Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/323830343a336333383a3a2f33322d3332203d3e20323636313937.roa
File:                     323830343a336333383a3a2f33322d3332203d3e20323636313937.roa (raw, json)
Hash identifier:          oNUDRQI7FGgQ/EmDcoWFqk2nM3x7V0v+6EXJt/R++nw=
Subject key identifier:   0B:A4:59:33:D5:A3:27:79:E2:3D:86:04:A3:AE:62:DA:1D:F6:36:E5
Certificate issuer:       /CN=20462542E7D750389A93D0ECB9BA39FEB7970339
Certificate serial:       0A402B5C591D68472CF457F1D2C8A59525DA9498
Authority key identifier: 20:46:25:42:E7:D7:50:38:9A:93:D0:EC:B9:BA:39:FE:B7:97:03:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20462542E7D750389A93D0ECB9BA39FEB7970339.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/323830343a336333383a3a2f33322d3332203d3e20323636313937.roa
Signing time:             Fri 08 Sep 2023 18:42:55 +0000
ROA not before:           Fri 08 Sep 2023 18:37:55 +0000
ROA not after:            Fri 06 Sep 2024 18:42:55 +0000
asID:                     266197
IP address blocks:        2804:3c38::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:40:2b:5c:59:1d:68:47:2c:f4:57:f1:d2:c8:a5:95:25:da:94:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20462542E7D750389A93D0ECB9BA39FEB7970339
        Validity
            Not Before: Sep  8 18:37:55 2023 GMT
            Not After : Sep  6 18:42:55 2024 GMT
        Subject: CN=0BA45933D5A32779E23D8604A3AE62DA1DF636E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:4f:88:fb:40:bc:36:15:e8:f3:6f:1f:a9:
                    17:81:ba:cb:3f:5d:a2:71:6f:69:61:bc:c4:be:34:
                    64:5a:47:cb:34:64:6d:eb:a4:92:7b:fe:1a:db:4d:
                    d5:d2:1f:33:9f:8f:8c:eb:7f:81:70:59:6a:46:d0:
                    a3:be:79:ce:62:0c:29:42:8f:0b:7c:b9:8b:f1:c7:
                    c6:69:ef:94:7f:5a:b0:a4:53:0b:2a:ee:d9:41:c2:
                    e1:3d:d9:8b:95:6c:52:9f:f7:d1:15:a7:9d:15:3b:
                    c5:da:18:81:f6:10:97:e2:f7:8c:8a:a3:ef:2b:bf:
                    97:bb:d5:76:3b:50:b2:92:f7:51:af:3a:36:c1:8a:
                    af:be:b4:ed:39:07:54:86:3b:89:9f:0f:85:c8:78:
                    41:08:c2:d5:98:cb:9d:01:80:15:4f:c2:3e:ae:1b:
                    9a:93:80:41:85:7c:de:a2:a8:63:94:5a:b7:0f:38:
                    12:a3:2f:7f:7f:fb:94:b0:96:af:52:d2:9d:05:5f:
                    26:00:c1:54:de:15:36:8c:f2:45:39:72:77:dc:f4:
                    d8:1b:df:d1:df:d5:72:e8:63:03:d5:3b:29:60:cb:
                    23:67:bf:92:0c:a3:16:b1:9f:40:b5:58:a0:22:e5:
                    a6:41:49:51:4c:d7:09:5f:0a:4d:80:a2:26:b1:81:
                    8f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A4:59:33:D5:A3:27:79:E2:3D:86:04:A3:AE:62:DA:1D:F6:36:E5
            X509v3 Authority Key Identifier:
                keyid:20:46:25:42:E7:D7:50:38:9A:93:D0:EC:B9:BA:39:FE:B7:97:03:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/20462542E7D750389A93D0ECB9BA39FEB7970339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20462542E7D750389A93D0ECB9BA39FEB7970339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/323830343a336333383a3a2f33322d3332203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:3e:eb:e3:7c:c9:8c:a4:33:90:3e:76:cd:83:86:4a:cf:a2:
         6e:a8:64:49:f8:04:02:2c:68:9d:92:b9:41:44:a1:2d:29:19:
         73:63:06:3a:e6:b6:b7:b4:fc:2d:a8:5a:7f:00:25:26:07:6d:
         a7:ea:50:0f:09:88:76:2a:88:9b:12:3e:c9:ca:a5:58:fa:82:
         f6:12:57:4c:7e:c3:35:fd:75:80:4d:0a:25:38:1e:ff:8c:7c:
         43:5f:e7:05:46:d5:97:fd:77:c9:a8:06:ee:7a:12:11:61:5c:
         94:52:ac:54:7c:56:1e:cf:56:8c:b4:51:6a:15:61:c1:ce:fe:
         c9:ef:fb:f0:73:fb:cf:3e:6e:d3:50:a7:bd:b9:9a:26:ed:dd:
         f1:0d:2e:86:08:31:4a:93:6b:87:0e:ab:cc:07:e8:8f:43:be:
         b9:a6:19:69:68:76:3e:88:ea:ec:ea:91:d1:a2:e7:6b:29:bb:
         39:c7:5d:a2:57:75:f9:58:ea:0b:41:14:54:45:16:58:22:ec:
         24:9f:9c:98:db:85:d9:cb:48:a5:ca:e4:69:b0:08:46:a7:7e:
         37:74:3c:24:ff:dd:3f:8b:bf:be:27:6a:76:62:39:55:c5:f7:
         d9:57:90:8e:37:c7:98:f5:cb:28:87:7b:66:db:bd:be:d1:dc:
         61:eb:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----