Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/323830343a326136343a3a2f33322d3332203d3e20323632363434.roa
File:                     323830343a326136343a3a2f33322d3332203d3e20323632363434.roa (raw, json)
Hash identifier:          qBBPr74zhBD6/6MLiwhqS1+fn1bctIw5vS9v/13aVMI=
Subject key identifier:   2C:71:85:26:9D:23:F0:99:81:3D:C9:BE:F6:86:CA:90:49:F1:36:10
Certificate issuer:       /CN=A36D32C195FDA89F6C59D45DA80E6AB9A7DCB280
Certificate serial:       2BA320BFB024FFAE85DE357E3DEB9DBF24BB41BD
Authority key identifier: A3:6D:32:C1:95:FD:A8:9F:6C:59:D4:5D:A8:0E:6A:B9:A7:DC:B2:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A36D32C195FDA89F6C59D45DA80E6AB9A7DCB280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/323830343a326136343a3a2f33322d3332203d3e20323632363434.roa
Signing time:             Sat 18 Feb 2023 20:11:49 +0000
ROA not before:           Sat 18 Feb 2023 20:06:49 +0000
ROA not after:            Sat 17 Feb 2024 20:11:49 +0000
asID:                     262644
IP address blocks:        2804:2a64::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a3:20:bf:b0:24:ff:ae:85:de:35:7e:3d:eb:9d:bf:24:bb:41:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36D32C195FDA89F6C59D45DA80E6AB9A7DCB280
        Validity
            Not Before: Feb 18 20:06:49 2023 GMT
            Not After : Feb 17 20:11:49 2024 GMT
        Subject: CN=2C7185269D23F099813DC9BEF686CA9049F13610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ba:5f:63:6c:a4:b4:20:c2:53:33:61:f5:53:
                    4f:91:86:03:cf:31:97:e4:96:5b:11:41:f2:77:2d:
                    cb:81:bd:d8:95:5d:fa:b4:3c:97:19:6b:7e:78:86:
                    f7:aa:7d:2d:7d:12:7e:4c:5f:85:c2:12:d8:9f:56:
                    b5:bc:b6:0a:cb:72:a5:4a:51:59:ed:a8:d9:5c:8e:
                    16:90:c4:58:a3:7e:e8:47:c6:8d:3f:04:d1:93:64:
                    65:d8:46:c7:2e:9f:74:d0:e4:d2:33:27:98:2e:39:
                    99:57:9e:7e:d9:19:e8:2d:b9:01:08:0e:ea:fb:27:
                    16:57:d1:57:8e:6f:71:d5:53:76:56:9b:fd:f9:19:
                    0d:07:eb:75:78:d3:f6:c5:a9:ae:1c:66:ad:52:99:
                    0b:d9:d1:88:68:e6:13:03:48:ec:c3:a1:ff:27:0b:
                    26:32:97:37:8e:00:35:47:69:92:71:2a:da:c3:fe:
                    22:4a:d0:fe:6e:0b:02:fb:25:fc:03:a6:6f:02:da:
                    fc:d1:df:bc:e9:b0:67:5a:2a:e4:04:62:c3:69:64:
                    a1:f3:d1:62:67:a4:22:90:6f:c1:62:9d:9e:7a:40:
                    76:23:01:34:cf:2b:4e:a6:98:95:0c:74:a6:20:b0:
                    40:d2:22:2a:1d:44:a2:14:62:a3:92:9d:8f:69:4c:
                    43:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:71:85:26:9D:23:F0:99:81:3D:C9:BE:F6:86:CA:90:49:F1:36:10
            X509v3 Authority Key Identifier:
                keyid:A3:6D:32:C1:95:FD:A8:9F:6C:59:D4:5D:A8:0E:6A:B9:A7:DC:B2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/A36D32C195FDA89F6C59D45DA80E6AB9A7DCB280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A36D32C195FDA89F6C59D45DA80E6AB9A7DCB280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/323830343a326136343a3a2f33322d3332203d3e20323632363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:67:ac:15:d7:85:78:35:cb:2e:c5:1c:58:ef:3a:90:2d:42:
         6f:b6:78:17:8a:69:a1:38:ee:09:31:e4:e9:a1:53:54:27:bd:
         da:e4:7f:c4:12:de:1c:5f:46:0a:8c:51:78:a7:73:13:26:b2:
         50:2c:37:a4:e0:cb:ab:cb:d1:8c:56:38:63:a3:d9:20:9f:77:
         a4:bd:99:d4:48:6b:02:38:e5:96:1e:d2:1b:db:6b:aa:b3:43:
         aa:7d:5f:7c:78:ad:dc:3c:3e:a6:4c:f6:55:9f:b6:d3:0e:74:
         50:6f:49:a4:21:03:df:d5:f9:38:08:da:72:48:16:aa:30:f3:
         8d:07:43:a4:87:f1:ac:37:9f:18:9f:cc:51:4b:a4:35:8e:2f:
         17:cd:e7:1a:08:da:4f:cd:3b:37:64:d5:00:76:68:29:aa:f7:
         a9:34:16:b2:df:36:ce:27:0f:0f:c2:04:8f:b1:55:eb:bb:e0:
         af:1e:5e:0d:5f:63:c5:0c:0f:1d:69:ae:09:de:b3:6e:3d:23:
         cc:b3:67:b3:1e:7a:40:58:69:7c:f0:ed:ea:b2:df:c7:7e:6c:
         21:7e:43:eb:b0:a1:5c:6f:67:d2:2c:de:8f:e0:d6:d8:13:7c:
         ef:fa:93:8f:c3:8b:cc:28:1a:dc:5e:cc:ec:30:f4:6a:72:a6:
         a3:9c:98:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----