Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/323830343a3835383a3a2f33322d3438203d3e20323632333635.roa
File:                     323830343a3835383a3a2f33322d3438203d3e20323632333635.roa (raw, json)
Hash identifier:          p8T4/mOy1HUdyFOr9VO+DPffT3WWiu1JvkDrvIOJdUY=
Subject key identifier:   D1:21:BA:63:36:8C:10:B9:C2:59:EB:D3:CB:4E:56:95:85:4E:53:DE
Certificate issuer:       /CN=07FE68F794C265F8A584F6B6E39BC90CF4FD82F2
Certificate serial:       1325A5F013421B0545BC701C9E7C6B9C2B5044BB
Authority key identifier: 07:FE:68:F7:94:C2:65:F8:A5:84:F6:B6:E3:9B:C9:0C:F4:FD:82:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07FE68F794C265F8A584F6B6E39BC90CF4FD82F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/323830343a3835383a3a2f33322d3438203d3e20323632333635.roa
Signing time:             Tue 23 May 2023 17:26:40 +0000
ROA not before:           Tue 23 May 2023 17:21:40 +0000
ROA not after:            Tue 21 May 2024 17:26:40 +0000
asID:                     262365
IP address blocks:        2804:858::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:25:a5:f0:13:42:1b:05:45:bc:70:1c:9e:7c:6b:9c:2b:50:44:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07FE68F794C265F8A584F6B6E39BC90CF4FD82F2
        Validity
            Not Before: May 23 17:21:40 2023 GMT
            Not After : May 21 17:26:40 2024 GMT
        Subject: CN=D121BA63368C10B9C259EBD3CB4E5695854E53DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2c:d9:a6:ee:31:57:64:0e:1c:e3:ee:ec:77:
                    6f:1a:91:a1:6c:3c:31:cb:31:70:63:9a:ed:65:b4:
                    74:ed:fa:85:56:c3:0b:b1:9c:bb:c6:7a:f6:73:de:
                    87:4c:5f:97:cc:44:ea:b1:70:17:d3:a6:6f:13:6d:
                    9d:85:ec:89:dc:22:94:53:8a:1f:56:c7:c6:50:20:
                    41:3b:a2:0a:5e:b3:7b:cc:24:62:8a:1e:b7:4e:6b:
                    f9:37:af:15:a0:72:94:56:f1:0c:dd:9f:bd:1f:12:
                    95:6f:a5:39:cd:57:d0:64:52:e9:bf:fa:51:30:f1:
                    7e:03:02:21:d1:c3:2b:3a:36:71:a1:80:6d:cf:b1:
                    09:4a:43:fe:e3:27:72:74:b8:fc:e1:b8:ac:85:2c:
                    95:c4:d6:d9:26:2b:ee:0e:01:b4:a6:23:86:ef:64:
                    03:a3:06:32:f4:d6:69:39:b9:f4:37:f7:85:33:89:
                    10:16:7e:c6:89:15:7e:09:e0:20:68:c5:e2:90:bd:
                    a5:9f:be:d9:86:cc:88:4c:20:a2:fa:92:73:fa:20:
                    c0:91:f5:a5:2b:7d:65:dc:22:ba:60:12:d6:eb:cd:
                    46:62:7d:f3:88:96:44:d0:c9:7b:7c:fd:07:a6:5b:
                    fc:e7:23:e5:7d:c6:ca:40:73:6f:d1:d7:c7:19:12:
                    d0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:21:BA:63:36:8C:10:B9:C2:59:EB:D3:CB:4E:56:95:85:4E:53:DE
            X509v3 Authority Key Identifier:
                keyid:07:FE:68:F7:94:C2:65:F8:A5:84:F6:B6:E3:9B:C9:0C:F4:FD:82:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/07FE68F794C265F8A584F6B6E39BC90CF4FD82F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07FE68F794C265F8A584F6B6E39BC90CF4FD82F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/323830343a3835383a3a2f33322d3438203d3e20323632333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:858::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:bc:98:eb:d9:04:da:d9:36:f5:66:6d:ea:42:f0:c3:40:13:
         83:3a:4f:55:0c:4c:d3:b6:10:f1:f5:41:ff:95:49:3f:dc:e1:
         c7:4d:21:be:5d:db:89:53:29:91:a9:45:c8:fc:48:03:0f:f3:
         42:63:81:5e:fe:69:14:6d:a6:ee:b9:41:63:8d:f1:23:ba:15:
         50:4d:80:4e:8f:6c:f7:73:bd:ab:c2:ff:32:9c:8c:84:0a:95:
         e6:f7:bd:40:54:7a:7a:d6:f6:01:f0:d2:66:cd:53:45:65:51:
         12:90:e5:ab:d8:07:1d:b8:5b:a3:6b:62:a1:96:27:91:02:d8:
         fa:97:a6:ee:d7:a7:8a:18:4c:2a:f2:ad:ec:6e:75:33:39:42:
         da:2a:60:fa:5f:43:0a:1a:47:fd:29:38:7d:24:f4:4e:0b:bf:
         13:40:ec:9d:88:26:58:c3:56:c6:c2:d0:82:ff:36:c9:00:b2:
         53:d9:c0:be:7c:10:4d:f8:9b:17:07:54:4c:f7:45:88:a7:9b:
         66:66:fa:5e:37:5c:8f:d2:de:38:ed:8a:fc:16:67:7a:d2:61:
         df:84:cd:d2:7a:4d:6c:28:da:1a:72:9d:d0:6c:28:25:85:25:
         0e:98:3d:de:b8:a4:d6:d5:3c:9a:0a:88:f0:15:73:db:72:74:
         e6:3d:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----