Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FEHGio6WE6wMBsn2zf7D4L1wthyHWKH79BzTF33vrqQh/1/323830343a313635633a3a2f33322d3438203d3e20323633323834.roa
File:                     323830343a313635633a3a2f33322d3438203d3e20323633323834.roa (raw, json)
Hash identifier:          Laos/C7CSFCxnWcS+JTiQARVBkLnWjUP61oz4FQzZAI=
Subject key identifier:   73:F8:A5:50:41:7B:8D:EB:1F:27:50:69:D7:E2:46:14:BC:9A:CB:50
Certificate issuer:       /CN=E0D061E259583B3187FDE1FBA327FF295D9C5295
Certificate serial:       2FE9BCE5527975D49E82FF3905F141FA00CF514A
Authority key identifier: E0:D0:61:E2:59:58:3B:31:87:FD:E1:FB:A3:27:FF:29:5D:9C:52:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D061E259583B3187FDE1FBA327FF295D9C5295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FEHGio6WE6wMBsn2zf7D4L1wthyHWKH79BzTF33vrqQh/1/323830343a313635633a3a2f33322d3438203d3e20323633323834.roa
Signing time:             Mon 07 Aug 2023 12:19:43 +0000
ROA not before:           Mon 07 Aug 2023 12:14:43 +0000
ROA not after:            Mon 05 Aug 2024 12:19:43 +0000
asID:                     263284
IP address blocks:        2804:165c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e9:bc:e5:52:79:75:d4:9e:82:ff:39:05:f1:41:fa:00:cf:51:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0D061E259583B3187FDE1FBA327FF295D9C5295
        Validity
            Not Before: Aug  7 12:14:43 2023 GMT
            Not After : Aug  5 12:19:43 2024 GMT
        Subject: CN=73F8A550417B8DEB1F275069D7E24614BC9ACB50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:78:2d:54:43:a6:47:c5:cf:0a:7e:25:a3:
                    31:d0:9c:c1:0a:cf:f9:43:ee:85:cc:1a:0e:6c:fd:
                    7e:7e:a9:f4:6f:49:6d:1b:30:be:72:9c:25:28:22:
                    0c:44:13:fc:f1:bf:41:77:42:e5:f8:e9:99:ba:ac:
                    db:d6:6a:14:99:cc:fd:18:ff:10:17:c2:b7:a4:13:
                    19:14:e4:72:af:bd:18:88:26:df:38:81:8d:31:46:
                    e3:25:6d:65:1e:f2:8c:09:85:0b:9f:e5:dd:d0:4a:
                    16:eb:76:e1:49:4f:2c:08:67:10:1f:01:72:fe:94:
                    47:20:d6:6f:e7:db:9d:95:7b:e3:c9:07:62:d5:da:
                    b4:08:bf:74:9a:ba:06:4f:77:a5:8f:20:94:29:0e:
                    61:bf:68:e4:2c:9a:17:15:56:9a:9f:10:e9:cf:4c:
                    94:77:da:c0:f1:c8:fa:2c:20:3e:09:7e:93:54:76:
                    9e:0a:02:52:2a:42:b4:d9:e5:95:97:96:f3:a8:ef:
                    a4:8d:29:a4:42:69:04:18:8a:e0:1e:00:4c:e9:1b:
                    06:12:5a:93:36:1e:ad:d6:3e:4d:7a:2d:a3:90:42:
                    c7:a5:5e:3e:84:2b:f9:98:34:3f:48:e3:54:ee:85:
                    a2:ee:12:0e:e5:93:37:d2:05:fa:c3:06:fe:e8:66:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F8:A5:50:41:7B:8D:EB:1F:27:50:69:D7:E2:46:14:BC:9A:CB:50
            X509v3 Authority Key Identifier:
                keyid:E0:D0:61:E2:59:58:3B:31:87:FD:E1:FB:A3:27:FF:29:5D:9C:52:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FEHGio6WE6wMBsn2zf7D4L1wthyHWKH79BzTF33vrqQh/1/E0D061E259583B3187FDE1FBA327FF295D9C5295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D061E259583B3187FDE1FBA327FF295D9C5295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FEHGio6WE6wMBsn2zf7D4L1wthyHWKH79BzTF33vrqQh/1/323830343a313635633a3a2f33322d3438203d3e20323633323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:165c::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:4b:40:59:59:5e:ba:9f:18:49:1e:d0:72:7b:1d:92:f5:fd:
         f4:33:90:73:dd:ad:a9:04:76:b8:5a:12:cc:da:46:37:de:a2:
         95:34:4d:d6:61:9f:f8:8a:7d:1a:72:3f:4c:5c:68:fd:76:59:
         e2:7b:0b:91:fb:ff:8b:21:30:65:e9:38:d8:85:7b:a5:fc:8a:
         1c:98:24:02:8f:98:ce:f3:34:67:47:17:c4:20:e6:15:8f:c5:
         e9:9c:e8:45:8f:a4:3e:9f:40:8a:84:11:e4:18:44:23:31:e4:
         3d:e6:6e:e7:87:50:27:5d:c3:72:49:8a:25:12:7f:27:ac:95:
         5a:4f:3f:eb:a7:23:3e:49:cf:85:db:7e:ff:e0:a5:9e:c8:6e:
         aa:46:cb:6d:a1:4a:07:e7:72:f0:43:48:5b:4b:52:de:44:04:
         2f:51:c8:2f:25:a6:04:fc:48:9e:03:81:9f:63:7c:c4:fb:17:
         3e:37:06:d8:e5:6b:92:76:ef:47:af:ca:ac:2b:8a:bd:95:21:
         2b:e0:a4:e2:fc:9d:c4:17:4d:9e:54:b1:30:b5:2a:80:81:05:
         08:8b:0a:83:2b:4d:d2:57:73:91:6e:ac:8e:d6:d4:00:8d:f2:
         cf:d8:30:46:d6:1d:35:56:7e:d5:b4:f0:47:0d:93:10:95:b8:
         a6:f0:76:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----