Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/323830343a353932633a3a2f33332d3333203d3e20323638313733.roa
File:                     323830343a353932633a3a2f33332d3333203d3e20323638313733.roa (raw, json)
Hash identifier:          dDYV6+sLpQ+S2LVW8TdbewxR7P5i9PEMZ2jO57Fz5xA=
Subject key identifier:   35:19:70:5E:9A:27:8B:66:44:3F:C3:F2:82:59:1F:DC:4F:53:76:83
Certificate issuer:       /CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
Certificate serial:       0DECFF61CAF0765CB0F3D0C81A0BDA8A8F84BD02
Authority key identifier: 35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/323830343a353932633a3a2f33332d3333203d3e20323638313733.roa
Signing time:             Tue 15 Aug 2023 18:23:04 +0000
ROA not before:           Tue 15 Aug 2023 18:18:04 +0000
ROA not after:            Tue 13 Aug 2024 18:23:04 +0000
asID:                     268173
IP address blocks:        2804:592c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ec:ff:61:ca:f0:76:5c:b0:f3:d0:c8:1a:0b:da:8a:8f:84:bd:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
        Validity
            Not Before: Aug 15 18:18:04 2023 GMT
            Not After : Aug 13 18:23:04 2024 GMT
        Subject: CN=3519705E9A278B66443FC3F282591FDC4F537683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0d:77:5f:a4:6b:d0:f6:0b:0d:ed:f2:97:7b:
                    14:c3:4f:90:58:85:c3:ee:32:fd:f4:ef:e1:4e:65:
                    b3:fc:6f:8f:78:4f:f7:08:c2:62:b5:bb:f1:1a:f2:
                    53:c6:81:38:5c:b5:cc:a4:46:a7:02:7d:75:a6:f6:
                    65:33:43:f1:de:64:19:4a:a6:45:fe:5e:ca:fe:c3:
                    a9:fe:b9:47:0f:3a:01:e4:2b:61:54:e0:d7:d6:a3:
                    ea:ce:42:83:8c:bd:e2:96:64:42:12:b2:5b:2d:16:
                    77:5e:4f:53:7f:57:b8:55:1b:53:ba:97:a2:5e:c8:
                    81:58:f1:9e:e3:77:95:0c:fe:d4:03:d9:63:2f:d7:
                    aa:b2:97:df:7c:b3:c5:f6:d7:23:38:ae:88:5d:ff:
                    1a:17:0a:b0:ba:ec:be:39:9b:01:74:36:db:6e:6b:
                    98:74:ed:a9:a8:c7:10:32:88:ae:ef:3a:7e:99:bb:
                    05:0a:8d:79:8c:92:96:18:02:8d:fc:0f:94:8f:de:
                    70:bf:a1:e7:75:93:65:35:7a:78:ca:7a:9f:84:60:
                    a9:8f:99:4e:40:88:54:a8:7e:c6:1e:ff:b9:be:bc:
                    bd:70:47:c0:89:64:4f:72:84:fe:f7:11:1f:d0:4f:
                    20:0f:3c:fa:fc:16:f1:af:fd:cf:61:05:19:c2:00:
                    b1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:19:70:5E:9A:27:8B:66:44:3F:C3:F2:82:59:1F:DC:4F:53:76:83
            X509v3 Authority Key Identifier:
                keyid:35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/323830343a353932633a3a2f33332d3333203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:592c::/33

    Signature Algorithm: sha256WithRSAEncryption
         58:12:b1:51:89:a6:8a:88:56:d7:26:41:35:7e:b7:26:17:1c:
         bb:80:b6:7e:31:e4:c7:09:bf:9b:af:a0:46:9d:1d:03:6a:2a:
         ce:0f:7c:fb:fc:8b:a4:c5:28:88:bf:97:06:ec:cd:03:86:47:
         2f:04:da:67:9b:62:70:9a:a0:06:b4:c5:a3:af:39:16:e4:f2:
         cd:a6:93:ee:34:34:ed:9a:6e:77:fa:42:68:bd:29:18:49:37:
         98:a0:28:6b:30:da:b6:37:fb:a4:29:67:df:43:f6:30:d9:59:
         bc:51:d2:d6:37:4b:2c:92:0e:f1:7c:07:f7:1b:1a:3e:b5:1d:
         8f:28:85:94:29:6d:e0:4d:55:3f:93:18:c5:88:e2:7d:19:ef:
         4a:f0:25:0b:65:d8:21:16:bd:18:29:23:db:62:5a:47:17:92:
         fb:64:68:c0:05:fa:07:cf:bf:91:1a:05:ff:ef:2f:b1:e1:f6:
         4e:92:b3:39:78:4f:c6:67:79:87:86:00:dc:e3:75:b2:4d:37:
         81:53:a0:1e:a0:f9:77:b3:c7:e7:c0:c3:9e:00:ac:15:a1:b1:
         bd:99:aa:da:04:2c:7a:bc:7e:4a:d7:ae:98:bb:c8:8e:14:93:
         ff:25:2e:4a:01:15:7f:e6:b9:10:b1:cb:8a:64:98:40:df:d1:
         36:e6:56:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----