Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/323830343a333639343a3a2f33322d3438203d3e20323636333537.roa
File:                     323830343a333639343a3a2f33322d3438203d3e20323636333537.roa (raw, json)
Hash identifier:          yHKykoh2E1s9h4887Tggpf9y3sIIA1o2D18hsrSRrfk=
Subject key identifier:   45:AD:28:BA:4E:14:E7:EF:31:13:61:A0:89:23:76:86:7F:58:D1:4A
Certificate issuer:       /CN=3DBEB64A443F0D98C05394A8D49BA04EF5C0D152
Certificate serial:       5FB4542B2ADF7A529FC486731C733344C4C2EFF9
Authority key identifier: 3D:BE:B6:4A:44:3F:0D:98:C0:53:94:A8:D4:9B:A0:4E:F5:C0:D1:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DBEB64A443F0D98C05394A8D49BA04EF5C0D152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/323830343a333639343a3a2f33322d3438203d3e20323636333537.roa
Signing time:             Sun 06 Aug 2023 14:00:00 +0000
ROA not before:           Sun 06 Aug 2023 13:55:00 +0000
ROA not after:            Tue 06 Aug 2024 14:00:00 +0000
asID:                     266357
IP address blocks:        2804:3694::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b4:54:2b:2a:df:7a:52:9f:c4:86:73:1c:73:33:44:c4:c2:ef:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DBEB64A443F0D98C05394A8D49BA04EF5C0D152
        Validity
            Not Before: Aug  6 13:55:00 2023 GMT
            Not After : Aug  6 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0c:62:21:83:69:4d:cb:0d:47:e4:62:1a:7b:
                    2f:a8:23:83:2d:5f:88:60:71:2a:95:04:c4:50:c7:
                    a2:04:9c:c0:d4:75:01:7d:24:75:ab:b6:a2:f6:b4:
                    9a:a8:a6:d1:2f:e2:86:62:cc:ef:fe:ea:57:00:29:
                    85:a8:ff:72:92:37:e2:27:d5:81:5a:a8:5d:e0:1f:
                    15:30:c6:2e:e7:59:0d:2a:dd:40:91:f6:9a:ac:39:
                    be:13:58:2d:1a:b4:8b:e9:bb:7d:9b:da:04:36:4f:
                    4a:15:dd:18:2e:9e:b4:ae:9f:62:82:cf:0a:86:61:
                    2d:84:49:20:a2:ac:2e:df:7a:7b:75:d2:61:f4:14:
                    e1:56:d5:04:c8:8e:9f:d5:49:5b:20:c8:28:af:fe:
                    21:04:3f:6c:5c:63:25:37:85:03:32:7b:47:39:07:
                    92:5d:33:05:b4:b3:ac:46:d8:19:b5:c5:42:f7:35:
                    83:2b:95:28:52:5d:8a:0b:27:67:f2:95:00:16:a4:
                    a5:e5:6b:2d:25:9f:34:43:22:4c:32:08:81:b5:ab:
                    d7:aa:d6:71:be:75:0b:59:9e:82:44:0d:7d:72:ad:
                    83:d5:50:98:42:9a:c3:71:ff:89:28:1c:29:e2:ee:
                    1b:6f:ca:5c:f8:f3:97:fa:75:e3:f5:9a:8c:eb:42:
                    fc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AD:28:BA:4E:14:E7:EF:31:13:61:A0:89:23:76:86:7F:58:D1:4A
            X509v3 Authority Key Identifier:
                keyid:3D:BE:B6:4A:44:3F:0D:98:C0:53:94:A8:D4:9B:A0:4E:F5:C0:D1:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/3DBEB64A443F0D98C05394A8D49BA04EF5C0D152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DBEB64A443F0D98C05394A8D49BA04EF5C0D152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/323830343a333639343a3a2f33322d3438203d3e20323636333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3694::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:9d:4f:2d:47:df:5a:21:c1:40:53:71:e8:11:87:72:30:11:
         1d:c7:4d:5f:e7:1d:d1:3c:19:f9:21:ec:04:db:e9:35:bb:35:
         09:71:cd:a1:1f:9b:ec:49:cb:11:e7:61:a0:0c:b0:a5:e2:59:
         b0:4d:e7:06:b4:ec:b7:47:24:3a:3f:e9:52:b9:a5:7d:83:c8:
         9f:3a:69:0e:19:1b:ef:ef:b3:c0:39:ce:84:68:00:e3:28:eb:
         f3:8b:57:57:f7:bb:87:2c:40:b6:a7:b1:59:8c:f5:22:a1:3f:
         34:95:2b:fd:71:fc:04:19:3b:75:72:1e:5a:ff:78:11:97:81:
         f5:5c:9b:cd:c8:eb:01:78:18:11:f8:bb:12:60:16:23:10:62:
         87:24:19:6f:be:a0:d1:48:0c:9a:df:28:3e:1e:0d:b9:da:d5:
         c1:3c:ee:2e:55:f7:2d:eb:d1:ee:b9:a6:21:b5:aa:16:e2:01:
         0e:76:a3:b1:e3:cc:41:60:a9:ac:3b:f0:2e:d0:02:6b:b7:e2:
         16:66:e7:18:88:46:e5:30:4b:5f:82:be:96:0c:bd:ee:69:95:
         05:1f:1a:8d:65:e8:99:5e:af:cc:8f:7d:c1:ab:30:1b:1e:30:
         a4:0e:b8:02:e8:29:ac:8c:97:c1:bf:ca:c6:8e:8b:7e:23:3a:
         1f:07:8a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----