Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/323830343a373663383a383030303a3a2f33332d3333203d3e20323731313334.roa
File:                     323830343a373663383a383030303a3a2f33332d3333203d3e20323731313334.roa (raw, json)
Hash identifier:          RXrE/MLx8gybQtwYh3o9AEyXWqznjVzo/VFU+EI9TVY=
Subject key identifier:   57:36:07:7C:9B:C8:A6:46:40:65:59:83:BA:57:9A:EA:15:FB:68:23
Certificate issuer:       /CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
Certificate serial:       75FC4AD83252DBDFD495B29BB53B81E20C863A45
Authority key identifier: 33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/323830343a373663383a383030303a3a2f33332d3333203d3e20323731313334.roa
Signing time:             Sat 10 Jun 2023 22:26:27 +0000
ROA not before:           Sat 10 Jun 2023 22:21:27 +0000
ROA not after:            Sat 08 Jun 2024 22:26:27 +0000
asID:                     271134
IP address blocks:        2804:76c8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fc:4a:d8:32:52:db:df:d4:95:b2:9b:b5:3b:81:e2:0c:86:3a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
        Validity
            Not Before: Jun 10 22:21:27 2023 GMT
            Not After : Jun  8 22:26:27 2024 GMT
        Subject: CN=5736077C9BC8A64640655983BA579AEA15FB6823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:c1:0a:0c:7b:c0:d5:ec:10:44:b2:8c:6f:
                    c1:ce:b5:0b:e1:84:23:71:c6:76:4d:ed:0c:e7:29:
                    ca:92:8a:5f:28:c6:a6:2c:51:84:97:dd:8c:b4:8a:
                    44:d9:7c:15:2d:8c:96:31:d2:8e:5a:1e:6d:34:4a:
                    92:7f:d9:16:48:39:dd:5b:9e:ec:a5:df:99:67:55:
                    ba:22:a1:34:1d:8f:39:06:e4:32:f0:25:73:74:5f:
                    14:09:ad:67:61:25:03:68:05:17:68:07:e8:6d:cf:
                    4c:59:d0:44:ef:29:b8:17:17:71:43:62:ef:0d:61:
                    10:7e:4e:1c:9d:0c:52:7e:e1:8d:95:96:f1:ed:02:
                    98:2f:a2:b7:9d:db:ad:68:fe:6b:14:00:a9:2a:70:
                    7f:f7:1b:59:2f:fd:76:83:df:91:4a:e0:f5:66:70:
                    a4:84:1f:1b:1c:27:86:18:b2:49:8f:c6:07:99:61:
                    f7:fb:2a:e9:c5:9b:6e:f9:51:f9:4d:09:0a:e8:62:
                    58:7e:09:b8:2a:de:10:0f:f2:1d:48:75:33:6e:6a:
                    a8:58:37:64:1f:ea:ab:ed:bf:43:c6:3c:de:88:38:
                    41:9c:cc:7a:5e:e4:30:75:20:be:eb:bd:61:ae:b1:
                    ee:54:a5:69:bd:0c:5d:68:29:b8:24:27:06:b8:d0:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:36:07:7C:9B:C8:A6:46:40:65:59:83:BA:57:9A:EA:15:FB:68:23
            X509v3 Authority Key Identifier:
                keyid:33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/323830343a373663383a383030303a3a2f33332d3333203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76c8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         34:68:59:c7:7c:44:c2:b3:27:d6:ce:20:c9:0b:74:0d:2c:fb:
         f8:46:da:b4:f8:46:ac:24:69:2b:0c:d6:e1:51:82:4c:41:83:
         cc:ba:23:20:94:7c:3c:f8:30:ef:08:2d:97:5d:dc:cf:5e:db:
         e4:97:66:98:39:d5:73:75:7d:b9:34:22:54:b3:ae:fb:68:dd:
         e9:3d:a4:48:6e:c9:0d:7d:21:9d:23:0c:0c:78:12:ef:67:d4:
         21:ce:e6:d1:c0:51:f2:dd:27:3f:40:e6:6c:a4:54:65:d4:f0:
         af:ea:9e:72:98:36:b2:77:ca:0e:75:01:a2:ea:6c:66:57:01:
         f4:de:0e:d9:35:f1:f1:9d:10:ce:59:79:b8:ea:72:c0:ac:3e:
         73:e5:ed:82:50:0a:c0:9b:f1:b7:5f:f6:7f:fe:d7:49:a8:20:
         6d:ff:58:5b:57:b3:d7:77:d8:1b:2a:9c:5e:c2:61:16:96:cd:
         01:42:ea:ba:39:4f:40:0d:dd:b3:5d:67:b3:e9:78:37:92:4f:
         5e:84:25:30:40:be:11:7b:dc:ac:2b:90:34:1b:da:c5:3c:8e:
         5e:df:de:55:c3:d4:2c:73:21:7c:39:c6:60:a0:01:87:31:ca:
         45:25:5e:71:c1:7d:21:0b:3b:1f:96:4c:a7:47:b7:7b:28:99:
         c4:b2:1e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----