Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0/323830343a376235303a3a2f33322d3438203d3e20323731343234.roa
File:                     323830343a376235303a3a2f33322d3438203d3e20323731343234.roa (raw, json)
Hash identifier:          eP/cJ26eb5ZLJijSOKuEURQjKtdyMLhU+li+oUV2+8g=
Subject key identifier:   BC:12:E8:59:86:8C:B7:76:E3:74:AC:16:AF:A2:E2:89:37:46:6E:A7
Certificate issuer:       /CN=4F981104ADBA2CFF53B3D12A607771EC8089FFAB
Certificate serial:       56B59CFEFABA71D7C1C7E5B6CA2E19987929BC45
Authority key identifier: 4F:98:11:04:AD:BA:2C:FF:53:B3:D1:2A:60:77:71:EC:80:89:FF:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F981104ADBA2CFF53B3D12A607771EC8089FFAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0/323830343a376235303a3a2f33322d3438203d3e20323731343234.roa
Signing time:             Tue 31 Oct 2023 05:00:00 +0000
ROA not before:           Tue 31 Oct 2023 04:55:00 +0000
ROA not after:            Tue 29 Oct 2024 05:00:00 +0000
asID:                     271424
IP address blocks:        2804:7b50::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b5:9c:fe:fa:ba:71:d7:c1:c7:e5:b6:ca:2e:19:98:79:29:bc:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F981104ADBA2CFF53B3D12A607771EC8089FFAB
        Validity
            Not Before: Oct 31 04:55:00 2023 GMT
            Not After : Oct 29 05:00:00 2024 GMT
        Subject: CN=BC12E859868CB776E374AC16AFA2E28937466EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4f:57:04:5a:b6:c6:19:a0:da:4c:f9:03:51:
                    da:80:ff:e6:f4:16:20:34:f8:7c:a8:4e:52:12:91:
                    f7:29:b9:d0:af:df:07:7e:60:ad:81:6e:d3:c1:d8:
                    4f:c2:30:78:02:96:74:cb:7f:76:c4:e9:d8:6c:38:
                    eb:2a:15:f2:05:06:02:b8:33:68:07:4a:1b:a0:fb:
                    33:32:73:00:6d:f7:84:02:77:d7:f8:eb:b9:75:8c:
                    46:2a:b2:92:c4:32:b2:9c:00:f2:0f:29:3a:7e:f3:
                    94:0b:54:67:dc:ae:24:55:1a:10:65:2d:1d:d6:2a:
                    0c:94:04:c3:f4:79:61:23:5d:d8:00:4b:a9:54:74:
                    72:64:83:73:6d:af:af:79:8c:85:cc:74:50:97:a7:
                    9d:95:54:06:4c:f5:fb:60:04:6e:5f:1b:91:58:e6:
                    c3:27:48:0c:c3:4c:dc:60:28:b6:0d:8c:74:3d:22:
                    1f:91:5e:ef:bb:32:65:5a:44:12:97:20:66:5f:d8:
                    a0:78:a6:e7:c8:c1:83:15:78:59:e0:dc:64:58:17:
                    e7:0f:5d:b0:86:0a:36:9d:3b:ba:7a:1f:31:95:b9:
                    5a:09:b9:40:a9:8d:f2:07:ae:7d:fc:96:00:23:94:
                    b1:e4:e4:f4:b4:81:50:31:fd:9a:34:cd:6f:6e:e2:
                    b7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:12:E8:59:86:8C:B7:76:E3:74:AC:16:AF:A2:E2:89:37:46:6E:A7
            X509v3 Authority Key Identifier:
                keyid:4F:98:11:04:AD:BA:2C:FF:53:B3:D1:2A:60:77:71:EC:80:89:FF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0/4F981104ADBA2CFF53B3D12A607771EC8089FFAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F981104ADBA2CFF53B3D12A607771EC8089FFAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0/323830343a376235303a3a2f33322d3438203d3e20323731343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b50::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:de:df:b0:d1:62:f9:4a:10:dc:c6:eb:bd:c6:f3:83:7a:3b:
         44:91:77:42:fe:b7:cc:bd:a8:a4:10:2d:eb:98:e7:3b:2f:5c:
         a7:73:7e:d5:84:61:64:c8:ea:f1:6a:bd:f9:6f:93:3e:6c:eb:
         53:62:f6:b5:82:48:d7:86:14:f4:5c:5a:ca:4c:91:c2:49:bc:
         99:92:28:c2:e6:48:db:63:40:87:ea:b2:9a:7b:2e:ac:22:58:
         71:1c:65:e5:c6:04:1d:07:5a:09:e1:c9:61:38:76:5c:8b:5c:
         84:d6:31:a6:48:e8:ce:54:ea:ed:59:69:64:40:be:d2:df:2a:
         b5:6e:73:98:be:9b:d2:6b:42:1b:31:25:dd:b8:55:17:8f:0f:
         ba:43:0a:32:1d:58:9d:8a:5c:e0:52:1e:f3:d5:a9:51:7a:f4:
         b4:bc:97:d1:4f:b8:5d:27:ae:77:75:40:95:47:b8:56:91:56:
         67:19:4a:a8:53:a8:03:d5:ec:e8:5d:79:38:84:ed:4d:92:bf:
         35:ce:2f:aa:40:e2:f4:ad:fc:88:18:fb:53:46:fe:b6:00:42:
         36:ab:2d:55:ce:e4:e1:70:aa:86:ce:b8:7f:ba:26:fb:5d:1b:
         3c:54:f5:8b:d8:64:97:de:f5:20:e7:e8:ef:9c:ad:4e:d9:46:
         e2:dd:ee:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----