Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3261632f3132362d313236203d3e203532393635.roa
File:                     323830343a3362383a343a31363a3a3261632f3132362d313236203d3e203532393635.roa (raw, json)
Hash identifier:          VqoH8m62PszeXvMYF9vvv22aajBb3ffZV/qe062SCPM=
Subject key identifier:   76:EA:D4:69:E5:F9:CD:7E:CF:77:81:74:C1:5E:88:E4:4A:D0:36:C7
Certificate issuer:       /CN=143582F75704EEF8880AF5E444EE85042913D47D
Certificate serial:       0C9CBBE9004DCADF34A075A60B57E7AF2740A384
Authority key identifier: 14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/143582F75704EEF8880AF5E444EE85042913D47D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3261632f3132362d313236203d3e203532393635.roa
Signing time:             Mon 16 Oct 2023 16:42:31 +0000
ROA not before:           Mon 16 Oct 2023 16:37:31 +0000
ROA not after:            Mon 14 Oct 2024 16:42:31 +0000
asID:                     52965
IP address blocks:        2804:3b8:4:16::2ac/126 maxlen: 126

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9c:bb:e9:00:4d:ca:df:34:a0:75:a6:0b:57:e7:af:27:40:a3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143582F75704EEF8880AF5E444EE85042913D47D
        Validity
            Not Before: Oct 16 16:37:31 2023 GMT
            Not After : Oct 14 16:42:31 2024 GMT
        Subject: CN=76EAD469E5F9CD7ECF778174C15E88E44AD036C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:95:35:0d:13:f2:17:f5:40:8b:7e:67:56:a6:
                    1f:69:69:1c:b1:91:76:f3:1f:e1:5d:2e:31:77:73:
                    2c:f4:06:cc:fa:d0:a5:ed:e2:97:43:e1:cb:6e:12:
                    23:e4:d8:db:32:00:2b:72:c5:c7:25:34:af:13:35:
                    b4:22:86:38:16:99:bf:41:a6:00:9a:79:34:6b:b7:
                    5a:36:4f:e3:6a:68:6b:c0:44:c1:0f:5a:e5:50:b2:
                    b5:3d:90:db:99:b7:84:e9:52:c3:27:2c:28:69:39:
                    8d:0f:80:be:79:7f:6c:b6:7e:75:7e:44:d9:40:23:
                    fc:4a:43:6a:59:e8:1e:15:f3:7e:79:60:fd:30:1c:
                    a7:98:6a:f5:3f:c3:45:56:6c:f0:77:09:d0:4f:58:
                    7c:55:3e:dd:89:2a:3f:b0:d8:b4:f5:44:5a:85:31:
                    9d:4f:6a:76:ee:a1:86:f0:c3:cc:25:f6:e5:08:32:
                    7e:21:b4:40:9c:9c:a1:42:6d:32:42:e2:a7:b1:7d:
                    e7:bb:c8:4a:98:ed:57:92:1f:14:5d:f9:ee:8c:36:
                    5d:7d:38:56:b3:ed:1a:2b:fb:0a:21:5b:48:b9:6d:
                    ee:d5:c7:1a:f9:19:50:fb:85:a9:9a:57:e3:b5:22:
                    8d:79:3e:32:da:6b:63:b6:b6:f3:e6:7c:7d:7e:26:
                    f2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EA:D4:69:E5:F9:CD:7E:CF:77:81:74:C1:5E:88:E4:4A:D0:36:C7
            X509v3 Authority Key Identifier:
                keyid:14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/143582F75704EEF8880AF5E444EE85042913D47D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/143582F75704EEF8880AF5E444EE85042913D47D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3261632f3132362d313236203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b8:4:16:0:0:0:2ac/126

    Signature Algorithm: sha256WithRSAEncryption
         54:29:cc:56:6e:b0:5e:ec:f1:e5:2d:08:83:2d:ec:b4:7b:ac:
         c1:5d:d0:14:54:73:9d:55:f6:78:9f:83:85:10:68:86:27:a5:
         96:7a:54:1f:98:ea:47:d0:7a:e5:6e:50:51:06:85:a1:96:44:
         f4:0d:3e:85:df:3c:91:d4:55:90:3c:ce:7e:4c:b6:3d:db:ac:
         32:5c:72:ff:a9:9e:30:48:6d:e6:b7:b0:52:15:4f:d6:d0:93:
         6a:3f:4f:3b:99:22:e8:f9:21:a8:e9:9e:31:36:a2:31:01:0a:
         03:6d:39:51:d6:f9:35:31:0a:70:d1:f0:f8:4f:a8:2a:6d:1f:
         f6:e5:ab:df:6c:91:43:48:9d:e3:7d:18:3a:04:b4:32:80:ea:
         81:d4:03:ee:ce:79:19:44:c7:c9:dc:52:51:a2:2a:95:e8:4c:
         05:24:14:87:fd:2c:70:5a:16:6c:43:c1:d8:62:d3:60:89:b0:
         e5:b2:2b:c5:6c:ae:b4:2e:c7:f7:6b:4e:e0:58:70:b5:d1:9f:
         b0:2c:0d:3b:48:40:2d:93:c6:e9:22:4d:ab:65:78:14:01:2e:
         b7:62:8d:9a:2c:d4:c3:45:a4:e3:cf:d3:d9:69:c1:a1:9c:82:
         2d:1b:ca:58:8b:38:a0:2c:bd:1f:16:00:d4:fb:dc:fb:c2:df:
         98:0f:92:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----