Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d3438203d3e20323634313935.roa
File:                     323830343a323430303a3a2f33322d3438203d3e20323634313935.roa (raw, json)
Hash identifier:          YTLhTmKr8pDU6bFIV5gOMeWPdHWDEQtvrbxZFk63PNU=
Subject key identifier:   5B:57:64:B9:92:A1:4C:C3:DE:A6:89:7C:32:CE:85:FC:69:A4:50:6E
Certificate issuer:       /CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
Certificate serial:       3537234DC87C90FC12D920DAB71D5A6767B52694
Authority key identifier: 4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d3438203d3e20323634313935.roa
Signing time:             Sun 16 Jul 2023 15:11:11 +0000
ROA not before:           Sun 16 Jul 2023 15:06:11 +0000
ROA not after:            Sun 14 Jul 2024 15:11:11 +0000
asID:                     264195
IP address blocks:        2804:2400::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:37:23:4d:c8:7c:90:fc:12:d9:20:da:b7:1d:5a:67:67:b5:26:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
        Validity
            Not Before: Jul 16 15:06:11 2023 GMT
            Not After : Jul 14 15:11:11 2024 GMT
        Subject: CN=5B5764B992A14CC3DEA6897C32CE85FC69A4506E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:c8:b6:2c:e4:1d:14:85:3c:e0:0c:d8:b2:
                    94:60:62:b0:d9:37:73:78:09:df:49:98:8a:97:46:
                    48:ec:75:16:d3:35:b0:16:2c:59:82:e1:ac:92:48:
                    30:b7:ff:a2:94:f7:ba:cf:cd:40:70:b8:6b:4f:28:
                    0d:95:1d:a5:b2:67:1c:88:db:9a:bd:54:66:57:e1:
                    e7:ee:a4:04:85:8d:db:71:0a:84:93:2b:99:1f:03:
                    51:b6:dd:d8:c0:25:63:53:92:7c:d2:43:71:0f:87:
                    21:74:ab:3d:34:75:53:26:94:eb:71:45:28:12:ca:
                    ab:23:39:34:70:9e:d6:a3:f3:0f:8d:23:a1:dc:5a:
                    e7:30:cc:b2:fd:9e:c1:09:33:f0:c3:54:fa:9e:88:
                    6b:b9:e3:c2:e6:5d:48:e0:f8:26:b1:50:45:cd:aa:
                    2f:2f:4f:bb:ba:55:3f:a5:2d:0d:72:df:ed:d5:48:
                    10:71:ee:a5:58:34:e9:5b:d0:d0:a3:b9:e1:01:d6:
                    4d:7f:c8:9c:44:5c:1e:e4:71:cc:cf:a5:4e:df:cc:
                    c0:d2:a2:fe:d3:61:9c:42:7d:d8:7e:95:93:04:df:
                    25:8f:40:f8:f8:09:5f:f4:f0:1a:57:c3:d9:2f:78:
                    3e:d0:77:e9:e5:cd:fc:46:f8:bb:0f:ba:12:09:5f:
                    cc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:57:64:B9:92:A1:4C:C3:DE:A6:89:7C:32:CE:85:FC:69:A4:50:6E
            X509v3 Authority Key Identifier:
                keyid:4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d3438203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2400::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:dc:5f:f6:0c:1c:ba:dc:3f:24:79:2e:e7:e4:4c:68:fe:f0:
         34:c4:8e:2d:e2:69:d6:ab:f0:a0:bc:59:55:6a:f0:8f:53:d9:
         c2:bb:d7:62:17:ce:dc:a6:e4:d4:85:54:c9:ed:de:4a:09:7f:
         18:ec:bd:42:74:4f:e2:a6:d6:96:c0:d0:0d:29:aa:b0:2c:42:
         09:cb:72:fc:7f:8a:5e:1c:ea:fa:32:e8:92:87:46:d7:23:2d:
         a4:e3:e4:76:1a:1f:59:4e:a8:97:7f:78:2d:1e:9a:70:9c:15:
         0d:aa:b6:85:9d:d9:a2:2d:95:c3:e0:f7:18:5c:db:13:ef:a9:
         f0:f0:79:ab:5e:70:48:38:4f:81:01:68:6e:35:3b:6c:19:5f:
         2c:d8:65:4b:51:cf:e8:c1:12:25:24:2a:f3:f9:1d:b7:3f:02:
         6d:67:05:9d:d1:73:39:6c:64:84:a8:a0:28:1d:2a:a4:41:0f:
         69:fa:0b:8b:a1:73:4c:26:e7:70:bc:87:14:22:27:9b:08:08:
         f4:66:fc:ad:82:82:0e:86:a1:7e:2b:5b:8e:4c:89:47:ef:a4:
         ba:2e:6d:38:0e:f9:45:92:79:97:4d:4b:fe:65:c0:00:e9:65:
         69:43:54:b4:42:16:f7:43:e5:ff:44:4f:1c:49:30:e1:9f:e3:
         f3:da:2e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----