Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a3430303a3a2f34302d3430203d3e20323632363131.roa
File:                     323830343a326663383a3430303a3a2f34302d3430203d3e20323632363131.roa (raw, json)
Hash identifier:          ZZIMhwjYXwQrJ02nbtBalPs3lHV2NSlC1BTuOvsLGDc=
Subject key identifier:   95:B9:29:59:33:02:8D:01:9B:B9:93:80:45:7E:9E:05:8E:06:F2:2D
Certificate issuer:       /CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
Certificate serial:       2621C1E03A7A1AC36F7307DA974A7B1C851FF1C6
Authority key identifier: AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a3430303a3a2f34302d3430203d3e20323632363131.roa
Signing time:             Mon 07 Aug 2023 17:15:28 +0000
ROA not before:           Mon 07 Aug 2023 17:10:28 +0000
ROA not after:            Mon 05 Aug 2024 17:15:28 +0000
asID:                     262611
IP address blocks:        2804:2fc8:400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:21:c1:e0:3a:7a:1a:c3:6f:73:07:da:97:4a:7b:1c:85:1f:f1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
        Validity
            Not Before: Aug  7 17:10:28 2023 GMT
            Not After : Aug  5 17:15:28 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:09:33:87:3a:75:16:98:26:2e:e9:a4:cf:
                    4b:92:40:08:b4:6b:b6:33:e1:6f:26:11:0d:24:91:
                    0f:42:c5:8b:03:89:d1:aa:fa:92:ad:0c:6e:a2:0d:
                    27:fc:69:2b:c3:fe:b5:ba:f3:cd:29:88:3d:d7:b9:
                    40:59:02:4b:12:9d:5b:4f:be:c6:f8:ce:47:31:c6:
                    c7:e2:65:e8:b5:43:54:01:22:91:07:bc:ce:31:f9:
                    19:2b:2e:89:0b:6f:7d:a9:94:68:7f:1e:c9:53:4a:
                    9b:0e:da:41:c6:c5:0b:81:b3:12:c5:ca:13:a4:63:
                    da:a0:a3:e8:96:13:86:75:e7:88:48:df:bf:79:88:
                    41:48:56:69:f5:b5:34:3b:d1:52:a7:7c:32:a6:3b:
                    4a:74:eb:09:f5:46:aa:54:a8:ae:63:af:1f:d1:d1:
                    f7:9a:a6:f4:19:02:b2:e2:25:2f:9f:ea:1b:76:78:
                    61:41:0d:93:df:14:0e:31:81:28:e9:b2:92:0b:77:
                    88:c7:84:04:2f:35:97:04:d2:1e:fa:59:3a:67:c1:
                    14:b3:18:48:ce:4a:e4:9c:72:cc:49:09:ba:da:8b:
                    05:03:3d:a7:c2:a6:cb:fa:4c:93:8b:ff:8c:8e:29:
                    f6:22:55:3a:b4:c7:20:df:13:4a:b7:75:0a:2e:83:
                    e1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B9:29:59:33:02:8D:01:9B:B9:93:80:45:7E:9E:05:8E:06:F2:2D
            X509v3 Authority Key Identifier:
                keyid:AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a3430303a3a2f34302d3430203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fc8:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:81:e6:e6:ce:b4:55:52:95:64:df:54:fe:5d:08:98:57:93:
         d7:46:0d:25:ef:7e:a5:20:07:79:7e:47:ca:73:e9:8f:57:8d:
         90:ad:18:55:15:f7:86:2d:d3:8f:a9:d3:8d:9e:a2:8d:3a:a5:
         48:44:0c:d1:ae:36:ab:50:24:d0:91:92:76:8d:e7:c0:48:f8:
         1f:ee:95:f4:ba:29:11:a6:a0:99:43:b6:64:d5:1c:11:30:7a:
         33:a6:2b:85:2e:4b:dc:60:a7:5e:a2:8d:d2:9f:de:42:33:0e:
         5e:f7:2a:ce:94:b5:47:7f:32:9c:85:12:63:1a:01:dd:1f:06:
         15:50:d7:77:79:c1:58:91:88:a0:27:5b:75:98:d8:a0:3d:d2:
         53:4b:fe:5d:66:b0:94:09:6c:58:e1:8c:5c:b3:e6:0d:89:27:
         59:22:88:67:cf:fd:89:8e:3d:da:8d:8f:49:76:da:96:6d:15:
         f6:54:32:42:c4:9a:60:1b:6a:5c:f6:32:b5:0c:a8:62:c2:dc:
         9c:e4:32:f3:30:41:52:44:ce:6d:7b:24:0c:c0:80:11:48:ca:
         67:61:63:bd:96:b3:2f:74:e8:4f:9b:01:6f:c6:5b:16:93:42:
         95:94:ea:b9:42:f8:1f:b4:26:f2:42:7c:1e:52:fd:10:3e:11:
         16:d5:5a:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----