Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/323830343a343639343a3a2f33322d3334203d3e20323636393938.roa
File:                     323830343a343639343a3a2f33322d3334203d3e20323636393938.roa (raw, json)
Hash identifier:          oTX+MccKMU6TnMILlDT9ufzbM3KKTvWF2Tb7OomjIC8=
Subject key identifier:   51:91:5E:A5:E5:22:71:02:39:8C:0E:8B:D4:53:D3:C5:E9:50:D2:66
Certificate issuer:       /CN=2CD97A9413B1CCB310B498A74E162C20325B5DCF
Certificate serial:       6B4719249B57C0BB83EF95F6896EBCF6F75AB3D0
Authority key identifier: 2C:D9:7A:94:13:B1:CC:B3:10:B4:98:A7:4E:16:2C:20:32:5B:5D:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CD97A9413B1CCB310B498A74E162C20325B5DCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/323830343a343639343a3a2f33322d3334203d3e20323636393938.roa
Signing time:             Thu 30 Nov 2023 14:19:01 +0000
ROA not before:           Thu 30 Nov 2023 14:14:01 +0000
ROA not after:            Thu 28 Nov 2024 14:19:01 +0000
asID:                     266998
IP address blocks:        2804:4694::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:47:19:24:9b:57:c0:bb:83:ef:95:f6:89:6e:bc:f6:f7:5a:b3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD97A9413B1CCB310B498A74E162C20325B5DCF
        Validity
            Not Before: Nov 30 14:14:01 2023 GMT
            Not After : Nov 28 14:19:01 2024 GMT
        Subject: CN=51915EA5E5227102398C0E8BD453D3C5E950D266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:ee:bc:ac:8a:e6:de:cf:f5:52:24:41:96:
                    77:2a:7d:60:0f:8a:91:42:92:0e:f9:bc:f6:c8:df:
                    4f:e2:1a:21:8d:98:05:b2:95:c6:21:17:df:bf:b7:
                    04:fb:a3:7d:44:8e:3b:78:3d:61:b7:d3:8f:23:63:
                    cf:54:12:36:e9:b7:18:a5:e3:69:39:b8:20:6a:d3:
                    94:6c:08:10:80:ef:b2:35:ce:2e:04:f3:1d:f4:e3:
                    e2:63:31:88:23:ce:39:0b:cc:82:fa:6b:a6:df:2b:
                    b4:c9:e8:fa:76:46:12:02:37:85:d2:81:86:c3:93:
                    9c:08:4f:ce:2f:fd:d8:d3:dd:12:cf:9c:4b:65:92:
                    57:5a:45:23:fc:8c:c0:53:0c:05:6f:1a:cd:d3:36:
                    2d:ac:eb:4a:42:bb:06:4d:74:32:02:0f:48:e3:6d:
                    72:d7:c1:73:3c:ab:77:6f:de:d8:88:0e:ee:11:28:
                    fb:2d:10:e9:da:72:24:41:b7:96:50:e2:c4:37:0d:
                    4d:60:f3:93:28:6c:ae:47:5f:db:96:68:70:b1:56:
                    91:6e:fc:21:e1:4f:05:08:45:aa:18:ab:f5:6d:b2:
                    25:23:29:9b:c1:b5:83:e8:65:b9:2a:af:a4:64:0f:
                    ef:34:1c:c0:37:78:da:18:4b:4e:58:61:09:5f:0e:
                    60:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:91:5E:A5:E5:22:71:02:39:8C:0E:8B:D4:53:D3:C5:E9:50:D2:66
            X509v3 Authority Key Identifier:
                keyid:2C:D9:7A:94:13:B1:CC:B3:10:B4:98:A7:4E:16:2C:20:32:5B:5D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/2CD97A9413B1CCB310B498A74E162C20325B5DCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CD97A9413B1CCB310B498A74E162C20325B5DCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/323830343a343639343a3a2f33322d3334203d3e20323636393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4694::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:07:e8:ec:81:43:dd:c3:ab:16:c8:a5:c8:20:21:1a:6e:6d:
         10:db:70:97:79:54:54:63:cf:96:07:95:2d:66:d1:89:e5:aa:
         d8:fb:99:55:6c:b0:e5:e7:32:9b:39:1a:7f:db:b3:f1:50:25:
         65:b2:f8:da:db:73:e9:13:e5:2e:f7:41:f2:9f:ec:66:7c:c4:
         76:71:b7:4a:0c:fa:ab:af:8a:30:01:78:96:83:5d:f7:93:13:
         92:76:42:5b:7c:ed:bc:5e:77:99:04:41:61:2f:15:bd:c7:b7:
         05:5a:f1:15:5b:f6:c4:4c:32:ff:94:12:61:e6:cf:f5:90:f8:
         73:1d:c0:a2:02:df:55:44:ee:09:75:ed:49:5e:a1:43:4c:39:
         e3:9f:55:4d:3b:68:73:79:4d:50:05:bf:b2:fa:b2:d3:aa:37:
         fd:2b:a7:10:da:30:b5:24:ab:c5:0c:8a:d5:52:cc:ac:18:f9:
         a9:65:29:75:28:f9:c7:49:79:08:06:97:a7:dd:de:5b:f5:0b:
         cc:79:dd:28:42:2b:fd:4a:ab:89:db:00:ff:21:38:00:b4:b1:
         93:3e:13:e3:f1:32:93:91:11:63:b6:56:9b:eb:29:60:bc:6e:
         f8:1e:f1:21:54:c0:fc:40:a8:e6:b5:cd:97:a5:59:3f:eb:0a:
         0f:03:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----