Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/323830343a6438383a3a2f33322d3334203d3e203532363337.roa
File:                     323830343a6438383a3a2f33322d3334203d3e203532363337.roa (raw, json)
Hash identifier:          Ontb8rhqemIeQo6nfPnK37nLHVqyhaT2ALHvrtpEh68=
Subject key identifier:   3E:A1:7D:52:B5:62:4B:5A:3E:6A:C8:7B:22:06:B2:C6:0A:7C:97:D7
Certificate issuer:       /CN=65957368ED64EBC667C549743F4EF7F7D715D062
Certificate serial:       74B008C82F5888C7BF63F5F906B47090C769C81D
Authority key identifier: 65:95:73:68:ED:64:EB:C6:67:C5:49:74:3F:4E:F7:F7:D7:15:D0:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65957368ED64EBC667C549743F4EF7F7D715D062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/323830343a6438383a3a2f33322d3334203d3e203532363337.roa
Signing time:             Wed 06 Dec 2023 05:00:00 +0000
ROA not before:           Wed 06 Dec 2023 04:55:00 +0000
ROA not after:            Wed 04 Dec 2024 05:00:00 +0000
asID:                     52637
IP address blocks:        2804:d88::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b0:08:c8:2f:58:88:c7:bf:63:f5:f9:06:b4:70:90:c7:69:c8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65957368ED64EBC667C549743F4EF7F7D715D062
        Validity
            Not Before: Dec  6 04:55:00 2023 GMT
            Not After : Dec  4 05:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:9e:2d:df:3d:8b:08:4d:2b:cf:ea:75:7f:
                    72:93:f5:d1:34:ca:68:db:37:7b:7e:46:6f:04:fe:
                    94:b7:24:63:9b:50:b5:d2:c3:a4:28:fa:71:25:b2:
                    25:51:4d:13:c1:cb:58:45:dd:7e:da:d5:77:6d:cf:
                    91:72:8c:0c:09:9a:77:5d:b3:86:c3:53:68:c8:ca:
                    75:fb:02:c1:dd:19:cb:f5:00:8e:a5:5d:ca:d3:5d:
                    55:cf:cf:2f:3e:c4:a8:b4:a4:a0:6f:3f:49:8e:90:
                    42:0a:39:a1:7a:1a:5d:bb:b9:68:00:3a:70:6f:f6:
                    7e:c4:d9:0f:93:fc:63:e3:de:d8:ec:16:f3:11:f1:
                    b7:aa:7e:c1:8b:2e:5a:fc:87:3c:cd:ce:2e:43:4f:
                    b6:c2:f6:e1:5e:8c:ff:2b:5a:92:56:8e:3c:62:63:
                    bb:8c:55:38:cb:62:1f:5d:8a:5c:84:bc:4d:6c:8c:
                    d8:ce:2d:09:42:e2:8a:c6:f6:6c:e2:58:d4:ae:50:
                    93:cc:6d:48:2f:fc:29:ae:5f:e3:4a:f9:b1:af:43:
                    d4:f7:58:9e:fa:f0:ee:3b:2a:68:6f:ff:5d:49:86:
                    bc:ad:03:ad:dd:a4:82:91:a7:48:1b:36:2e:c9:bb:
                    f6:c2:7a:c1:dd:5d:32:df:e6:88:b6:4e:51:c3:04:
                    ec:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A1:7D:52:B5:62:4B:5A:3E:6A:C8:7B:22:06:B2:C6:0A:7C:97:D7
            X509v3 Authority Key Identifier:
                keyid:65:95:73:68:ED:64:EB:C6:67:C5:49:74:3F:4E:F7:F7:D7:15:D0:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/65957368ED64EBC667C549743F4EF7F7D715D062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65957368ED64EBC667C549743F4EF7F7D715D062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/323830343a6438383a3a2f33322d3334203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:1b:20:c3:af:d1:04:28:94:52:c4:81:7d:af:0d:a1:58:77:
         7b:6d:9a:ac:f0:b7:87:11:63:ba:8f:6d:3c:64:74:ce:ae:4e:
         1a:36:e4:5b:dd:3d:01:39:48:69:35:d1:01:24:99:fc:51:f7:
         4a:30:46:a7:32:36:d8:6a:3a:5d:4b:49:50:f5:a4:6f:fe:c9:
         0b:76:0e:d0:df:58:65:26:e4:78:52:91:83:6e:2e:2b:be:f8:
         8b:b2:6e:40:f2:0f:b9:3c:04:1b:9c:a8:81:41:4b:99:e7:c4:
         35:e2:42:23:04:fa:3a:84:3f:bf:69:d0:bf:68:49:0a:fa:11:
         18:b5:2d:11:0f:46:4a:60:db:55:70:4c:5e:7b:d0:df:36:72:
         4f:9e:4c:69:54:0d:0c:a7:d5:69:1e:a8:21:10:15:52:97:7e:
         70:a2:cc:f8:24:46:f9:24:f6:69:3e:e0:88:17:d8:2a:79:5d:
         5d:e6:79:8f:d3:71:cc:ec:4e:b1:67:f9:c2:94:8f:5a:9b:63:
         95:c8:23:44:2d:e4:9e:fb:b2:7e:a9:e8:0f:b2:52:df:dd:09:
         07:66:c3:2e:19:2c:b5:83:35:d3:02:0f:e4:e2:99:3f:e0:44:
         7f:e5:82:50:81:27:ec:92:14:e3:61:78:fe:9f:ea:e6:4f:78:
         d5:4f:89:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----