Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3436302f3132362d313236203d3e203532393635.roa
File:                     323830343a3362383a343a31363a3a3436302f3132362d313236203d3e203532393635.roa (raw, json)
Hash identifier:          f8bWAapiYOG5eD5HQB1tN9BQlYOHg74FwM6WxbFUIDo=
Subject key identifier:   4F:04:C7:AE:2A:55:B8:29:00:56:1E:40:9D:90:7A:3C:92:6A:1A:FA
Certificate issuer:       /CN=143582F75704EEF8880AF5E444EE85042913D47D
Certificate serial:       2E155E671235B96F87968489DB0C6533E1A11577
Authority key identifier: 14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/143582F75704EEF8880AF5E444EE85042913D47D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3436302f3132362d313236203d3e203532393635.roa
Signing time:             Tue 17 Oct 2023 15:50:50 +0000
ROA not before:           Tue 17 Oct 2023 15:45:50 +0000
ROA not after:            Tue 15 Oct 2024 15:50:50 +0000
asID:                     52965
IP address blocks:        2804:3b8:4:16::460/126 maxlen: 126

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:15:5e:67:12:35:b9:6f:87:96:84:89:db:0c:65:33:e1:a1:15:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143582F75704EEF8880AF5E444EE85042913D47D
        Validity
            Not Before: Oct 17 15:45:50 2023 GMT
            Not After : Oct 15 15:50:50 2024 GMT
        Subject: CN=4F04C7AE2A55B82900561E409D907A3C926A1AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:f5:68:8b:d0:7f:0f:e1:db:4d:e4:e5:c3:
                    8a:44:92:6e:85:be:32:59:f9:5c:3b:ea:b2:24:4c:
                    db:b6:4b:38:a1:1c:90:df:77:3f:35:f8:d3:f2:8a:
                    1e:5e:0d:5c:fb:93:f6:cc:de:6b:ca:c1:73:8c:3c:
                    21:aa:b2:8b:aa:94:9f:56:83:9f:8a:00:d5:60:91:
                    71:b7:c4:e2:7f:b1:e7:cd:dc:d4:6a:dc:1d:84:fa:
                    43:10:21:3a:8a:a1:20:de:77:64:a1:62:14:9e:7a:
                    bc:3d:a1:fa:f3:60:ae:44:60:42:47:e0:a6:56:ff:
                    02:9e:a5:6a:04:c5:eb:9c:6f:40:72:35:7a:27:25:
                    4b:90:41:09:67:34:12:7e:71:73:bd:52:87:5f:41:
                    53:e2:0f:b4:8d:cd:c5:1d:25:c3:6f:0b:e3:f0:3e:
                    8d:6f:09:8f:86:6e:69:a2:f3:55:0e:5f:9a:7f:23:
                    52:4a:31:27:37:7b:2d:30:06:b8:4e:f0:be:42:83:
                    cf:69:ac:a8:f6:b4:e1:18:79:08:23:81:61:54:ef:
                    67:9b:57:b5:9d:ef:fc:02:c6:d0:a7:4f:45:89:df:
                    81:9d:66:2d:88:c5:d0:b1:53:a2:e2:c5:98:cc:a1:
                    e3:a7:29:da:6b:f8:b2:24:c9:33:25:7c:41:49:85:
                    a5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:04:C7:AE:2A:55:B8:29:00:56:1E:40:9D:90:7A:3C:92:6A:1A:FA
            X509v3 Authority Key Identifier:
                keyid:14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/143582F75704EEF8880AF5E444EE85042913D47D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/143582F75704EEF8880AF5E444EE85042913D47D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3436302f3132362d313236203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b8:4:16:0:0:0:460/126

    Signature Algorithm: sha256WithRSAEncryption
         0e:ef:e9:4b:f8:e4:f7:54:31:24:5c:47:57:1d:8f:0a:a1:a7:
         cd:05:ce:23:43:dc:94:79:00:7e:a2:8a:f9:9f:3d:01:13:7f:
         b6:ab:2e:c9:e8:95:a2:d1:ee:00:71:1a:00:c2:83:f1:3a:b4:
         6b:27:82:33:1a:a6:51:50:ad:97:26:f5:35:c1:c5:79:b9:ae:
         46:ae:dd:ba:cc:c7:07:fe:8c:98:31:6c:e9:1c:64:0e:82:6f:
         cd:36:96:df:17:a4:1b:8b:4f:aa:2f:ff:41:fb:e4:d9:7c:64:
         c1:b2:c3:84:20:d3:3e:1e:e7:c2:56:a2:56:c3:45:49:24:b6:
         01:56:01:1f:e6:d0:d4:c0:5c:9f:56:fd:cb:ec:34:d1:7e:2f:
         67:a0:0b:a8:9a:16:55:ac:97:15:aa:78:2b:2c:c7:da:57:02:
         a5:c0:de:8b:b9:55:a6:d3:53:49:2d:a1:0c:f1:d1:c4:9a:1b:
         49:7e:5c:c9:a3:46:ca:f2:9a:14:da:3c:c5:6d:8e:6f:35:5c:
         cf:70:a4:82:1c:dc:93:87:76:2b:cc:8a:17:5a:42:9c:e0:ce:
         ca:64:0f:25:e9:43:f4:d2:07:bd:f9:75:7b:f0:b1:86:35:ec:
         8e:fc:48:f3:db:60:cf:c2:52:f1:ab:74:a3:21:8a:86:cb:f1:
         4a:01:c1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----