Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/323830343a353734633a3a2f33322d3332203d3e20323638303537.roa
File:                     323830343a353734633a3a2f33322d3332203d3e20323638303537.roa (raw, json)
Hash identifier:          17N4rQWvLujVQBDcqCFy6f4dgMcNNiHbJXAnhQ+YcqA=
Subject key identifier:   CC:0C:D2:BA:BF:C3:B8:B1:B8:2C:B5:F1:C4:FF:44:50:13:F4:08:5E
Certificate issuer:       /CN=FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB
Certificate serial:       3566C86E8D9918CCABC3232E2B991550EC4F4163
Authority key identifier: FA:32:1B:BC:67:AA:82:64:80:7B:FB:31:73:CC:E7:C3:CE:5B:96:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/323830343a353734633a3a2f33322d3332203d3e20323638303537.roa
Signing time:             Sun 08 Oct 2023 14:30:32 +0000
ROA not before:           Sun 08 Oct 2023 14:25:32 +0000
ROA not after:            Sun 06 Oct 2024 14:30:32 +0000
asID:                     268057
IP address blocks:        2804:574c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:66:c8:6e:8d:99:18:cc:ab:c3:23:2e:2b:99:15:50:ec:4f:41:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB
        Validity
            Not Before: Oct  8 14:25:32 2023 GMT
            Not After : Oct  6 14:30:32 2024 GMT
        Subject: CN=CC0CD2BABFC3B8B1B82CB5F1C4FF445013F4085E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:31:68:62:1a:26:78:81:7a:aa:13:d7:32:
                    eb:99:9b:b3:d9:63:1d:f9:5b:ca:45:82:6e:82:88:
                    95:c5:f7:3c:05:bb:96:17:bc:66:17:64:2f:e8:6e:
                    9d:5a:ca:93:33:29:75:55:c2:11:cf:0e:71:bc:d5:
                    ea:6b:75:2b:d5:49:ef:30:b7:9b:ba:f0:cf:ee:7f:
                    7f:af:d8:a9:dc:cf:9a:2a:c3:d6:9a:05:2a:5e:65:
                    fe:b3:c9:96:ac:13:1c:5d:b9:4f:50:9f:ff:72:40:
                    56:29:e5:07:27:4b:e4:c3:61:d0:79:a9:0b:f1:c3:
                    5e:db:3d:5f:fa:83:56:37:8e:90:5c:4b:ae:cd:86:
                    bd:1d:61:9d:19:d0:5c:48:92:37:7c:44:98:47:1e:
                    9f:4e:0b:5a:ea:2c:1e:4a:ce:80:e4:86:be:fb:63:
                    58:ed:8d:32:04:3f:89:2d:0c:f1:c1:7f:44:90:7a:
                    1b:aa:27:9f:f7:f8:f4:94:4a:6a:ed:2f:32:bd:16:
                    07:4c:ed:c4:e4:8d:78:39:95:6e:fa:7d:88:71:36:
                    e2:2a:d9:1a:07:cc:ba:fe:14:96:c7:7a:ef:42:3e:
                    b1:17:39:29:6b:63:14:10:81:46:2b:21:ad:c5:06:
                    80:32:37:96:0a:c2:7b:44:fa:ca:d6:a3:98:9c:0b:
                    52:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0C:D2:BA:BF:C3:B8:B1:B8:2C:B5:F1:C4:FF:44:50:13:F4:08:5E
            X509v3 Authority Key Identifier:
                keyid:FA:32:1B:BC:67:AA:82:64:80:7B:FB:31:73:CC:E7:C3:CE:5B:96:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/323830343a353734633a3a2f33322d3332203d3e20323638303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:574c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:78:8e:b8:5c:4f:1b:61:41:3c:53:a9:ff:cc:ae:5a:88:26:
         0a:d0:78:33:b5:f4:6e:0c:b6:0a:5a:cc:95:e4:f0:04:a3:87:
         dd:19:cb:2c:c2:08:28:ac:fe:02:3f:97:1e:ae:a6:dd:58:b0:
         25:d0:2a:d0:71:91:ae:c1:36:b2:86:10:49:4b:8f:aa:5b:5f:
         ec:b5:3f:08:7b:19:99:d1:45:e9:07:d2:d7:7e:93:bb:6c:a6:
         72:bd:68:03:09:7f:0c:e6:9c:12:29:74:6b:b5:5e:65:f5:f9:
         39:c0:d7:47:40:c3:ce:cd:f1:b1:ec:63:11:f3:7b:c8:46:36:
         e1:5b:6c:4d:5f:e9:9f:ca:df:7f:49:8b:7b:47:93:da:c9:6f:
         54:9f:39:9f:05:f4:48:b1:67:4d:23:84:b5:39:34:b0:af:a7:
         66:2f:6f:4b:2b:84:7b:ef:ea:b3:72:c8:a9:5d:9c:a2:39:0f:
         f8:cd:b6:5d:62:dd:65:7b:59:ec:f9:c7:9e:45:6b:66:46:d1:
         61:88:5d:fe:2a:93:b5:01:70:59:f6:39:43:81:c2:4f:5e:f6:
         86:f7:2d:87:30:e7:e5:13:83:d9:57:13:c8:c9:85:0a:d1:72:
         23:c7:bd:06:3f:f7:f1:a3:97:3c:37:3b:2d:ad:5c:6a:18:6e:
         99:e5:24:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----