Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/323830343a323566633a3a2f33322d3438203d3e20323634333136.roa
File:                     323830343a323566633a3a2f33322d3438203d3e20323634333136.roa (raw, json)
Hash identifier:          2JpHpXcqoH7urdLppw7YLg4uRIS0wqJfRYBf/ZeMWHk=
Subject key identifier:   A3:B6:79:71:F8:09:89:71:8B:71:CA:C8:4E:E8:FB:9C:3D:43:6C:9D
Certificate issuer:       /CN=4B636FB3961CD045C818076A2069682C281598C9
Certificate serial:       5436F1A17994D3EFAE0170CBF29358F9D34F5144
Authority key identifier: 4B:63:6F:B3:96:1C:D0:45:C8:18:07:6A:20:69:68:2C:28:15:98:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B636FB3961CD045C818076A2069682C281598C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/323830343a323566633a3a2f33322d3438203d3e20323634333136.roa
Signing time:             Thu 21 Sep 2023 13:40:00 +0000
ROA not before:           Thu 21 Sep 2023 13:35:00 +0000
ROA not after:            Thu 19 Sep 2024 13:40:00 +0000
asID:                     264316
IP address blocks:        2804:25fc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:36:f1:a1:79:94:d3:ef:ae:01:70:cb:f2:93:58:f9:d3:4f:51:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B636FB3961CD045C818076A2069682C281598C9
        Validity
            Not Before: Sep 21 13:35:00 2023 GMT
            Not After : Sep 19 13:40:00 2024 GMT
        Subject: CN=3082010A0282010100DD44555B03DE07217AE52C5A2B5945BE60811ED79219F5F25651515CC02D2B066217CC5815B23292FCC81740652B0E089AAF19490E48FBADC23B80A73594D58A96DC07898A14CD70FEB84165BBD07F9B42F1A51173DD4791213788BDE0CE17FA0D05714223115F043224F947F5A67F04473BF6194161E0B6171CACB1743F353CA67724805753EEC41E28F3FF08E41EA544A2FB42A7A0BF02274A02168E18544DD6FC2515131FABB38018310E7437FD2B89F7562678D403D48B728F4E98F875FB06520431BDE009DF59366AD86F1B3423AF2B5304E1204405A63CC2F1FFA5CEEC38B108B0B0922D1A811BB1BEC75CF84093E8B57DAEF6269F6863A06C1F1F374D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:44:55:5b:03:de:07:21:7a:e5:2c:5a:2b:59:
                    45:be:60:81:1e:d7:92:19:f5:f2:56:51:51:5c:c0:
                    2d:2b:06:62:17:cc:58:15:b2:32:92:fc:c8:17:40:
                    65:2b:0e:08:9a:af:19:49:0e:48:fb:ad:c2:3b:80:
                    a7:35:94:d5:8a:96:dc:07:89:8a:14:cd:70:fe:b8:
                    41:65:bb:d0:7f:9b:42:f1:a5:11:73:dd:47:91:21:
                    37:88:bd:e0:ce:17:fa:0d:05:71:42:23:11:5f:04:
                    32:24:f9:47:f5:a6:7f:04:47:3b:f6:19:41:61:e0:
                    b6:17:1c:ac:b1:74:3f:35:3c:a6:77:24:80:57:53:
                    ee:c4:1e:28:f3:ff:08:e4:1e:a5:44:a2:fb:42:a7:
                    a0:bf:02:27:4a:02:16:8e:18:54:4d:d6:fc:25:15:
                    13:1f:ab:b3:80:18:31:0e:74:37:fd:2b:89:f7:56:
                    26:78:d4:03:d4:8b:72:8f:4e:98:f8:75:fb:06:52:
                    04:31:bd:e0:09:df:59:36:6a:d8:6f:1b:34:23:af:
                    2b:53:04:e1:20:44:05:a6:3c:c2:f1:ff:a5:ce:ec:
                    38:b1:08:b0:b0:92:2d:1a:81:1b:b1:be:c7:5c:f8:
                    40:93:e8:b5:7d:ae:f6:26:9f:68:63:a0:6c:1f:1f:
                    37:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B6:79:71:F8:09:89:71:8B:71:CA:C8:4E:E8:FB:9C:3D:43:6C:9D
            X509v3 Authority Key Identifier:
                keyid:4B:63:6F:B3:96:1C:D0:45:C8:18:07:6A:20:69:68:2C:28:15:98:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/4B636FB3961CD045C818076A2069682C281598C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B636FB3961CD045C818076A2069682C281598C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/323830343a323566633a3a2f33322d3438203d3e20323634333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:b2:78:35:42:57:4c:30:8b:2a:e9:b7:75:9c:bc:80:0b:ff:
         db:58:4e:83:ef:ab:63:a6:9d:21:1e:c3:7a:8f:4e:87:fc:36:
         ff:f6:e9:fe:f1:f0:4b:df:c8:11:d3:1f:e9:49:e6:54:d2:4d:
         6c:21:1b:25:f1:84:66:9a:0c:f1:53:5f:6a:23:0f:d9:1d:e9:
         0d:83:f8:8c:8b:9a:1c:f2:7e:03:b9:2d:30:c6:ae:88:cb:ab:
         e4:c2:1a:49:ce:79:b3:e5:2b:68:81:11:86:42:c3:70:93:4e:
         a6:94:9b:e4:71:81:a3:ca:4d:5f:4b:c7:68:30:f9:83:94:0c:
         fd:cc:8f:09:10:70:76:26:b7:fe:08:53:ed:9e:65:54:1b:ef:
         af:2c:fc:e6:7f:5d:c6:8a:ec:37:3c:cc:6c:40:d4:d0:da:46:
         ae:d1:04:b6:6d:58:1f:7e:87:90:ec:41:91:0c:b6:7f:b1:aa:
         fb:3a:0d:de:f6:91:93:98:4f:6b:80:97:d0:8d:47:80:6b:95:
         59:78:f4:58:dd:22:23:d3:75:81:cd:02:1b:e1:45:7e:06:a3:
         f0:6c:b4:8e:06:ab:4c:69:45:c5:ee:bc:1b:26:c1:1c:6a:a2:
         d2:73:40:ab:b7:82:79:17:e4:d7:b2:4f:de:91:b7:50:2e:62:
         64:e5:cc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----