Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/323830343a343865303a3a2f33322d3438203d3e20323637313530.roa
File:                     323830343a343865303a3a2f33322d3438203d3e20323637313530.roa (raw, json)
Hash identifier:          A1MNDDiryyiMwe0PXxoejU2of/uF0d+XI/R2EM7q1Hg=
Subject key identifier:   E2:94:FE:74:23:D9:8C:A5:98:B2:83:7D:5E:BB:EE:54:F5:C7:13:14
Certificate issuer:       /CN=D9CFC9D41E81C6EA15959CAC80AA25673676AEDD
Certificate serial:       22C37BC678F79AC312EC981E94A905AE896D6892
Authority key identifier: D9:CF:C9:D4:1E:81:C6:EA:15:95:9C:AC:80:AA:25:67:36:76:AE:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/323830343a343865303a3a2f33322d3438203d3e20323637313530.roa
Signing time:             Thu 14 Sep 2023 20:56:26 +0000
ROA not before:           Thu 14 Sep 2023 20:51:26 +0000
ROA not after:            Thu 12 Sep 2024 20:56:26 +0000
asID:                     267150
IP address blocks:        2804:48e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c3:7b:c6:78:f7:9a:c3:12:ec:98:1e:94:a9:05:ae:89:6d:68:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9CFC9D41E81C6EA15959CAC80AA25673676AEDD
        Validity
            Not Before: Sep 14 20:51:26 2023 GMT
            Not After : Sep 12 20:56:26 2024 GMT
        Subject: CN=E294FE7423D98CA598B2837D5EBBEE54F5C71314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:59:57:e8:c4:1e:76:e3:d1:b6:35:a4:a0:0a:
                    8e:46:20:c5:0a:f1:7c:8a:f8:1b:78:d7:e5:49:be:
                    b7:4a:2f:b2:8e:5c:0f:d3:fe:a9:a3:52:65:9f:57:
                    3d:b8:da:95:78:31:e3:71:bc:93:ed:67:2f:25:a0:
                    27:97:26:6c:7a:82:d0:51:2f:20:b7:c8:81:7c:63:
                    a0:4d:3e:04:da:e7:86:a2:b9:13:cd:34:1e:ef:79:
                    cd:24:e2:ee:c0:fa:1e:08:d5:1d:54:83:41:5d:b1:
                    52:48:79:c7:41:80:ee:97:c0:8d:4a:1d:fc:a1:3d:
                    87:98:2d:c4:a1:40:1a:39:15:4e:a6:3b:5f:ca:d8:
                    6d:62:ba:24:90:cd:56:08:5f:4f:c7:58:13:90:2c:
                    4c:f5:fb:a9:2d:53:05:07:96:69:b0:bd:7e:2b:db:
                    aa:4d:54:90:b9:54:5b:0d:a2:91:37:9f:99:f6:d8:
                    9f:8c:dc:c8:80:33:4b:46:79:ee:e8:f0:96:0d:01:
                    1c:44:08:6b:1b:b2:96:d8:dd:b6:5f:e7:05:82:a7:
                    10:13:bf:92:ef:de:b9:12:37:bb:b2:f0:0b:36:11:
                    bf:56:9f:65:7f:06:89:22:5e:ab:4f:4d:1a:fa:c1:
                    6c:09:8a:06:02:2a:50:dd:76:39:32:13:fd:cb:32:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:94:FE:74:23:D9:8C:A5:98:B2:83:7D:5E:BB:EE:54:F5:C7:13:14
            X509v3 Authority Key Identifier:
                keyid:D9:CF:C9:D4:1E:81:C6:EA:15:95:9C:AC:80:AA:25:67:36:76:AE:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/323830343a343865303a3a2f33322d3438203d3e20323637313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:38:5b:34:72:64:c8:a3:2f:1f:d5:26:f6:9e:4a:57:b8:67:
         03:f0:b9:23:20:5b:1b:60:ba:99:41:f2:77:38:74:f4:a5:b2:
         6e:1c:5a:7b:e9:5f:ea:9c:1a:b9:49:f8:7c:eb:fe:b1:51:15:
         8a:ea:cc:81:52:28:c3:b7:d2:e8:5b:b3:b8:55:5c:d1:38:36:
         56:17:31:46:e7:0c:63:31:87:48:30:b4:21:7d:d0:55:e2:77:
         c6:f6:88:e8:c2:53:b3:fe:67:2c:0a:6c:b3:6e:d6:b8:4d:10:
         dc:70:a6:b4:2c:d8:9f:56:7e:37:ec:2a:74:15:f9:16:4a:e0:
         f7:6a:b5:47:8c:89:97:0c:15:a6:0d:92:80:2b:cc:56:89:e7:
         0f:06:86:57:d0:76:b7:3e:e4:79:d7:32:ba:bf:50:57:0e:aa:
         16:11:12:b7:9f:2f:d2:5d:c7:eb:a4:99:bf:a9:90:2d:e0:27:
         8d:14:ed:c5:a0:d5:44:ad:c2:5b:f3:da:57:08:08:4b:bb:a9:
         95:d1:0d:f1:69:f2:99:25:2f:c4:3d:4a:8c:8a:85:9f:11:a6:
         74:c9:f4:a8:d0:fe:6c:a4:3e:e2:2f:b2:aa:0f:23:7f:5e:70:
         a9:5a:1b:71:d8:48:fa:45:ce:9b:78:5d:a4:30:e1:a3:b0:ce:
         87:d4:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----