0000
asID:                     262611
IP address blocks:        2804:2fc8:4000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:20:7a:ce:ea:3c:76:39:11:15:f7:6b:cf:89:aa:e2:f2:ee:06:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
        Validity
            Not Before: Aug 11 11:25:01 2023 GMT
            Not After : Aug  9 11:30:01 2024 GMT
        Subject: CN=3082010A0282010100B57849ACF35C4FDA51C8AFFC36DC076353BE85CB6DB95FFB1B26A98870422EE98B5B4F03C19B21F439503E08BB58D6E0920193A4F1FBB655815650049AC4E48CBCAF2812F5B006E9260BB1B598A923850FDF4C8C6C4ED91D299703C96419E18369D3CF857D4A9D4E4726AF197712C8056A2281A1FE5C66FB4766DF1E4A58F48C53E2E1BAE25141152E8B56C0EA22E03789AD60EF0F8927E9A2F693AAB5557EC4CA002D0F841F9CCCAD9A5A5327BDF431CCAC223BC031740A73E6C36956A3CC5B6D96724F1F0A713B1EB3378D3F4EDF0FE688C53956228BA343CA4DAE4CBB5FC5B0ADE61FE7C84F049CDF11FE6DA33F616988D8FE56F7C72F1AD9F66A692402790203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:49:ac:f3:5c:4f:da:51:c8:af:fc:36:dc:
                    07:63:53:be:85:cb:6d:b9:5f:fb:1b:26:a9:88:70:
                    42:2e:e9:8b:5b:4f:03:c1:9b:21:f4:39:50:3e:08:
                    bb:58:d6:e0:92:01:93:a4:f1:fb:b6:55:81:56:50:
                    04:9a:c4:e4:8c:bc:af:28:12:f5:b0:06:e9:26:0b:
                    b1:b5:98:a9:23:85:0f:df:4c:8c:6c:4e:d9:1d:29:
                    97:03:c9:64:19:e1:83:69:d3:cf:85:7d:4a:9d:4e:
                    47:26:af:19:77:12:c8:05:6a:22:81:a1:fe:5c:66:
                    fb:47:66:df:1e:4a:58:f4:8c:53:e2:e1:ba:e2:51:
                    41:15:2e:8b:56:c0:ea:22:e0:37:89:ad:60:ef:0f:
                    89:27:e9:a2:f6:93:aa:b5:55:7e:c4:ca:00:2d:0f:
                    84:1f:9c:cc:ad:9a:5a:53:27:bd:f4:31:cc:ac:22:
                    3b:c0:31:74:0a:73:e6:c3:69:56:a3:cc:5b:6d:96:
                    72:4f:1f:0a:71:3b:1e:b3:37:8d:3f:4e:df:0f:e6:
                    88:c5:39:56:22:8b:a3:43:ca:4d:ae:4c:bb:5f:c5:
                    b0:ad:e6:1f:e7:c8:4f:04:9c:df:11:fe:6d:a3:3f:
                    61:69:88:d8:fe:56:f7:c7:2f:1a:d9:f6:6a:69:24:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:00:75:53:58:2B:53:F4:4E:34:79:1D:2F:78:EB:54:D2:3B:65:D2
            X509v3 Authority Key Identifier:
                keyid:AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a343030303a3a2f33352d3335203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fc8:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         aa:ec:23:f6:5d:6a:0f:6e:9a:67:21:3e:04:f7:ca:a4:30:d4:
         8d:32:f9:8b:72:89:1b:88:d3:e7:b9:b4:a9:cb:32:41:64:d1:
         e8:09:fe:ab:82:fd:33:bb:10:4c:f6:36:0c:eb:a7:2a:d0:78:
         da:2b:23:41:3c:9c:4c:e5:fa:44:63:0b:34:0c:52:b3:b1:53:
         c6:5c:a0:9d:ea:e1:4d:8f:d3:f0:1e:6c:ce:f7:61:bf:fb:7b:
         f4:e8:d6:68:ea:70:31:57:ac:ba:42:3b:2f:16:11:73:10:68:
         24:60:10:5b:09:c8:5a:db:66:73:29:da:37:b2:0a:b3:38:b1:
         9a:79:b9:98:3c:24:f8:9a:10:43:de:96:eb:1b:d1:64:03:9d:
         fe:7f:e4:dd:3c:95:d1:dc:5f:1a:36:5c:ec:09:04:cd:eb:f9:
         d0:52:90:9d:dd:1d:bc:75:13:99:92:c0:34:3f:67:85:0e:ca:
         4c:54:5f:48:e3:c3:29:1e:35:32:d8:68:33:08:0c:2f:53:25:
         4e:b4:4a:b1:f8:bd:c2:66:18:89:5d:7e:07:8c:8f:b1:f2:73:
         f8:cf:63:a5:7e:74:d6:26:73:d6:73:5a:5f:ca:8e:d3:06:7a:
         e1:c0:1e:5b:dd:09:8b:76:73:35:dc:2e:23:7f:27:52:6f:47:
         78:53:32:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----