Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/323830343a313532383a3a2f33322d3332203d3e20323633333734.roa
File:                     323830343a313532383a3a2f33322d3332203d3e20323633333734.roa (raw, json)
Hash identifier:          WniP9l3c/f2faxPP+vPTI6S7KdcOX3j3T7vEZ1TYSqk=
Subject key identifier:   84:44:0D:2D:CC:6E:9E:BC:51:B7:75:D8:B5:AF:08:48:ED:5D:C9:3B
Certificate issuer:       /CN=1334987718ED4E16EC43102E16C9A8547B52B52F
Certificate serial:       7ED189467579F3D2CDD47BD9A2F3F09AC063A0D3
Authority key identifier: 13:34:98:77:18:ED:4E:16:EC:43:10:2E:16:C9:A8:54:7B:52:B5:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1334987718ED4E16EC43102E16C9A8547B52B52F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/323830343a313532383a3a2f33322d3332203d3e20323633333734.roa
Signing time:             Tue 01 Aug 2023 19:05:44 +0000
ROA not before:           Tue 01 Aug 2023 19:00:44 +0000
ROA not after:            Tue 30 Jul 2024 19:05:44 +0000
asID:                     263374
IP address blocks:        2804:1528::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d1:89:46:75:79:f3:d2:cd:d4:7b:d9:a2:f3:f0:9a:c0:63:a0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1334987718ED4E16EC43102E16C9A8547B52B52F
        Validity
            Not Before: Aug  1 19:00:44 2023 GMT
            Not After : Jul 30 19:05:44 2024 GMT
        Subject: CN=84440D2DCC6E9EBC51B775D8B5AF0848ED5DC93B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:29:56:2b:0a:2e:e8:93:8c:c7:0f:2b:64:3a:
                    0a:84:e0:a7:5e:4b:d7:d7:4b:13:88:da:d1:7b:a5:
                    b7:93:66:25:71:c6:a4:ff:6d:cb:ad:5c:e8:e2:1d:
                    7a:ba:ca:53:14:be:11:b7:e0:26:72:82:a0:20:a3:
                    be:b5:54:ff:79:42:7a:21:e5:90:87:30:83:16:fd:
                    75:04:00:0b:32:1c:db:a3:f5:55:a3:2d:0b:c9:52:
                    e1:27:e1:52:10:52:2a:fe:e5:03:c6:ac:d6:ff:f6:
                    9e:a6:fe:20:85:cc:ce:5d:d0:46:c9:9f:62:ac:f9:
                    2b:c5:9d:e7:3c:99:59:c3:9f:0e:dd:88:06:c6:e5:
                    73:26:d0:fe:76:03:6e:1c:28:7f:82:36:00:b4:c3:
                    4d:f1:02:d2:b6:bc:12:50:9c:a8:e8:29:c2:e1:67:
                    aa:e6:7f:86:76:4d:05:19:ff:f1:b9:df:17:ee:1b:
                    0c:c1:9a:f7:87:00:0f:5f:ba:68:e9:2b:b1:b6:90:
                    cf:0d:f4:80:8f:cc:e2:9a:f3:6a:55:16:9e:e2:6c:
                    a5:57:6c:63:58:5a:d8:15:ee:d6:e6:9a:b0:c5:c0:
                    81:29:00:01:d3:a3:00:69:c3:43:65:46:0e:0d:fa:
                    2c:49:62:b8:99:26:56:8c:46:de:70:05:d4:13:c6:
                    e1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:44:0D:2D:CC:6E:9E:BC:51:B7:75:D8:B5:AF:08:48:ED:5D:C9:3B
            X509v3 Authority Key Identifier:
                keyid:13:34:98:77:18:ED:4E:16:EC:43:10:2E:16:C9:A8:54:7B:52:B5:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/1334987718ED4E16EC43102E16C9A8547B52B52F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1334987718ED4E16EC43102E16C9A8547B52B52F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/323830343a313532383a3a2f33322d3332203d3e20323633333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1528::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:26:dd:70:57:c1:08:4b:9d:7f:62:6e:fa:a5:dc:29:be:85:
         7f:ff:ad:c1:4b:d2:96:f3:cd:c0:a0:07:f8:4a:90:73:d9:2b:
         bf:4d:40:eb:b8:39:2a:e3:2b:6b:9f:84:22:99:f5:96:81:fe:
         dc:0f:7d:31:90:4d:55:95:ab:88:01:6a:ec:36:27:10:c5:89:
         ba:5d:2c:c9:4c:5d:c7:61:9d:67:91:05:89:c8:9a:7f:96:86:
         d1:b4:51:57:f7:41:79:cd:20:99:a2:e2:a5:14:01:7a:c8:b4:
         82:15:00:02:d7:5e:3d:ee:62:c2:67:bb:e3:1e:25:7d:4a:8e:
         d8:79:69:5a:57:9f:53:92:80:fd:32:22:64:11:cb:74:65:9c:
         b8:b0:16:28:be:bd:49:74:da:8f:51:06:29:5b:20:36:88:ba:
         c7:eb:bc:79:5a:eb:d5:f1:9d:ea:04:39:42:0a:d8:a1:78:ec:
         ea:cb:32:6b:bd:a0:5c:dd:0d:d7:7d:fc:b8:14:46:96:4b:a9:
         6b:db:27:66:58:62:c6:28:21:55:87:5f:83:1b:10:f1:7c:58:
         5a:56:b8:ee:6d:1d:91:bc:10:b0:a4:46:2b:f2:03:eb:ff:12:
         69:65:f5:a4:a0:46:af:bf:6e:5e:bf:0f:83:84:0c:02:4d:04:
         b2:72:02:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----