Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/0/323830343a326361633a3a2f33322d3438203d3e20323635323334.roa
File:                     323830343a326361633a3a2f33322d3438203d3e20323635323334.roa (raw, json)
Hash identifier:          m9Iljl3Gjsgln55JYuC/YJ/J9xQ7yOXGXFfBeIlnKM4=
Subject key identifier:   65:C2:97:63:4B:AE:D4:7E:61:20:B2:F4:F7:15:27:2E:D7:2F:3E:0D
Certificate issuer:       /CN=ECAD04592CD55754F7B407BA7025C58F8EAAA65C
Certificate serial:       0A355B03DF0F6B804FBFF40BC3CD7A7C161820F0
Authority key identifier: EC:AD:04:59:2C:D5:57:54:F7:B4:07:BA:70:25:C5:8F:8E:AA:A6:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECAD04592CD55754F7B407BA7025C58F8EAAA65C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/0/323830343a326361633a3a2f33322d3438203d3e20323635323334.roa
Signing time:             Tue 01 Aug 2023 20:00:00 +0000
ROA not before:           Tue 01 Aug 2023 19:55:00 +0000
ROA not after:            Thu 01 Aug 2024 20:00:00 +0000
asID:                     265234
IP address blocks:        2804:2cac::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:35:5b:03:df:0f:6b:80:4f:bf:f4:0b:c3:cd:7a:7c:16:18:20:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECAD04592CD55754F7B407BA7025C58F8EAAA65C
        Validity
            Not Before: Aug  1 19:55:00 2023 GMT
            Not After : Aug  1 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:05:74:e6:6b:a5:99:43:58:cb:35:8e:61:a4:
                    78:82:aa:9c:8e:d7:0b:7e:f2:da:8b:46:14:86:94:
                    21:fc:35:11:de:7f:96:9e:41:f5:8d:16:6f:ce:41:
                    93:b2:08:3f:5b:1c:ed:3e:3c:26:a3:48:f5:ab:93:
                    1f:d0:5b:70:c1:89:1d:5b:93:e2:1b:dc:1a:3c:24:
                    16:bf:47:c4:22:5e:bc:ba:5e:27:06:90:94:e5:c5:
                    71:3e:8c:28:a5:9c:5b:50:f5:7f:19:c8:b4:c5:78:
                    31:b7:d5:6e:c8:e0:24:ae:68:17:fe:8a:84:70:81:
                    66:0c:fa:ac:e7:7f:6e:62:1b:2a:e1:93:8f:1f:45:
                    3a:72:af:ce:93:55:03:5d:55:7c:06:ba:07:85:39:
                    10:00:d1:59:54:cc:14:22:e2:2e:61:ff:7c:29:93:
                    ff:4a:b6:52:b4:57:77:9c:48:fc:04:28:61:ee:b1:
                    3b:63:03:58:31:6a:79:80:6f:66:0f:f1:4b:2a:0c:
                    e7:f1:12:49:3c:6a:c0:3e:37:c7:24:5e:57:59:14:
                    c5:cf:23:63:fc:e8:3c:37:8a:19:45:83:ee:9c:e8:
                    84:11:e0:58:fd:34:ac:ca:5c:98:7c:19:2a:fa:21:
                    20:1d:97:83:4c:52:0a:57:1e:ff:84:a4:c8:1c:a7:
                    ab:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C2:97:63:4B:AE:D4:7E:61:20:B2:F4:F7:15:27:2E:D7:2F:3E:0D
            X509v3 Authority Key Identifier:
                keyid:EC:AD:04:59:2C:D5:57:54:F7:B4:07:BA:70:25:C5:8F:8E:AA:A6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/0/ECAD04592CD55754F7B407BA7025C58F8EAAA65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECAD04592CD55754F7B407BA7025C58F8EAAA65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/0/323830343a326361633a3a2f33322d3438203d3e20323635323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cac::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:78:04:fc:ea:e6:6c:09:f5:0c:56:44:9d:5a:4a:29:aa:da:
         09:31:19:49:c8:11:b8:4d:67:aa:40:6e:28:0e:c1:83:2a:2a:
         88:4b:3a:9d:57:0d:26:c2:e9:a8:a0:c7:78:c2:4a:3a:f4:95:
         aa:72:56:47:a0:c2:5f:8c:54:99:7a:40:70:42:8a:69:ef:86:
         c0:10:6e:21:06:5f:e1:74:ff:f1:8b:99:46:c9:36:a4:44:93:
         48:de:c6:0d:88:12:68:29:ff:34:a6:af:b1:f8:da:2c:ed:4b:
         e3:f7:ad:e4:c8:4b:33:b8:45:ba:a7:69:d4:63:aa:18:85:a5:
         d4:3d:6f:de:6a:fe:10:99:f0:84:dd:bd:66:39:75:61:12:11:
         d6:e0:b4:09:24:2a:15:b1:92:d5:8f:e9:7f:0f:0a:05:e2:98:
         da:6a:05:72:63:70:9f:b3:2f:b7:07:c9:fa:a3:f4:47:38:78:
         17:81:db:a1:fe:99:59:78:09:0c:36:58:4c:82:ae:ae:44:03:
         2d:b7:97:16:a9:c6:6b:0b:df:c0:73:72:f4:c5:da:81:5c:1c:
         3d:ba:23:b5:91:82:36:c4:98:10:0b:bd:81:94:4e:ca:cb:38:
         60:fa:be:d6:e2:48:f0:75:77:c2:f1:d2:e8:a1:18:ca:12:10:
         6f:dc:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----