Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a3a2f33322d3332203d3e20323633343231.roa
File:                     323830343a313630303a3a2f33322d3332203d3e20323633343231.roa (raw, json)
Hash identifier:          IfnLsjSoXpBGDeUmaLXXf8LOzDmHbbHWGzAIHW9bB2c=
Subject key identifier:   9E:D6:3D:55:6C:A2:7F:20:33:7F:4A:30:A1:5F:BA:D6:3A:BE:54:54
Certificate issuer:       /CN=411194BD84722FD252C79F3307A7C3ACFDC84782
Certificate serial:       4FD6751E7CFD032E798EE18DC6963BBCD1F07028
Authority key identifier: 41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a3a2f33322d3332203d3e20323633343231.roa
Signing time:             Thu 13 Apr 2023 20:21:37 +0000
ROA not before:           Thu 13 Apr 2023 20:16:37 +0000
ROA not after:            Thu 11 Apr 2024 20:21:37 +0000
asID:                     263421
IP address blocks:        2804:1600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d6:75:1e:7c:fd:03:2e:79:8e:e1:8d:c6:96:3b:bc:d1:f0:70:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411194BD84722FD252C79F3307A7C3ACFDC84782
        Validity
            Not Before: Apr 13 20:16:37 2023 GMT
            Not After : Apr 11 20:21:37 2024 GMT
        Subject: CN=9ED63D556CA27F20337F4A30A15FBAD63ABE5454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:1b:71:bb:94:85:2a:6a:41:4a:06:4e:95:
                    b3:7b:f3:cd:d5:4a:e4:dd:b7:25:86:f7:d8:49:75:
                    5f:2c:0e:18:26:94:c9:74:c0:85:b4:1f:7d:0a:04:
                    b5:de:13:49:62:86:b6:ea:23:68:04:fc:a6:8f:48:
                    8b:88:03:76:41:d3:35:91:cc:6d:1c:af:f1:13:15:
                    66:d6:61:83:2b:94:d3:2c:77:3f:0d:1c:4e:9f:77:
                    a3:2e:39:e9:be:d8:9a:33:31:b3:bd:3a:b3:f2:9f:
                    37:30:93:23:d2:b6:20:4b:e2:31:48:fa:c1:85:c8:
                    0a:2e:ce:f6:3d:2b:07:c5:7d:a2:18:da:6b:38:df:
                    fe:60:53:4e:c3:cc:e2:8d:49:2a:0f:c9:f7:c5:ac:
                    dd:13:a1:6c:4e:a1:3b:42:87:1d:ca:6f:15:00:9c:
                    bb:09:f0:f1:91:af:4e:8f:b3:0f:b3:a1:ea:dd:41:
                    e9:13:cc:30:d7:12:42:cb:2c:12:6c:ca:39:a1:c9:
                    4e:5f:9a:79:8f:ef:94:8a:e3:ef:71:69:40:ed:3e:
                    9a:cd:23:1d:14:d6:fd:af:4f:6a:f5:b8:7f:eb:4b:
                    be:05:a6:9a:db:de:e3:b5:b3:1b:d0:98:b1:ec:79:
                    25:b4:91:07:09:eb:94:b2:d8:9b:ae:08:dd:d9:39:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D6:3D:55:6C:A2:7F:20:33:7F:4A:30:A1:5F:BA:D6:3A:BE:54:54
            X509v3 Authority Key Identifier:
                keyid:41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/411194BD84722FD252C79F3307A7C3ACFDC84782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a3a2f33322d3332203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:f9:17:21:11:1e:8d:57:68:2d:d2:03:8e:9c:00:a7:cb:5c:
         0d:bd:d9:52:99:1a:e5:29:5b:aa:1c:84:9f:3f:b0:9d:c7:ba:
         36:ba:8a:9e:53:0f:99:84:07:50:53:16:87:f1:96:9c:ef:db:
         23:c6:f5:71:92:57:e0:98:da:6a:0c:58:f3:19:7a:dc:2c:20:
         5b:aa:5e:2f:63:d2:43:56:59:49:b8:f2:6e:6d:60:c6:4a:50:
         af:55:4d:56:d6:c2:0d:04:cb:c5:67:ad:06:7d:58:20:84:c5:
         21:f3:b6:f0:b9:62:f7:01:f0:36:fb:0a:e9:bd:29:f1:05:68:
         8c:b6:e1:78:7b:f1:99:d1:c8:df:bd:44:1d:b2:c0:62:f7:5c:
         86:55:a2:ac:9f:26:6e:19:50:ce:04:fa:c3:f9:bc:23:c1:27:
         81:af:d7:63:16:03:ae:a7:4d:1b:62:9c:b6:98:6f:65:62:97:
         79:da:20:32:ac:c3:34:5c:92:97:7b:83:55:d5:39:56:2a:be:
         9e:5c:8e:36:a1:2a:3c:dc:b5:ca:3f:8e:b0:c0:3f:e7:e9:41:
         e8:3f:94:4b:f1:06:ae:d0:89:58:68:d9:37:24:93:39:e8:e1:
         4a:a8:df:94:fc:65:22:79:ac:39:ec:e1:0b:80:fa:b6:0a:97:
         82:9c:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----