Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a613030303a3a2f33352d3335203d3e20323632363131.roa
File:                     323830343a326663383a613030303a3a2f33352d3335203d3e20323632363131.roa (raw, json)
Hash identifier:          Tnc5BGPepSBVWgHLBHpghTMFhWcOPrnrGDV5TQpYSS4=
Subject key identifier:   8C:6F:7E:23:46:AD:EA:44:AA:89:75:DC:C3:05:A7:BB:96:45:05:19
Certificate issuer:       /CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
Certificate serial:       76B424FFE0329431773761D79A51F935EF8A73D1
Authority key identifier: AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a613030303a3a2f33352d3335203d3e20323632363131.roa
Signing time:             Fri 11 Aug 2023 11:30:00 +0000
ROA not before:           Fri 11 Aug 2023 11:25:00 +0000
ROA not after:            Fri 09 Aug 2024 11:30:00 +0000
asID:                     262611
IP address blocks:        2804:2fc8:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b4:24:ff:e0:32:94:31:77:37:61:d7:9a:51:f9:35:ef:8a:73:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
        Validity
            Not Before: Aug 11 11:25:00 2023 GMT
            Not After : Aug  9 11:30:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:41:65:ef:c0:76:33:dc:22:ed:a6:93:15:7c:
                    e0:0b:fe:ca:aa:ea:a5:71:f1:6e:33:ce:e2:29:68:
                    24:6c:b4:78:45:50:19:d6:a5:ca:9e:45:da:47:7b:
                    6b:b2:1a:c7:97:45:4f:1d:67:26:ae:27:2c:66:a2:
                    05:fc:e1:19:0a:74:50:0e:e2:de:16:78:ea:37:8a:
                    13:ae:5f:4b:4e:28:8e:13:69:24:bb:13:55:c2:97:
                    9a:30:28:71:41:e1:37:d7:cc:2a:64:69:0e:60:1f:
                    fe:48:1b:65:74:e1:73:f1:c7:14:2a:63:47:d8:85:
                    98:f8:ee:e0:c5:a2:3f:7a:49:58:a8:6d:b2:9d:de:
                    2f:6f:a9:dc:bd:74:ea:49:8f:2c:24:00:84:ce:bc:
                    69:76:e6:b8:d9:d9:01:90:0b:65:09:36:0f:d9:d8:
                    d0:9e:83:b7:76:28:af:d3:fd:91:93:9b:6d:8d:52:
                    ed:c0:4f:4d:b0:c5:62:22:eb:f4:95:6b:7c:fa:8b:
                    e7:61:0d:14:ce:4d:65:21:33:fc:5b:21:cd:97:fc:
                    f7:63:15:6b:7c:bd:91:69:67:50:45:30:38:e3:fb:
                    1f:da:01:b9:fa:b7:ca:99:28:f6:9d:e5:2c:39:ba:
                    2d:d6:df:a9:8b:38:52:bd:f6:b7:57:c6:b7:88:e2:
                    4c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6F:7E:23:46:AD:EA:44:AA:89:75:DC:C3:05:A7:BB:96:45:05:19
            X509v3 Authority Key Identifier:
                keyid:AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a613030303a3a2f33352d3335203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fc8:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         10:07:7c:23:e2:a1:e8:33:3f:de:3a:fd:f7:ec:51:21:bb:c8:
         0b:aa:04:42:3f:bc:b1:cc:65:05:db:2c:68:6a:a3:8b:67:90:
         68:99:04:0e:70:ef:10:95:38:d9:51:0a:e8:eb:02:6a:3a:a2:
         66:29:bf:ba:a9:bd:27:f4:d1:0a:47:b0:bd:d3:aa:3d:94:23:
         b3:9d:d9:9e:fb:e9:d8:38:c3:eb:ed:20:d4:31:e9:2c:6f:50:
         ba:28:93:c9:9a:62:a5:c6:5b:46:b2:06:de:9c:7f:1c:a9:b2:
         80:09:d3:5d:37:32:2d:17:d5:fd:85:87:43:0a:42:c2:13:87:
         01:15:9f:c2:97:a2:9d:3d:67:a7:8b:61:db:48:43:c5:8a:c6:
         bc:62:56:e3:66:02:47:03:b8:0e:59:ed:b8:8a:3b:16:23:79:
         72:ac:b0:77:93:b2:6a:1b:18:09:e4:70:6f:80:bc:27:08:ea:
         f4:b4:23:06:61:85:cd:0d:5e:22:80:98:ff:e0:e4:f0:6f:65:
         aa:09:9f:a3:80:e9:a4:66:68:a6:a1:ff:55:61:8d:dc:1e:c6:
         a4:15:56:5a:91:da:b6:50:44:28:27:e8:ca:de:d2:45:30:89:
         78:f0:33:3c:95:fc:a2:be:5e:e9:2b:81:a0:48:83:34:30:b5:
         a3:e6:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----