Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/323830343a343332383a3a2f33322d3438203d3e20323637353532.roa
File:                     323830343a343332383a3a2f33322d3438203d3e20323637353532.roa (raw, json)
Hash identifier:          +czZCeFABHSgoGGgZX/yqSerJGLOxsCoyhglQ2AUuLs=
Subject key identifier:   D8:33:11:F7:3F:1E:3F:98:94:1A:08:42:A6:63:7A:38:F1:4C:17:FB
Certificate issuer:       /CN=E085765680A9F78233F228423B6D56C7F4358C7A
Certificate serial:       0649F2C175BE9AAD0ECADA35AAAACC4BCA3EF862
Authority key identifier: E0:85:76:56:80:A9:F7:82:33:F2:28:42:3B:6D:56:C7:F4:35:8C:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E085765680A9F78233F228423B6D56C7F4358C7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/323830343a343332383a3a2f33322d3438203d3e20323637353532.roa
Signing time:             Fri 08 Sep 2023 01:00:00 +0000
ROA not before:           Fri 08 Sep 2023 00:55:00 +0000
ROA not after:            Fri 06 Sep 2024 01:00:00 +0000
asID:                     267552
IP address blocks:        2804:4328::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:49:f2:c1:75:be:9a:ad:0e:ca:da:35:aa:aa:cc:4b:ca:3e:f8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E085765680A9F78233F228423B6D56C7F4358C7A
        Validity
            Not Before: Sep  8 00:55:00 2023 GMT
            Not After : Sep  6 01:00:00 2024 GMT
        Subject: CN=3082010A0282010100C457E43D19E7E64DC7DF1D7311406AC08D150A7FD7E50A7DE3C6C7F226C1E1D31F8E7C9E62FA6018205EF49E776B2DFCF2831594F0D4F374E4C36982ED8946772310590E3E56AA06FFB9621F6771C59F37DBEF09908644886EC9ECB8F2B6DA63E591E5AADF254FC3FBA04E3173119F4C060D9F553FD3F7E3DD140FC876BA13285BF892A2EF94B78714C0CE844125E08CE793F4EDD5A6E24052F0054431511823BC060A8FB25FFF7ADE88102821AF13F47C15B9B5B287CC7037A3AF02112E2DA6519A3022D5963A520025760C7AAC4F2F5C49E76090646B7FCFF03DF37D364F44637401C08AA6C7EBB29A453001DF10A670189CC46B7BD96A4EE3F3C6FB4BF2BD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:e4:3d:19:e7:e6:4d:c7:df:1d:73:11:40:
                    6a:c0:8d:15:0a:7f:d7:e5:0a:7d:e3:c6:c7:f2:26:
                    c1:e1:d3:1f:8e:7c:9e:62:fa:60:18:20:5e:f4:9e:
                    77:6b:2d:fc:f2:83:15:94:f0:d4:f3:74:e4:c3:69:
                    82:ed:89:46:77:23:10:59:0e:3e:56:aa:06:ff:b9:
                    62:1f:67:71:c5:9f:37:db:ef:09:90:86:44:88:6e:
                    c9:ec:b8:f2:b6:da:63:e5:91:e5:aa:df:25:4f:c3:
                    fb:a0:4e:31:73:11:9f:4c:06:0d:9f:55:3f:d3:f7:
                    e3:dd:14:0f:c8:76:ba:13:28:5b:f8:92:a2:ef:94:
                    b7:87:14:c0:ce:84:41:25:e0:8c:e7:93:f4:ed:d5:
                    a6:e2:40:52:f0:05:44:31:51:18:23:bc:06:0a:8f:
                    b2:5f:ff:7a:de:88:10:28:21:af:13:f4:7c:15:b9:
                    b5:b2:87:cc:70:37:a3:af:02:11:2e:2d:a6:51:9a:
                    30:22:d5:96:3a:52:00:25:76:0c:7a:ac:4f:2f:5c:
                    49:e7:60:90:64:6b:7f:cf:f0:3d:f3:7d:36:4f:44:
                    63:74:01:c0:8a:a6:c7:eb:b2:9a:45:30:01:df:10:
                    a6:70:18:9c:c4:6b:7b:d9:6a:4e:e3:f3:c6:fb:4b:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:33:11:F7:3F:1E:3F:98:94:1A:08:42:A6:63:7A:38:F1:4C:17:FB
            X509v3 Authority Key Identifier:
                keyid:E0:85:76:56:80:A9:F7:82:33:F2:28:42:3B:6D:56:C7:F4:35:8C:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/E085765680A9F78233F228423B6D56C7F4358C7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E085765680A9F78233F228423B6D56C7F4358C7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/323830343a343332383a3a2f33322d3438203d3e20323637353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4328::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:db:12:1d:7d:30:58:dd:f3:6e:d4:01:0c:13:d8:57:f6:95:
         00:3d:86:d2:f1:05:ab:a6:80:d8:00:27:71:6c:d5:16:82:84:
         45:41:2f:f7:d1:10:ce:93:e5:9b:07:ca:97:4c:a5:d2:9b:d0:
         8b:11:76:18:7c:93:af:84:bf:c8:4c:c0:50:5a:e3:0c:cf:12:
         0f:c7:f4:bc:27:50:e2:31:91:7e:c5:85:7c:3f:33:b2:2d:c2:
         2a:7e:98:e7:96:4c:55:61:b2:df:4c:4b:45:43:ab:fe:28:e8:
         bc:b6:26:0b:0f:eb:ff:c0:44:17:d4:80:f3:38:07:30:25:7c:
         1b:b0:90:2d:c4:2c:9b:dc:09:a9:0e:32:42:7d:e8:b4:51:4c:
         74:e8:3b:72:ef:47:5e:c8:a8:62:82:97:17:57:5c:53:15:ca:
         c9:27:51:61:67:3c:7a:1c:41:38:2c:cb:61:16:30:a4:2d:c2:
         37:58:73:26:5b:86:9b:f7:6a:a5:9d:ea:09:48:02:0a:14:ac:
         83:2e:ab:7c:05:93:d6:b8:09:3e:16:aa:23:91:25:1b:49:31:
         12:49:c6:7e:53:62:a6:9d:a6:0f:fb:98:0d:ef:77:ee:79:c3:
         09:fd:c0:5c:f5:35:86:a9:78:b7:bf:8c:9b:15:d9:38:d3:50:
         17:78:4b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----