Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/323830343a3230633a3a2f33322d313238203d3e203238313732.roa
File:                     323830343a3230633a3a2f33322d313238203d3e203238313732.roa (raw, json)
Hash identifier:          h34FMuzKtQtSe+Y5mxSIODD/23APH/SUVaspNF3ZIfI=
Subject key identifier:   48:02:AB:02:12:43:5B:09:ED:98:39:B9:90:6E:CB:8E:41:B7:C8:35
Certificate issuer:       /CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
Certificate serial:       7E4B59672EB9C5786F9C8148BD3B963D4D40BFC8
Authority key identifier: C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/323830343a3230633a3a2f33322d313238203d3e203238313732.roa
Signing time:             Fri 28 Jul 2023 18:35:36 +0000
ROA not before:           Fri 28 Jul 2023 18:30:36 +0000
ROA not after:            Fri 26 Jul 2024 18:35:36 +0000
asID:                     28172
IP address blocks:        2804:20c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4b:59:67:2e:b9:c5:78:6f:9c:81:48:bd:3b:96:3d:4d:40:bf:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
        Validity
            Not Before: Jul 28 18:30:36 2023 GMT
            Not After : Jul 26 18:35:36 2024 GMT
        Subject: CN=4802AB0212435B09ED9839B9906ECB8E41B7C835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:03:39:ed:cc:d3:8a:cc:2d:9b:e0:fb:b1:
                    4c:e4:a1:17:dc:66:49:5a:ee:e2:c9:80:54:e5:3c:
                    23:e3:2f:9d:61:1a:cb:d6:a6:9d:41:d4:90:8f:0f:
                    0e:04:7d:76:5e:86:47:76:a1:c3:1a:66:2d:2e:73:
                    6d:c5:6f:6c:8f:9c:fd:33:57:ec:a4:e1:c1:b5:2c:
                    6d:83:4a:29:71:af:03:0c:d4:43:9e:de:be:a1:a8:
                    5f:ef:48:74:b7:4f:dd:4a:75:84:b6:a1:ac:63:1d:
                    f2:29:bc:b0:06:9c:96:27:da:a4:6b:24:8e:45:31:
                    c5:60:eb:b8:19:52:99:2c:7b:7a:20:bb:12:99:a0:
                    b0:06:ef:e2:a8:61:5b:2e:8a:61:73:d8:d1:2f:c3:
                    84:83:23:dd:7c:8c:8e:04:2c:47:10:84:d0:44:97:
                    2e:d9:51:51:f5:34:3f:48:15:dc:46:6d:23:1c:19:
                    b1:05:67:6e:54:99:28:5b:17:fa:f9:84:80:77:c4:
                    66:e9:1b:50:7d:d3:7e:52:80:45:ef:b8:d7:af:34:
                    e3:f0:e0:86:19:c6:e2:ac:53:bc:cf:ce:be:d1:51:
                    b4:c2:1a:24:ce:54:8f:dd:c9:8d:5f:c4:16:72:bd:
                    c9:4b:15:13:55:fe:bf:ed:7a:a3:ac:cf:d6:1f:c2:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:02:AB:02:12:43:5B:09:ED:98:39:B9:90:6E:CB:8E:41:B7:C8:35
            X509v3 Authority Key Identifier:
                keyid:C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/323830343a3230633a3a2f33322d313238203d3e203238313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20c::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:cc:74:81:b3:c6:32:17:80:4d:31:d9:ec:99:e0:f6:99:3c:
         41:93:c3:dd:18:82:43:c2:32:ed:68:fb:91:49:32:57:d1:fc:
         61:45:5f:c5:9e:2d:8f:f3:66:be:1c:89:51:7d:0a:55:69:85:
         58:d2:e2:59:f4:63:b2:fa:87:26:4b:9c:35:5d:20:7a:41:7b:
         7a:3b:bc:10:b4:75:e8:34:3a:59:c4:43:dd:50:60:e0:55:78:
         a9:ad:b1:95:9b:28:fb:68:90:fd:12:20:d9:70:f3:ce:ac:4d:
         6f:17:45:ec:5c:ad:b8:79:6e:70:09:01:b3:11:e9:36:1a:5a:
         6f:bf:22:96:1e:26:58:d9:d4:b2:5c:7c:19:a1:97:02:5e:ab:
         9b:ff:7f:e8:1a:1e:04:66:3f:b5:14:3d:ae:49:77:ff:48:50:
         e9:59:53:3d:95:05:d8:c9:9e:8e:34:ed:8c:ae:66:85:78:cc:
         4e:17:a9:36:d4:27:a2:1d:d3:7d:f3:bf:35:1a:e3:79:03:09:
         f8:fa:46:ad:5e:07:fd:a7:71:c9:16:f5:6f:72:c8:2e:7d:38:
         d3:ad:78:17:5d:87:8f:f0:d6:6b:1e:9c:2f:7f:1e:d8:e0:71:
         70:c3:b8:8a:19:fb:26:47:40:37:71:0f:43:50:f7:4e:6f:82:
         f6:93:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----