Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a3a2f33322d3332203d3e20323637363134.roa
File:                     323830343a343366633a3a2f33322d3332203d3e20323637363134.roa (raw, json)
Hash identifier:          bs1uuPzgmq3r1b9PVFr5Jz4/CyhWwVqtlZ9Ez4I2GYM=
Subject key identifier:   A7:74:C7:81:84:CD:3C:91:A2:81:41:1C:0C:84:B6:53:56:35:75:94
Certificate issuer:       /CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
Certificate serial:       693276D209BE9D01CCC424C007BAB30F9749C08F
Authority key identifier: 7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a3a2f33322d3332203d3e20323637363134.roa
Signing time:             Wed 18 Oct 2023 19:01:48 +0000
ROA not before:           Wed 18 Oct 2023 18:56:48 +0000
ROA not after:            Wed 16 Oct 2024 19:01:48 +0000
asID:                     267614
IP address blocks:        2804:43fc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:32:76:d2:09:be:9d:01:cc:c4:24:c0:07:ba:b3:0f:97:49:c0:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
        Validity
            Not Before: Oct 18 18:56:48 2023 GMT
            Not After : Oct 16 19:01:48 2024 GMT
        Subject: CN=A774C78184CD3C91A281411C0C84B65356357594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:56:9d:17:a6:bf:73:97:d6:1a:20:ef:77:98:
                    4e:9b:f2:77:cd:44:17:52:4c:7a:d8:b3:9a:81:fe:
                    61:5f:d0:eb:5e:ff:3b:1f:ca:1b:5d:b0:03:dd:c5:
                    ef:ad:21:e2:1e:46:60:85:57:79:52:80:14:ee:52:
                    60:81:1e:7d:ec:0d:15:91:7e:d4:21:e8:b5:21:05:
                    7a:58:c0:3a:02:43:3e:db:0f:2e:d1:c6:ea:d4:2c:
                    11:9c:8a:88:f2:a5:9d:58:2d:18:d0:e2:d4:c9:6d:
                    6c:01:90:14:f6:c6:3a:8d:31:43:7f:a5:b6:4d:9b:
                    3f:ec:49:0d:93:7f:e0:62:22:95:f6:10:5e:73:b4:
                    05:4a:20:43:96:09:01:13:e0:b2:6d:4d:d5:76:75:
                    13:8d:13:ab:f2:22:0a:f6:00:e1:ea:75:e7:83:5c:
                    3a:5b:3e:f2:9d:c4:de:1a:de:8a:da:10:ce:86:7c:
                    32:67:47:b7:0d:5f:48:8b:99:77:8d:5e:a4:f7:96:
                    e2:13:de:8c:7f:67:0e:2d:95:1d:c9:b2:37:7a:2b:
                    89:bd:8d:6e:f1:34:a9:85:75:fa:d5:fa:38:23:dd:
                    c9:88:ee:2a:d6:7d:91:aa:22:bb:9e:b3:2c:bf:f1:
                    34:58:80:02:72:b7:77:5b:39:1f:3c:03:5e:78:6f:
                    6c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:74:C7:81:84:CD:3C:91:A2:81:41:1C:0C:84:B6:53:56:35:75:94
            X509v3 Authority Key Identifier:
                keyid:7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a3a2f33322d3332203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:24:b9:9e:5d:e6:0d:d3:c4:b5:a9:45:11:4c:6d:05:c8:89:
         29:1d:fb:05:a8:33:fb:80:98:bb:17:ee:d0:be:dd:d7:8d:b1:
         12:5f:bd:80:e2:bc:cb:62:2f:15:0a:97:96:00:c6:28:86:47:
         fb:a3:d1:7e:1a:bb:db:64:02:ad:c2:73:bb:67:f8:9e:70:e9:
         04:2d:b3:32:44:62:d1:65:50:ef:84:71:fd:96:3c:cd:89:df:
         71:c1:8f:79:95:f1:18:7b:e0:f8:c1:80:85:fc:7e:6b:5f:ea:
         eb:4b:d5:e0:17:21:21:c7:8d:c1:c8:0e:e6:e3:07:26:33:f1:
         63:60:d1:4a:9e:dc:b7:69:61:7e:b1:7c:e9:51:22:11:f9:f9:
         99:fd:0d:46:fd:1a:7a:4e:6e:25:58:19:74:7a:e5:c4:97:b1:
         8d:6d:f0:43:58:df:d0:5b:cd:e8:1c:b9:e1:36:5e:54:e1:46:
         2c:55:2b:3d:78:b2:77:70:f9:46:85:7b:4a:83:0d:ae:a3:3f:
         5e:ba:44:82:d9:21:42:6f:a3:2d:ae:36:20:9e:01:8c:59:59:
         59:a1:d0:f8:b0:04:ce:81:f9:fc:fb:0d:b5:2b:3f:eb:e6:8e:
         88:d2:13:ed:b8:05:f2:9c:c4:d5:df:91:72:51:2d:d9:e2:ea:
         09:a2:04:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----