Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/0/323830343a326435383a3a2f33322d313238203d3e20323635323736.roa
File:                     323830343a326435383a3a2f33322d313238203d3e20323635323736.roa (raw, json)
Hash identifier:          GReIDEzDZuZTuW8WorRF3I66Zx5bEGQEE9hr8y8gqEw=
Subject key identifier:   5A:6C:19:E1:DE:EA:11:97:AC:B1:32:AC:4B:2E:B9:DA:A6:A5:AF:CC
Certificate issuer:       /CN=9AD015F7B9EB80FCB9CD824D2456519260917170
Certificate serial:       66EA96B3BE199BFD537E7B57A25E338D9A1DE20A
Authority key identifier: 9A:D0:15:F7:B9:EB:80:FC:B9:CD:82:4D:24:56:51:92:60:91:71:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AD015F7B9EB80FCB9CD824D2456519260917170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/0/323830343a326435383a3a2f33322d313238203d3e20323635323736.roa
Signing time:             Mon 10 Apr 2023 17:12:08 +0000
ROA not before:           Mon 10 Apr 2023 17:07:08 +0000
ROA not after:            Mon 08 Apr 2024 17:12:08 +0000
asID:                     265276
IP address blocks:        2804:2d58::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ea:96:b3:be:19:9b:fd:53:7e:7b:57:a2:5e:33:8d:9a:1d:e2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AD015F7B9EB80FCB9CD824D2456519260917170
        Validity
            Not Before: Apr 10 17:07:08 2023 GMT
            Not After : Apr  8 17:12:08 2024 GMT
        Subject: CN=5A6C19E1DEEA1197ACB132AC4B2EB9DAA6A5AFCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:15:bc:a2:5e:f2:56:a0:bc:37:e8:68:91:
                    55:c3:7f:6a:b3:04:b2:5c:6b:f1:ec:23:c8:ce:45:
                    7e:1b:75:1f:1f:60:74:d6:e3:0c:64:b6:d0:66:97:
                    58:ea:80:25:28:2c:da:99:46:bc:69:c7:8e:56:0a:
                    b9:12:a1:f1:71:89:6f:ab:15:d6:47:aa:81:ed:d9:
                    51:5f:d5:b1:13:b0:13:f3:c2:71:cc:06:5a:df:b0:
                    07:e8:fd:88:c8:4a:52:fe:35:e9:00:01:1a:e0:b1:
                    8a:4d:b6:66:44:d6:78:46:bc:79:5c:f2:25:11:f3:
                    85:d9:92:c1:59:9b:b2:4c:a7:84:0d:39:fd:e2:a4:
                    9d:6e:0d:cc:ea:3b:12:98:e1:ac:6e:ac:99:32:27:
                    64:cc:5c:a0:32:bf:b5:49:ee:b3:0a:ae:31:41:76:
                    af:23:14:80:77:d3:d3:9d:47:64:b4:74:25:65:47:
                    d6:dd:7e:dd:0a:19:f6:db:68:0d:60:c6:8a:3e:a3:
                    06:67:18:67:08:80:ac:23:54:2d:d9:c0:d7:62:4b:
                    5f:9d:c1:e7:8b:09:3b:8c:c9:e3:e6:25:53:95:40:
                    0d:6c:22:3f:b3:cd:77:74:03:ef:dd:26:6d:17:d8:
                    f9:3f:40:b7:93:fe:c2:00:07:3d:b2:68:b7:f6:02:
                    1d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6C:19:E1:DE:EA:11:97:AC:B1:32:AC:4B:2E:B9:DA:A6:A5:AF:CC
            X509v3 Authority Key Identifier:
                keyid:9A:D0:15:F7:B9:EB:80:FC:B9:CD:82:4D:24:56:51:92:60:91:71:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/0/9AD015F7B9EB80FCB9CD824D2456519260917170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AD015F7B9EB80FCB9CD824D2456519260917170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/0/323830343a326435383a3a2f33322d313238203d3e20323635323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d58::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:84:d3:c1:f8:5e:d7:e4:83:13:61:b7:4d:9e:a7:01:d9:0b:
         48:d2:59:8f:8a:72:fd:74:8e:4b:dd:3e:9c:0e:2d:6f:2d:e3:
         4c:48:d4:0f:7b:a7:66:10:c8:b1:7a:71:e4:91:8b:cd:22:9b:
         ea:b2:ce:dc:3a:42:6d:8c:b4:2d:40:e8:bc:69:90:a6:21:0c:
         f4:8b:5e:b3:86:ff:16:df:3b:7b:9a:89:7e:c5:58:7c:27:3d:
         3b:61:29:f8:44:d8:a2:a2:7b:ad:75:a7:9a:bd:4e:ee:7f:f5:
         34:b8:0f:5f:17:6f:e6:2c:37:5e:85:80:0b:d8:e3:01:79:e4:
         47:eb:96:fd:76:61:c6:f8:59:8c:08:3e:55:39:a3:02:7f:bd:
         43:8e:f7:ac:ff:01:36:9c:bd:29:e5:66:24:29:f1:3c:28:ad:
         87:5e:d7:d1:34:8b:2a:36:b5:08:14:5a:d9:71:15:5f:6b:c2:
         ee:f0:d8:a3:82:28:a9:29:d3:16:fc:af:a8:2d:25:0d:2a:f4:
         9d:94:e3:3d:6d:d0:43:3c:ae:56:a5:26:69:fa:43:b7:5b:42:
         ea:da:04:d4:b9:22:23:43:e4:32:77:b1:a4:da:8f:5a:de:c5:
         45:1d:ab:f2:30:97:23:e6:1a:5c:8b:d8:22:fb:34:af:bc:08:
         75:9d:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----