Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a303a613a3a32302f3132362d313236203d3e203532393635.roa
File:                     323830343a3362383a303a613a3a32302f3132362d313236203d3e203532393635.roa (raw, json)
Hash identifier:          WwW0NsEVsAdDZcDDTP/gPK1dEAYiIZA9haOypTXlmIw=
Subject key identifier:   F4:27:6C:ED:AE:DE:2D:BB:A8:47:4E:84:5E:CD:FD:62:51:B3:25:25
Certificate issuer:       /CN=143582F75704EEF8880AF5E444EE85042913D47D
Certificate serial:       3D98AFC42A82A325C456E327B07E12F5ECB5EA70
Authority key identifier: 14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/143582F75704EEF8880AF5E444EE85042913D47D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a303a613a3a32302f3132362d313236203d3e203532393635.roa
Signing time:             Mon 16 Oct 2023 16:42:31 +0000
ROA not before:           Mon 16 Oct 2023 16:37:31 +0000
ROA not after:            Mon 14 Oct 2024 16:42:31 +0000
asID:                     52965
IP address blocks:        2804:3b8:0:a::20/126 maxlen: 126

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:98:af:c4:2a:82:a3:25:c4:56:e3:27:b0:7e:12:f5:ec:b5:ea:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143582F75704EEF8880AF5E444EE85042913D47D
        Validity
            Not Before: Oct 16 16:37:31 2023 GMT
            Not After : Oct 14 16:42:31 2024 GMT
        Subject: CN=F4276CEDAEDE2DBBA8474E845ECDFD6251B32525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:8a:5b:0e:66:95:8a:b3:ae:a5:b6:31:d7:
                    79:d0:dd:aa:c9:be:e7:2c:bd:e3:5c:d0:72:7a:c4:
                    67:f4:ee:3b:d8:7b:53:fe:e3:eb:7f:6c:8e:9d:2b:
                    ba:ae:0e:9a:16:ec:67:4c:34:81:9a:bb:94:9d:2c:
                    09:84:00:6f:3d:a7:1a:24:a4:33:cb:be:9e:97:c1:
                    f6:a2:e0:4d:90:56:4c:bd:b1:11:ee:0e:5f:ab:2d:
                    02:54:2b:2e:7d:2d:11:f8:22:a6:8f:15:d9:5b:bc:
                    ea:87:1c:ab:04:10:42:b6:17:37:b8:d3:dd:96:49:
                    f4:ae:67:18:7c:2f:f6:ac:55:63:16:b4:9a:6b:97:
                    f8:4e:30:a5:cd:67:5e:02:2d:65:03:71:15:c8:72:
                    22:c5:2d:db:e8:db:9f:1f:f7:3f:12:0a:3b:85:b4:
                    65:2d:df:21:1d:03:8b:0f:ee:9c:44:62:a0:1b:03:
                    07:77:d3:6a:56:37:83:cc:99:a6:ac:ed:aa:e5:02:
                    d3:6f:8d:4a:10:7d:df:6f:31:45:2f:d3:53:33:48:
                    4b:7c:ff:4c:1b:93:14:80:7d:ae:9e:36:37:08:61:
                    85:90:4c:8b:70:14:bb:d5:f0:48:56:ba:bb:26:1b:
                    b1:bd:04:bc:4c:54:15:d8:e6:55:8a:0b:f2:e3:2d:
                    fa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:27:6C:ED:AE:DE:2D:BB:A8:47:4E:84:5E:CD:FD:62:51:B3:25:25
            X509v3 Authority Key Identifier:
                keyid:14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/143582F75704EEF8880AF5E444EE85042913D47D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/143582F75704EEF8880AF5E444EE85042913D47D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a303a613a3a32302f3132362d313236203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b8:0:a:0:0:0:20/126

    Signature Algorithm: sha256WithRSAEncryption
         2e:7e:32:12:11:e8:01:e4:3a:28:fa:6c:bf:ff:ef:40:5c:36:
         d6:6b:82:6b:17:50:5e:4f:32:5c:f7:8c:42:51:0e:f3:45:61:
         17:06:d6:e7:de:f6:7e:6a:3b:3e:88:cc:de:87:8e:27:2b:1e:
         b6:17:52:fa:e8:76:4a:5b:cc:59:68:d6:1f:e1:eb:61:06:aa:
         ec:86:e8:7e:53:d4:15:95:42:a2:e5:f4:88:6d:3a:c8:f6:bc:
         14:94:94:6e:18:7e:07:6b:94:66:b9:00:54:e2:13:61:35:83:
         3b:7d:5f:48:d0:3f:4c:df:94:98:ff:70:8d:e7:b6:77:88:5b:
         5d:dd:37:75:af:ee:25:1c:c4:a9:60:51:8c:06:1a:69:5b:1a:
         b8:df:6e:b0:51:da:60:b9:2a:5e:70:53:46:c0:63:ab:66:4a:
         c3:85:13:65:4a:18:cc:4f:eb:72:5c:ba:c9:da:a8:77:51:ea:
         cd:f4:2d:97:6d:2f:77:1a:72:7d:7d:44:34:e0:da:16:17:1c:
         aa:46:8f:af:40:92:25:33:c4:6e:16:f6:a5:ea:b3:d7:21:f2:
         08:4c:d1:dc:41:d7:40:60:75:07:b6:9f:aa:f8:8d:d3:a8:3c:
         ad:3e:25:18:3b:d7:e7:6f:a2:e8:01:fa:58:6b:1a:12:09:a3:
         18:00:d2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----