Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a3a2f33322d3536203d3e20323633313434.roa
File:                     323830343a313736383a3a2f33322d3536203d3e20323633313434.roa (raw, json)
Hash identifier:          1doZHf0yDu/JLW65hqbl1jNc+LwyUBoh6exsYh24B/w=
Subject key identifier:   C4:58:EA:43:6B:6A:F5:09:6E:86:C9:F9:AB:38:1D:ED:BC:60:E0:E7
Certificate issuer:       /CN=72A77C89E0A81B284CF0D90E0AFCAEAF52CB4799
Certificate serial:       7FEE6FF5F9E7C9F3DACC324250008AB9D13DCB88
Authority key identifier: 72:A7:7C:89:E0:A8:1B:28:4C:F0:D9:0E:0A:FC:AE:AF:52:CB:47:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72A77C89E0A81B284CF0D90E0AFCAEAF52CB4799.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a3a2f33322d3536203d3e20323633313434.roa
Signing time:             Tue 30 May 2023 14:22:18 +0000
ROA not before:           Tue 30 May 2023 14:17:18 +0000
ROA not after:            Tue 28 May 2024 14:22:18 +0000
asID:                     263144
IP address blocks:        2804:1768::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ee:6f:f5:f9:e7:c9:f3:da:cc:32:42:50:00:8a:b9:d1:3d:cb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72A77C89E0A81B284CF0D90E0AFCAEAF52CB4799
        Validity
            Not Before: May 30 14:17:18 2023 GMT
            Not After : May 28 14:22:18 2024 GMT
        Subject: CN=C458EA436B6AF5096E86C9F9AB381DEDBC60E0E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e9:5a:bc:91:1b:f0:72:40:53:aa:ab:48:78:
                    3e:b7:cf:f0:28:be:77:cc:78:c5:1c:7e:ca:9e:cf:
                    26:23:cc:45:7a:2f:50:32:71:df:b7:29:ed:7d:5d:
                    03:01:60:b1:16:50:22:92:7a:d8:9c:0c:9b:15:11:
                    d0:a4:90:d5:f4:ad:a1:b5:8c:7b:ba:e0:71:24:d6:
                    ca:b6:63:93:47:a2:e0:7d:7a:f3:54:11:dc:ed:e4:
                    6d:c3:4e:a3:d9:50:16:17:b0:66:ea:f6:b2:4c:ff:
                    56:39:03:9e:e2:c6:59:6d:dd:45:de:bd:be:c4:0c:
                    36:6d:1b:0d:ce:4f:48:aa:7d:4b:fd:bb:95:db:80:
                    f6:f0:3a:dc:f9:a7:57:3b:22:cf:33:e9:d4:4e:92:
                    14:09:a8:46:4a:45:97:67:45:b8:c1:39:b4:9f:66:
                    a0:de:51:41:6c:55:df:29:d8:fc:38:a2:74:4b:61:
                    57:0a:0b:68:18:79:25:b4:f7:79:fe:2f:d2:ae:f7:
                    82:8c:17:df:43:f8:6e:d3:ff:53:ba:97:21:15:92:
                    1c:26:d3:7d:18:32:c4:97:5a:6b:75:9a:fe:55:b8:
                    73:2f:85:8a:23:4a:e8:62:16:9f:45:90:26:49:a0:
                    f4:bb:5f:15:3c:3a:ee:bb:b8:62:ef:b2:a4:76:10:
                    1f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:58:EA:43:6B:6A:F5:09:6E:86:C9:F9:AB:38:1D:ED:BC:60:E0:E7
            X509v3 Authority Key Identifier:
                keyid:72:A7:7C:89:E0:A8:1B:28:4C:F0:D9:0E:0A:FC:AE:AF:52:CB:47:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/72A77C89E0A81B284CF0D90E0AFCAEAF52CB4799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72A77C89E0A81B284CF0D90E0AFCAEAF52CB4799.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a3a2f33322d3536203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:1f:ea:b9:d9:43:95:b3:d4:2f:03:95:b2:76:3f:2a:af:24:
         33:5d:be:6f:f6:89:2a:d2:39:ea:34:82:a8:97:ce:f1:be:20:
         b1:a6:46:3f:f3:5d:34:da:e4:77:91:a9:38:9a:04:94:18:92:
         78:9e:14:7b:39:ed:71:2d:db:02:56:65:43:3f:20:70:7a:62:
         71:90:a6:50:6b:11:e6:df:58:bc:ca:a0:87:27:03:f3:27:60:
         e4:88:17:79:cc:30:79:ee:af:81:48:b8:7d:ec:c4:e4:fd:4f:
         eb:ad:f2:43:65:3e:dd:08:cb:a3:ed:7e:9b:02:4c:c0:c3:16:
         3c:f2:84:0f:f1:1f:e9:f6:e8:1b:b3:14:90:14:b6:c9:09:1d:
         e7:d2:7a:20:72:1c:5f:f6:0f:d0:61:0d:2a:32:cc:17:58:fe:
         e5:4f:0c:a1:b4:74:a9:9f:e6:5f:6f:b7:ff:d6:e6:22:76:6e:
         dd:ba:2e:c9:e8:78:31:17:cc:84:a4:a1:cd:99:b8:0c:23:67:
         7b:41:ff:55:6c:35:89:5a:0d:2c:ad:39:bf:ad:0c:b4:20:e9:
         98:9b:17:d1:61:22:ff:b6:54:6a:b9:68:ce:97:81:38:c2:2e:
         e9:92:17:5b:a3:ed:ac:c0:33:46:10:fd:ca:50:30:b1:70:17:
         d6:96:07:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----