Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/323830343a333237383a3a2f33322d3332203d3e20323635303830.roa
File:                     323830343a333237383a3a2f33322d3332203d3e20323635303830.roa (raw, json)
Hash identifier:          bqyiv3W18vLlZwBXEP1NgYu4t2CBdMmSVx65+wdr7j4=
Subject key identifier:   F3:0E:C4:79:18:E0:85:72:7B:C1:A9:E5:2E:F6:10:F9:DB:64:FB:2B
Certificate issuer:       /CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
Certificate serial:       3BCBFA317FD41660AFFD17A7A433464C98944545
Authority key identifier: BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/323830343a333237383a3a2f33322d3332203d3e20323635303830.roa
Signing time:             Tue 05 Sep 2023 18:30:14 +0000
ROA not before:           Tue 05 Sep 2023 18:25:14 +0000
ROA not after:            Tue 03 Sep 2024 18:30:14 +0000
asID:                     265080
IP address blocks:        2804:3278::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cb:fa:31:7f:d4:16:60:af:fd:17:a7:a4:33:46:4c:98:94:45:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
        Validity
            Not Before: Sep  5 18:25:14 2023 GMT
            Not After : Sep  3 18:30:14 2024 GMT
        Subject: CN=F30EC47918E085727BC1A9E52EF610F9DB64FB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:01:a6:7f:a0:bc:b6:e3:32:97:35:d4:af:25:
                    54:9e:b1:13:bd:e7:19:5e:c2:f6:ab:19:ff:01:3b:
                    3d:c4:69:f7:be:94:0b:64:90:9c:51:66:67:dc:e9:
                    c1:44:ea:e2:5e:6b:f1:8b:0a:0f:61:9a:4a:6d:4c:
                    e8:6c:3a:e4:8a:8f:0e:3d:27:0e:1d:0b:44:c0:97:
                    66:1c:9b:ea:77:3e:22:1b:ac:6b:90:5b:ed:b8:de:
                    6d:2a:de:13:c1:14:4b:c2:ec:fa:dd:6f:34:db:31:
                    2d:b7:55:d9:f6:64:ba:42:e4:5d:cc:7c:d9:ae:88:
                    7f:94:db:d4:1e:4c:46:1b:4b:51:68:96:a4:c1:fd:
                    5b:a4:a5:e6:80:fe:79:93:4b:0e:8c:81:9b:64:e0:
                    c0:e1:b7:0a:a1:d1:e3:5a:24:ba:89:4e:08:49:45:
                    06:ad:85:05:89:18:ca:aa:9d:b6:ca:8c:8a:c1:6e:
                    23:96:a4:96:d7:a2:82:b9:e7:18:ab:7a:29:43:15:
                    50:f0:6b:c6:24:c4:cf:ac:1d:13:f5:67:d5:ce:91:
                    a8:2c:7e:ef:67:c7:8a:f5:97:f4:eb:1d:2f:98:66:
                    31:56:62:f7:27:f9:13:e9:e2:df:ce:ea:2c:33:1b:
                    22:b7:2a:a5:cd:62:81:46:bb:9e:82:14:cd:71:b3:
                    af:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0E:C4:79:18:E0:85:72:7B:C1:A9:E5:2E:F6:10:F9:DB:64:FB:2B
            X509v3 Authority Key Identifier:
                keyid:BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/323830343a333237383a3a2f33322d3332203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3278::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:ff:2d:f7:60:83:dd:ea:96:07:13:c8:91:89:b8:e5:4f:10:
         58:07:4d:ff:dc:a2:50:08:f5:fc:1f:2b:72:36:97:a8:af:2f:
         22:0a:98:bc:12:3f:d9:a6:bc:02:b9:c9:89:e5:32:f0:e4:9f:
         aa:19:70:85:85:56:cd:4e:7b:41:11:4b:fa:5d:8f:7f:a0:e2:
         55:91:02:03:e5:d9:ae:08:b5:a3:1d:8b:41:3a:8d:c7:3d:d0:
         b8:f6:be:91:ab:59:a3:68:01:d8:58:34:a5:12:3d:25:0a:ae:
         22:ec:87:99:33:87:f8:90:17:31:e7:5a:ef:f6:40:c1:22:15:
         9e:d6:38:d0:cd:e1:ba:f6:ba:2f:dd:34:c8:88:c9:19:5b:e0:
         ec:c9:01:29:df:a3:47:c0:72:45:c7:95:90:0d:3e:19:27:00:
         f7:a7:fa:50:79:09:14:ed:58:82:28:90:01:70:c9:d6:0d:cf:
         75:6c:17:ef:9d:23:56:24:95:a5:66:60:7d:ec:4c:19:01:47:
         97:0a:7a:c6:03:8e:e1:d2:07:e1:c3:9c:55:df:b4:43:a2:6f:
         ae:00:16:3c:bf:1d:b5:9d:58:f1:26:33:d8:16:f8:31:58:27:
         b2:1d:f4:d7:bb:39:e5:51:66:5b:8b:2d:58:ef:b2:7d:b5:e4:
         63:dd:bf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----