Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/0/323830343a333939383a3a2f33322d3334203d3e20323636303338.roa
File:                     323830343a333939383a3a2f33322d3334203d3e20323636303338.roa (raw, json)
Hash identifier:          pZ+HtoVmvrfA8eDo2aiVwUIZb0skQj/TxV/HsxeIKPE=
Subject key identifier:   DA:A4:4A:AE:3A:EB:65:AE:A5:30:4B:5E:32:B8:B8:7F:F6:2C:CA:2E
Certificate issuer:       /CN=47DAF43636127D86720E3DEECA6F2C1B6E31B4D3
Certificate serial:       5C6A2392FAE703117307542A1CC4A2C558BDE44D
Authority key identifier: 47:DA:F4:36:36:12:7D:86:72:0E:3D:EE:CA:6F:2C:1B:6E:31:B4:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47DAF43636127D86720E3DEECA6F2C1B6E31B4D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/0/323830343a333939383a3a2f33322d3334203d3e20323636303338.roa
Signing time:             Mon 13 Nov 2023 12:49:23 +0000
ROA not before:           Mon 13 Nov 2023 12:44:23 +0000
ROA not after:            Mon 11 Nov 2024 12:49:23 +0000
asID:                     266038
IP address blocks:        2804:3998::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6a:23:92:fa:e7:03:11:73:07:54:2a:1c:c4:a2:c5:58:bd:e4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47DAF43636127D86720E3DEECA6F2C1B6E31B4D3
        Validity
            Not Before: Nov 13 12:44:23 2023 GMT
            Not After : Nov 11 12:49:23 2024 GMT
        Subject: CN=DAA44AAE3AEB65AEA5304B5E32B8B87FF62CCA2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:45:e0:c6:d1:78:fd:62:fc:26:79:c4:17:56:
                    8c:0a:da:e5:8a:04:14:3f:fd:cd:0c:84:cd:33:a7:
                    c4:60:cf:50:6c:f1:80:1d:60:1f:6f:c3:29:09:87:
                    a6:af:8c:d5:2f:cf:0f:ed:52:72:1d:28:2f:b7:69:
                    44:0c:0f:6b:9e:6e:1a:4f:0a:2c:33:15:a9:a4:a7:
                    3d:bd:fe:d3:ef:8d:eb:f3:bd:6c:bc:e9:9a:9b:10:
                    34:2e:58:cc:8c:11:ee:73:2d:a8:01:23:75:71:c7:
                    9d:ad:71:a6:a3:ef:87:75:95:25:c4:ac:2f:97:d3:
                    e6:95:c2:5d:2b:b9:f9:e3:c3:65:60:ce:78:3f:80:
                    d5:37:b5:15:d4:e2:c5:c0:d1:d4:9d:8e:12:63:a8:
                    7a:01:16:e9:2c:00:d8:dc:a8:f3:35:a8:63:8e:6b:
                    01:d3:3e:56:40:d4:43:62:de:05:e2:1a:5e:69:44:
                    0e:b7:6b:c1:ae:67:8f:da:4a:88:27:74:52:df:2f:
                    91:a9:73:70:78:b5:5e:11:76:8a:c9:d6:94:e5:5a:
                    88:5e:4a:56:b6:b6:75:6e:4d:2f:b7:78:19:82:1a:
                    3d:5a:75:71:d6:72:52:09:0c:c2:7d:4d:3f:d6:ba:
                    80:18:9e:a3:e4:f9:26:0c:18:40:66:94:01:0c:25:
                    1e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A4:4A:AE:3A:EB:65:AE:A5:30:4B:5E:32:B8:B8:7F:F6:2C:CA:2E
            X509v3 Authority Key Identifier:
                keyid:47:DA:F4:36:36:12:7D:86:72:0E:3D:EE:CA:6F:2C:1B:6E:31:B4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/0/47DAF43636127D86720E3DEECA6F2C1B6E31B4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47DAF43636127D86720E3DEECA6F2C1B6E31B4D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/0/323830343a333939383a3a2f33322d3334203d3e20323636303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3998::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:67:ca:ed:de:fe:40:f3:52:1d:8b:3c:ce:37:2f:6e:a4:87:
         b2:bb:94:a1:9f:a0:d5:51:c1:d6:73:53:a4:05:84:25:14:50:
         1b:93:75:d3:7b:e3:f1:7c:0c:07:3f:8b:0a:1b:88:5a:7f:bf:
         29:b1:cc:ac:4b:de:12:4d:a9:ab:44:49:72:01:65:0d:8a:34:
         c9:f3:42:86:69:11:3b:62:35:db:b8:fa:3b:f2:c6:f6:49:3e:
         87:64:dd:19:1e:39:bc:66:9b:85:bd:7b:78:5a:4f:1e:de:ff:
         ea:04:24:ee:b3:c4:65:b7:c8:fd:f0:ed:f0:7c:b6:6d:c5:d9:
         fd:87:01:cf:21:d2:ff:56:bf:ab:99:71:34:15:87:6f:07:51:
         01:9e:91:c6:a5:1b:b2:a1:14:c4:78:89:03:d0:d0:17:91:be:
         47:42:db:4f:ab:6a:5e:c8:a0:cd:96:e0:14:a5:fb:89:08:9a:
         8b:a7:bb:b3:0d:a3:11:78:fa:97:e6:f7:b3:12:57:e0:56:16:
         de:09:64:ed:ce:1b:a9:4c:f4:3e:35:48:35:28:e4:49:46:9e:
         c2:0c:23:b7:2a:0a:d2:de:c3:37:87:a9:cb:af:47:e4:81:cb:
         b4:17:4f:e4:fd:0a:e0:73:1f:f3:25:5f:50:8b:7c:27:45:69:
         fb:18:a9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----