Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/323830343a353237303a3a2f33322d3332203d3e20323638353138.roa
File:                     323830343a353237303a3a2f33322d3332203d3e20323638353138.roa (raw, json)
Hash identifier:          NaEOefaNt1vaeUHDGFhvhzppnEuHADEoLUFk79SaAU4=
Subject key identifier:   47:CC:D9:2D:81:3A:1F:46:F5:79:09:3E:00:B5:2A:43:75:5C:D5:73
Certificate issuer:       /CN=41CC1149A395221179532F4A07FA147494164BDB
Certificate serial:       18E55E484DE29D2C5EAAAED0662ADE9FA9D4F2B6
Authority key identifier: 41:CC:11:49:A3:95:22:11:79:53:2F:4A:07:FA:14:74:94:16:4B:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41CC1149A395221179532F4A07FA147494164BDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/323830343a353237303a3a2f33322d3332203d3e20323638353138.roa
Signing time:             Mon 24 Jul 2023 13:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:55:00 +0000
ROA not after:            Mon 22 Jul 2024 13:00:00 +0000
asID:                     268518
IP address blocks:        2804:5270::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e5:5e:48:4d:e2:9d:2c:5e:aa:ae:d0:66:2a:de:9f:a9:d4:f2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41CC1149A395221179532F4A07FA147494164BDB
        Validity
            Not Before: Jul 24 12:55:00 2023 GMT
            Not After : Jul 22 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:3c:87:f3:94:22:11:86:02:c1:76:72:ce:
                    15:75:78:1b:87:c9:e4:11:ae:49:6d:79:13:c1:1e:
                    bc:6a:b9:0b:b0:90:01:b4:06:9b:39:8d:68:5a:c1:
                    4f:8a:cd:ef:6e:1e:06:d7:76:7c:d7:a5:94:55:e7:
                    ea:66:42:ba:de:03:7a:d7:3f:d0:e8:49:6c:ba:07:
                    5f:26:a1:05:05:39:e4:bc:8d:4a:9c:a0:c5:bc:1f:
                    ea:b2:17:ad:77:05:37:32:6b:da:09:8d:a3:36:55:
                    79:02:85:c8:5c:a4:1c:79:68:00:6c:42:62:4a:94:
                    b0:b5:10:f5:92:b3:43:52:c6:ef:cc:47:6d:4c:13:
                    d3:dd:9e:60:1c:69:8a:16:68:9f:55:4f:1b:0d:8a:
                    d6:42:62:e5:ee:a2:08:25:d2:c5:80:fa:67:31:0e:
                    16:b9:b7:0b:a7:68:2c:ab:77:b0:67:a8:e1:f4:e8:
                    7e:23:57:94:27:1d:de:72:6e:9b:94:2d:9f:6b:94:
                    26:de:79:72:9f:8d:0f:2d:a2:17:de:c1:56:a2:b9:
                    00:bb:60:6b:a0:ed:52:d2:d7:bc:0a:a8:ec:5b:11:
                    3e:b0:71:4b:1a:29:35:03:33:ff:ba:43:88:da:34:
                    4c:e8:d6:08:db:ed:b8:9b:67:5f:b6:35:60:6b:9f:
                    db:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CC:D9:2D:81:3A:1F:46:F5:79:09:3E:00:B5:2A:43:75:5C:D5:73
            X509v3 Authority Key Identifier:
                keyid:41:CC:11:49:A3:95:22:11:79:53:2F:4A:07:FA:14:74:94:16:4B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/41CC1149A395221179532F4A07FA147494164BDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41CC1149A395221179532F4A07FA147494164BDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/323830343a353237303a3a2f33322d3332203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5270::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:14:26:a6:52:b6:61:22:e1:c1:d3:51:71:18:55:bc:c6:e9:
         0c:59:52:d2:f4:a9:92:50:7c:9f:95:37:e7:18:d2:f8:18:c6:
         59:19:e5:2b:5b:9d:d4:be:18:c5:0d:f4:80:af:c9:45:2f:8d:
         b2:13:01:2d:93:77:39:0d:68:d7:ba:48:e5:c7:d4:ba:9c:f9:
         0c:cc:a3:85:58:66:66:40:cd:9d:4e:42:d4:b4:75:c8:53:66:
         1a:3d:b0:98:ed:43:17:94:39:26:56:44:ab:51:51:6b:0e:cf:
         a4:a9:16:23:f2:e0:ec:dc:d2:56:08:d2:da:e7:7e:ae:64:7c:
         55:7d:f5:4b:ec:bf:2e:91:50:fd:2f:04:69:fd:1c:69:38:27:
         a5:31:d2:d1:9e:85:d5:ec:84:69:2d:74:64:11:ea:c1:c5:11:
         ce:c6:fb:8c:bf:b5:35:16:01:18:05:0a:29:97:c9:21:f6:66:
         01:e3:66:18:0d:70:b3:d1:69:2c:60:a4:88:ce:b8:3c:a6:a8:
         58:62:ed:48:93:59:fb:a1:5d:fd:0c:37:6b:6d:b8:b0:58:fd:
         39:b0:f9:dd:ab:8e:ea:eb:ee:fc:62:e4:28:4a:ba:91:91:a7:
         55:ee:16:86:48:ea:5a:fb:2a:e3:27:3a:65:d1:92:df:af:2a:
         1b:77:4a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----