Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/323830343a323563303a3a2f33322d3332203d3e20323634333030.roa
File:                     323830343a323563303a3a2f33322d3332203d3e20323634333030.roa (raw, json)
Hash identifier:          BfclluSfOuwI7YysQGgdjntgHtwPscD/5px/4DafryY=
Subject key identifier:   44:1E:05:67:04:CE:EE:2A:54:CD:2C:67:7E:85:17:39:96:BE:41:36
Certificate issuer:       /CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
Certificate serial:       4AEBCF72268E43E51C8FB38BFCCCE6864466AA45
Authority key identifier: 4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/323830343a323563303a3a2f33322d3332203d3e20323634333030.roa
Signing time:             Wed 25 Oct 2023 22:38:28 +0000
ROA not before:           Wed 25 Oct 2023 22:33:28 +0000
ROA not after:            Wed 23 Oct 2024 22:38:28 +0000
asID:                     264300
IP address blocks:        2804:25c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:eb:cf:72:26:8e:43:e5:1c:8f:b3:8b:fc:cc:e6:86:44:66:aa:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
        Validity
            Not Before: Oct 25 22:33:28 2023 GMT
            Not After : Oct 23 22:38:28 2024 GMT
        Subject: CN=441E056704CEEE2A54CD2C677E85173996BE4136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6d:67:33:90:02:9e:aa:b1:b3:c3:ea:61:cd:
                    e9:ed:1c:dd:f9:d2:ee:8c:d8:15:73:1f:c0:f1:79:
                    e4:1b:d8:83:11:f9:63:72:5d:5e:a1:56:65:97:06:
                    0d:5f:a6:63:5b:8d:9c:12:d9:92:90:f8:27:15:c1:
                    56:bd:c2:fe:26:1f:2a:59:7e:fc:21:a5:bc:29:33:
                    6d:03:d4:49:03:97:19:b0:96:32:2f:a5:f5:03:c3:
                    c3:27:29:ca:50:16:d6:c6:c5:1b:b8:7c:02:0d:c2:
                    c1:f8:8b:de:db:6c:9d:76:88:21:6f:f8:c5:08:04:
                    51:41:9d:a8:83:26:7c:cf:0b:54:4e:8a:c9:f3:29:
                    98:ef:d8:0b:0a:42:17:4e:da:cd:19:d3:5e:65:e0:
                    54:24:85:de:21:ab:ae:3c:2a:51:25:af:aa:12:a6:
                    bd:22:1f:ea:50:0f:a4:9d:f9:43:cd:2f:30:bc:93:
                    87:73:47:4c:e5:4e:45:e4:89:16:23:14:95:1e:a6:
                    da:de:0c:ed:e4:a8:6e:2d:18:94:ee:41:ad:53:46:
                    9c:08:30:a6:ab:a1:7c:8f:4c:de:03:a1:47:80:5d:
                    8d:94:c3:5b:dc:e0:1f:35:10:b1:5b:64:f7:6d:a7:
                    7c:f0:58:0d:ca:e3:35:f8:93:aa:fa:18:04:b1:13:
                    ee:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1E:05:67:04:CE:EE:2A:54:CD:2C:67:7E:85:17:39:96:BE:41:36
            X509v3 Authority Key Identifier:
                keyid:4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/323830343a323563303a3a2f33322d3332203d3e20323634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:6f:29:7f:3a:b8:53:70:64:d3:62:db:45:38:95:73:d6:4f:
         a3:05:0c:a8:54:9b:03:7c:54:40:56:0a:4c:c6:91:8d:58:a2:
         e7:d6:f2:3d:86:ec:56:93:73:62:50:27:1f:d7:5c:00:b6:f2:
         65:81:33:35:39:9e:1b:1e:b7:a6:c4:d6:4b:04:f7:8a:a9:29:
         bd:f9:ec:0f:d0:95:7b:0a:64:e8:03:a8:fc:a1:ea:a2:e1:c9:
         bf:a4:19:ef:01:7b:a6:2d:57:83:f1:71:48:66:cd:f9:d6:aa:
         29:83:7e:7a:3f:e1:2d:25:e5:7d:38:ba:da:1f:a7:8a:d3:79:
         e8:9a:b4:f2:be:a0:2d:13:9a:99:d4:b2:d2:cd:9b:b9:2d:56:
         f7:55:63:b7:8d:3e:8d:97:ca:35:50:a6:41:d6:3c:4b:47:d5:
         95:a8:65:36:2c:eb:78:75:bd:12:c9:d7:63:39:a7:82:7b:7b:
         bc:6a:fb:ba:d5:33:83:f8:ca:08:14:89:99:10:09:a6:cb:c6:
         29:17:fa:9e:30:8f:25:44:bf:ac:79:78:49:a3:8e:a2:2b:1e:
         a3:77:82:ef:79:1b:be:a9:c0:95:b5:91:a6:61:78:99:bf:1e:
         7d:ac:ed:c8:2a:e0:7b:0c:91:f0:bf:86:92:ad:21:b3:8b:5a:
         95:19:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----