Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/323830343a333330343a3a2f33322d3332203d3e20323635313131.roa
File:                     323830343a333330343a3a2f33322d3332203d3e20323635313131.roa (raw, json)
Hash identifier:          8T0X5ZUiXz96X5j45SEJUkN96jbThb0lDCylmN0nxSM=
Subject key identifier:   8F:90:04:71:97:BE:4B:E8:48:8E:2E:59:7C:9C:CA:0D:C6:D7:E5:23
Certificate issuer:       /CN=03D0BB3196FA38806A8E301A208B9222BAE61FDB
Certificate serial:       213CC861477DABC6948D3E0D0A0BE80FDD7D9CC9
Authority key identifier: 03:D0:BB:31:96:FA:38:80:6A:8E:30:1A:20:8B:92:22:BA:E6:1F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/323830343a333330343a3a2f33322d3332203d3e20323635313131.roa
Signing time:             Mon 03 Apr 2023 17:41:55 +0000
ROA not before:           Mon 03 Apr 2023 17:36:55 +0000
ROA not after:            Mon 01 Apr 2024 17:41:55 +0000
asID:                     265111
IP address blocks:        2804:3304::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3c:c8:61:47:7d:ab:c6:94:8d:3e:0d:0a:0b:e8:0f:dd:7d:9c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03D0BB3196FA38806A8E301A208B9222BAE61FDB
        Validity
            Not Before: Apr  3 17:36:55 2023 GMT
            Not After : Apr  1 17:41:55 2024 GMT
        Subject: CN=8F90047197BE4BE8488E2E597C9CCA0DC6D7E523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b1:44:3a:22:d8:be:ef:bd:cc:a1:2e:4d:66:
                    16:83:86:02:4a:64:05:7c:23:63:34:d6:5a:cc:6d:
                    d5:91:36:e1:f5:ad:2d:ee:ec:7e:50:0b:81:f8:14:
                    1f:8c:b3:d2:a3:b6:e3:71:09:71:56:4d:ac:ec:39:
                    5e:7d:41:cc:06:05:f2:aa:05:f0:bc:07:56:df:0a:
                    e5:d6:ab:8e:0a:d4:37:70:96:7b:c6:f9:6a:1b:0f:
                    67:2b:a6:eb:4f:23:33:c4:f7:16:36:88:b9:e4:d8:
                    50:36:86:a8:09:6d:b0:ee:2d:0e:24:1b:21:ed:ef:
                    84:d8:c8:2d:f6:60:9b:d4:af:72:9d:0d:c4:b7:e3:
                    26:b4:d3:bf:cf:74:ad:7d:84:54:0a:69:19:8d:be:
                    46:77:f0:04:7a:00:4a:75:55:20:d5:ae:e7:0c:c8:
                    5d:06:9c:f0:61:b0:36:b9:78:e6:a2:63:51:8a:34:
                    df:d7:ff:f8:d0:c5:3e:6c:41:c2:9d:1d:ad:79:d2:
                    8c:57:14:73:dc:84:d7:df:f8:28:50:98:ba:0d:22:
                    38:2d:cf:0b:fd:17:01:a2:d6:e4:1b:f4:b8:36:be:
                    32:bc:53:f1:b5:e2:87:3d:09:56:63:70:4c:43:dc:
                    bf:a1:a7:70:ed:2d:da:a2:80:c6:73:dc:99:28:b9:
                    97:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:90:04:71:97:BE:4B:E8:48:8E:2E:59:7C:9C:CA:0D:C6:D7:E5:23
            X509v3 Authority Key Identifier:
                keyid:03:D0:BB:31:96:FA:38:80:6A:8E:30:1A:20:8B:92:22:BA:E6:1F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/323830343a333330343a3a2f33322d3332203d3e20323635313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3304::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:e9:b7:4c:c8:9c:76:56:5c:15:8d:63:42:17:27:35:50:
         b2:af:72:ba:8a:2b:8a:88:b4:35:8d:a5:94:b8:de:66:49:79:
         f8:f7:a1:38:c6:e5:c8:7a:0a:69:b9:fd:86:d0:27:a3:c0:a4:
         e3:06:95:19:d1:40:49:32:c5:45:d7:df:a2:f9:44:e6:f1:b3:
         66:6f:58:96:83:0a:97:b8:28:b4:a2:f7:ef:fc:18:96:37:78:
         9a:8e:87:17:57:d6:3f:5a:0b:d5:e3:42:77:33:eb:68:90:e3:
         fd:98:f5:90:7c:ae:5c:9f:60:13:1a:b4:f1:49:5b:c3:5d:eb:
         68:28:dc:1b:bb:f4:77:e9:dd:af:91:12:3e:f7:a7:c2:f6:92:
         71:2d:08:1b:ac:c7:87:9c:6b:f3:1d:69:92:ea:bf:56:5f:36:
         af:bd:3a:6a:20:49:54:5c:0e:ce:69:f8:1b:f0:2c:d5:fc:03:
         46:f5:ee:7f:8c:13:df:1c:46:23:a3:c4:8f:00:8b:4a:e8:21:
         be:53:12:36:a6:a4:08:0c:82:d1:9f:1c:0a:c1:aa:a3:43:15:
         b5:fe:c1:75:9c:13:c7:82:e5:87:a5:d2:4f:3a:c6:8c:ac:35:
         b2:b8:aa:65:26:9d:af:e1:8f:2c:72:fc:62:68:a9:46:da:07:
         b1:f5:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----