Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/323830343a323761343a3a2f33322d3332203d3e20323633393134.roa
File:                     323830343a323761343a3a2f33322d3332203d3e20323633393134.roa (raw, json)
Hash identifier:          PHHhiWSGu2t8dOqQo9uDOoydR3wSIxbKUh118ZMVW0M=
Subject key identifier:   79:A2:13:54:3E:62:8E:FC:94:A0:64:B7:9F:F8:BC:46:BD:F6:AE:76
Certificate issuer:       /CN=7D024D482794E0E96397A274EC4071AD93013B55
Certificate serial:       4900035DADD92F509F08AA68F96691EBC6726A28
Authority key identifier: 7D:02:4D:48:27:94:E0:E9:63:97:A2:74:EC:40:71:AD:93:01:3B:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D024D482794E0E96397A274EC4071AD93013B55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/323830343a323761343a3a2f33322d3332203d3e20323633393134.roa
Signing time:             Mon 15 May 2023 20:56:31 +0000
ROA not before:           Mon 15 May 2023 20:51:31 +0000
ROA not after:            Mon 13 May 2024 20:56:31 +0000
asID:                     263914
IP address blocks:        2804:27a4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:00:03:5d:ad:d9:2f:50:9f:08:aa:68:f9:66:91:eb:c6:72:6a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D024D482794E0E96397A274EC4071AD93013B55
        Validity
            Not Before: May 15 20:51:31 2023 GMT
            Not After : May 13 20:56:31 2024 GMT
        Subject: CN=79A213543E628EFC94A064B79FF8BC46BDF6AE76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:6d:81:c8:6f:46:2b:06:66:44:bb:c4:44:
                    49:07:11:01:e7:39:30:7a:07:51:2b:f3:db:67:de:
                    12:96:1c:88:4b:2e:3f:f2:71:79:ed:56:5c:76:5f:
                    99:f3:85:61:24:ac:eb:7b:df:51:13:93:6c:a1:5f:
                    6f:48:69:65:e7:fd:6e:39:27:75:d1:63:ac:cb:ea:
                    2e:91:04:2f:a5:0a:df:02:96:7c:15:b0:85:6f:2d:
                    4c:9d:f3:12:97:e3:af:4c:d5:b8:97:3c:a4:cf:77:
                    e6:70:9b:14:b5:46:7a:ae:c0:03:4b:27:ad:8f:a0:
                    12:a4:8c:b5:93:17:54:4f:82:8b:ad:f0:df:b4:e7:
                    66:47:09:83:7d:3a:fb:18:94:d7:37:96:66:30:86:
                    c0:33:0e:7a:6c:a7:85:f9:76:91:49:2e:bb:d1:4b:
                    8c:b1:bf:36:2e:c6:a5:4a:58:73:d0:c4:6d:4d:e6:
                    fd:a9:a7:dd:3c:a9:1b:44:cf:19:96:55:85:9f:1d:
                    a0:58:df:09:26:d6:09:0a:cf:a0:f6:28:d2:64:64:
                    93:2f:fd:f2:79:1e:22:25:38:fe:d0:12:04:0e:42:
                    8f:8c:5e:c9:0a:c1:46:16:5c:96:59:62:85:9c:14:
                    0e:80:03:35:47:e9:54:5e:8a:5f:02:b5:00:9b:77:
                    86:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A2:13:54:3E:62:8E:FC:94:A0:64:B7:9F:F8:BC:46:BD:F6:AE:76
            X509v3 Authority Key Identifier:
                keyid:7D:02:4D:48:27:94:E0:E9:63:97:A2:74:EC:40:71:AD:93:01:3B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/7D024D482794E0E96397A274EC4071AD93013B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D024D482794E0E96397A274EC4071AD93013B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/323830343a323761343a3a2f33322d3332203d3e20323633393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:06:ad:9b:e8:cc:1e:f9:cf:56:39:05:83:66:6a:39:eb:76:
         d6:67:55:9c:d1:ee:86:cc:6d:9c:ca:4c:b4:ad:f2:b6:22:e7:
         34:a7:e3:e5:05:79:93:47:56:61:90:32:62:fa:e5:46:b3:61:
         90:61:f0:9b:eb:c8:09:03:14:b0:51:f7:51:98:27:99:00:ee:
         b9:8c:3b:45:77:2f:20:ee:05:32:f3:3d:7b:08:75:19:20:e5:
         c1:e8:61:2b:89:37:d7:a8:ac:c3:f2:f9:f8:8a:3e:ad:49:33:
         e5:7a:44:57:c0:95:58:d6:63:46:93:14:c8:31:0e:bc:d8:c5:
         d0:9c:ae:bb:9a:16:f3:0c:6b:43:e0:d3:ef:76:60:0b:18:7c:
         b4:37:b6:ca:37:31:26:a3:10:8c:6f:03:2d:04:73:e3:c9:37:
         d9:f0:5f:06:2a:34:69:89:4d:dd:e0:c9:2d:0c:83:84:a3:89:
         3a:89:32:51:59:db:29:09:af:0e:f0:52:ff:ce:16:ec:a7:4a:
         76:b5:32:4c:e1:ee:9d:fa:40:e0:2d:ac:77:4c:ed:8e:9b:95:
         f3:bf:e7:c5:5f:24:da:65:52:e9:c6:fb:8f:41:0c:f0:ab:4d:
         1a:fc:31:f0:2f:27:5a:11:9b:08:a5:3d:45:dc:4e:84:50:1e:
         99:f7:8e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----