Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/323830343a376561343a3a2f33322d3332203d3e20323731363337.roa
File:                     323830343a376561343a3a2f33322d3332203d3e20323731363337.roa (raw, json)
Hash identifier:          QgcumjB8ADqsPGYO8vIOyztx3l2unEeDF9YGRuvLKI8=
Subject key identifier:   D5:03:37:2B:D8:92:DA:E1:CB:B8:7D:BB:76:F0:94:81:76:BF:D0:C9
Certificate issuer:       /CN=FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9
Certificate serial:       10033D2C22CB37F7E76DA72D29EAAE9EA0ED270E
Authority key identifier: FC:9D:2B:73:0F:68:F9:B5:3C:50:DD:3E:51:45:FC:3E:08:CF:84:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/323830343a376561343a3a2f33322d3332203d3e20323731363337.roa
Signing time:             Wed 31 May 2023 18:53:02 +0000
ROA not before:           Wed 31 May 2023 18:48:02 +0000
ROA not after:            Wed 29 May 2024 18:53:02 +0000
asID:                     271637
IP address blocks:        2804:7ea4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:03:3d:2c:22:cb:37:f7:e7:6d:a7:2d:29:ea:ae:9e:a0:ed:27:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9
        Validity
            Not Before: May 31 18:48:02 2023 GMT
            Not After : May 29 18:53:02 2024 GMT
        Subject: CN=D503372BD892DAE1CBB87DBB76F0948176BFD0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:11:cb:53:4f:49:3b:e3:c9:ec:53:85:27:
                    e6:02:d5:a2:89:a9:78:89:11:f5:53:24:fb:ce:dc:
                    3f:40:39:b9:8d:ec:74:89:0b:28:2c:16:ac:84:10:
                    74:2d:27:43:a3:4a:76:4d:97:0b:39:71:3e:a6:f9:
                    81:c4:16:b7:de:52:28:8d:43:e8:d8:83:0f:e4:e8:
                    71:e6:f8:b1:f3:fd:0d:18:9a:a2:fb:a5:f5:b6:d4:
                    75:fb:b0:da:19:44:17:bc:5f:9a:9e:1f:10:fd:d7:
                    d6:be:ff:0e:89:73:80:09:ba:ba:16:2c:fd:75:d7:
                    5c:37:7a:57:f7:7a:b5:b7:46:13:07:45:db:f1:a9:
                    f0:aa:13:59:ae:9f:f2:b3:fd:40:71:ca:1c:86:83:
                    0d:99:90:e2:ab:52:dc:a5:88:a5:81:25:7e:7a:3f:
                    ac:81:52:c6:d5:63:da:30:ee:26:29:e0:91:f7:56:
                    b9:66:2a:95:1d:2b:bc:cb:d6:b0:ef:97:42:2c:e3:
                    58:1f:6d:68:81:0f:50:5d:6e:63:b3:78:fc:c1:db:
                    c3:af:f1:27:9b:f5:b3:6c:d0:8a:c6:dc:25:56:d2:
                    81:dd:c2:31:6a:60:ae:8d:75:17:46:40:98:3e:df:
                    05:af:ae:ce:e3:7e:1b:ec:19:ea:76:6e:05:b6:e0:
                    ec:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:03:37:2B:D8:92:DA:E1:CB:B8:7D:BB:76:F0:94:81:76:BF:D0:C9
            X509v3 Authority Key Identifier:
                keyid:FC:9D:2B:73:0F:68:F9:B5:3C:50:DD:3E:51:45:FC:3E:08:CF:84:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/323830343a376561343a3a2f33322d3332203d3e20323731363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ea4::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:42:7c:19:27:56:d3:a1:2b:0d:3d:39:80:c0:98:bf:9d:40:
         d0:7c:33:99:df:b1:21:d1:c8:d7:3e:de:61:ac:c3:31:94:52:
         ca:55:64:50:bc:ba:d5:dd:92:62:ec:f3:b5:83:ef:25:a8:1d:
         ef:b8:57:a0:0b:d1:21:89:3f:c7:c4:62:5d:66:a9:4f:b7:f0:
         53:04:1c:de:70:cf:a6:c7:32:bf:06:de:c6:2d:07:61:9d:a9:
         ff:6f:fe:6c:29:b0:ef:c5:18:3a:be:cc:77:b0:d6:93:69:1e:
         7f:aa:4b:5b:a3:9f:cc:a4:c3:47:a2:f3:1e:43:88:36:bb:91:
         6e:48:30:89:13:02:3c:f9:ad:a0:f8:ee:3c:10:47:84:e1:67:
         83:4c:7a:e5:c1:ae:5a:e0:af:2f:32:0c:0f:d5:44:09:bf:66:
         de:ba:a6:f7:49:55:02:92:bc:13:f5:56:bf:df:69:1d:d4:d9:
         c6:a5:22:ba:a6:27:fd:22:56:19:17:80:2e:82:d2:ef:ce:8a:
         0b:df:e8:1c:19:35:86:32:74:3a:12:26:cf:e0:42:82:d7:94:
         5b:b2:05:2b:99:b3:f4:8d:7a:a2:c2:bd:28:64:60:f2:98:95:
         8d:9c:f2:97:b5:4e:d6:0e:60:7c:e8:22:09:1b:12:af:a4:93:
         89:f3:c9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----