Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/323830343a6233383a3a2f33322d3335203d3e203532373538.roa
File:                     323830343a6233383a3a2f33322d3335203d3e203532373538.roa (raw, json)
Hash identifier:          avo4+oOjZKVKnxGQwty6eM/MwCFdxp+DKrOI40FxCOE=
Subject key identifier:   C5:4F:C8:C5:5D:21:D4:F1:AD:91:E4:D8:15:D6:A7:B8:90:95:E4:1F
Certificate issuer:       /CN=FFD031F42D160524993AB5633101C0EA9B24C2A5
Certificate serial:       3FE768C906DF0A5DEA14EF4EBD7C8C7194109AB1
Authority key identifier: FF:D0:31:F4:2D:16:05:24:99:3A:B5:63:31:01:C0:EA:9B:24:C2:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFD031F42D160524993AB5633101C0EA9B24C2A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/323830343a6233383a3a2f33322d3335203d3e203532373538.roa
Signing time:             Thu 09 Nov 2023 21:20:18 +0000
ROA not before:           Thu 09 Nov 2023 21:15:18 +0000
ROA not after:            Thu 07 Nov 2024 21:20:18 +0000
asID:                     52758
IP address blocks:        2804:b38::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e7:68:c9:06:df:0a:5d:ea:14:ef:4e:bd:7c:8c:71:94:10:9a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD031F42D160524993AB5633101C0EA9B24C2A5
        Validity
            Not Before: Nov  9 21:15:18 2023 GMT
            Not After : Nov  7 21:20:18 2024 GMT
        Subject: CN=C54FC8C55D21D4F1AD91E4D815D6A7B89095E41F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:f2:ef:2b:ed:5b:68:72:44:51:33:a2:3c:
                    a4:40:d4:79:7f:bf:01:2f:a3:17:8b:c5:54:3a:bb:
                    eb:de:46:a0:c5:89:6f:ee:e4:76:12:20:21:ec:e8:
                    c5:a1:1a:82:46:18:fc:52:7f:77:a4:48:c2:9a:d5:
                    4f:c4:56:39:e0:f8:c1:e3:70:38:29:ff:ab:bd:a1:
                    b0:b2:82:13:d3:ed:77:c1:ac:71:50:06:f8:aa:f5:
                    75:d0:d6:c5:13:f9:de:69:1b:4e:4a:af:89:ae:94:
                    06:e9:88:c5:b9:b9:4e:e5:79:0b:40:2a:c9:7d:4b:
                    cc:cf:cc:fa:25:9b:2e:ec:c5:65:de:a4:0f:8c:e5:
                    3a:97:d0:71:18:bc:0c:00:e7:97:bd:96:f4:cb:3d:
                    d8:7a:02:04:16:82:33:84:38:c0:f6:68:df:3d:89:
                    00:40:3c:ae:72:48:43:39:66:da:ce:d3:f5:e2:b5:
                    0c:1c:11:a1:5b:a5:1f:30:59:9e:20:5f:da:08:3e:
                    35:84:f9:d3:51:66:ca:81:6e:a4:30:83:95:9e:0c:
                    4f:d1:e8:d7:4a:51:87:f4:40:4f:97:2c:67:bf:48:
                    99:aa:a6:7f:f1:bc:c5:13:78:6f:1c:0b:2d:3b:48:
                    72:3a:30:35:88:ee:e0:4c:23:10:d6:36:4a:22:ff:
                    40:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4F:C8:C5:5D:21:D4:F1:AD:91:E4:D8:15:D6:A7:B8:90:95:E4:1F
            X509v3 Authority Key Identifier:
                keyid:FF:D0:31:F4:2D:16:05:24:99:3A:B5:63:31:01:C0:EA:9B:24:C2:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/FFD031F42D160524993AB5633101C0EA9B24C2A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFD031F42D160524993AB5633101C0EA9B24C2A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/323830343a6233383a3a2f33322d3335203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:59:c9:73:b1:7c:66:45:d6:de:24:b1:70:2a:ea:dc:6b:ce:
         77:27:9f:9b:98:44:d1:b6:a4:9d:0c:31:f4:54:2d:b6:c9:32:
         84:85:fd:5b:a5:4b:4f:de:64:5f:57:f4:fc:a2:ec:7f:08:7a:
         ae:f5:8e:2a:df:3d:0a:da:10:8b:7f:a8:47:35:6f:28:d8:f1:
         b8:a5:67:31:b2:40:1a:44:7d:41:1a:05:d3:17:4e:29:4a:26:
         de:d1:24:42:8f:df:75:78:25:25:43:2e:f3:6f:66:0e:27:a4:
         25:48:72:2f:d6:65:ab:d4:b5:d4:b3:71:cb:4d:62:81:30:4b:
         df:db:f7:96:9a:c3:a5:6a:84:3f:d4:a1:b4:68:5a:87:5e:01:
         0b:bc:58:ca:8f:e3:3b:20:e1:1f:08:65:17:7a:8e:b6:e7:5e:
         67:4b:9e:7d:86:9d:de:e2:1d:e8:81:aa:3e:b4:df:77:47:9f:
         c9:0c:28:87:e5:72:c9:7c:ef:50:46:4c:2f:05:35:7e:6a:62:
         01:39:66:07:88:b2:fd:c4:a2:61:df:5d:0b:21:d3:8c:c9:43:
         07:49:d3:bd:d4:7b:e7:8b:a5:58:9d:c5:15:0b:85:bc:0f:96:
         26:77:b3:82:8f:db:01:15:1c:18:89:66:47:6c:58:7a:0f:3d:
         63:ea:f4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----