Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a383030303a3a2f33342d3334203d3e20323636363131.roa
File:                     323830343a336561343a383030303a3a2f33342d3334203d3e20323636363131.roa (raw, json)
Hash identifier:          itNYGum2B+r7tQkYoBxm/rq2SWJU70oW24sWgY2jyGk=
Subject key identifier:   5A:A9:51:65:7F:9C:5A:6C:BA:6E:CC:11:6F:FA:E2:68:FA:82:2D:50
Certificate issuer:       /CN=A14AE501A7E35BA9CBB1557490587EC334AA0C33
Certificate serial:       3E1DFFA96DCD64E001568A537788437A50D9A038
Authority key identifier: A1:4A:E5:01:A7:E3:5B:A9:CB:B1:55:74:90:58:7E:C3:34:AA:0C:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14AE501A7E35BA9CBB1557490587EC334AA0C33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a383030303a3a2f33342d3334203d3e20323636363131.roa
Signing time:             Fri 26 May 2023 04:01:57 +0000
ROA not before:           Fri 26 May 2023 03:56:57 +0000
ROA not after:            Fri 24 May 2024 04:01:57 +0000
asID:                     266611
IP address blocks:        2804:3ea4:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1d:ff:a9:6d:cd:64:e0:01:56:8a:53:77:88:43:7a:50:d9:a0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14AE501A7E35BA9CBB1557490587EC334AA0C33
        Validity
            Not Before: May 26 03:56:57 2023 GMT
            Not After : May 24 04:01:57 2024 GMT
        Subject: CN=5AA951657F9C5A6CBA6ECC116FFAE268FA822D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:44:0a:2c:43:66:c7:99:57:b1:ea:8c:95:db:
                    39:9e:94:7c:b1:19:e0:fa:69:93:54:30:3b:e9:25:
                    8b:20:ea:b2:20:fc:ef:41:1d:76:2d:6d:d4:c4:3d:
                    c8:59:4a:68:d2:18:ef:41:e5:6b:1c:06:03:f2:7f:
                    dc:1c:8a:45:ea:b1:ac:bd:e5:1a:59:e9:d2:60:6c:
                    ee:c1:8f:15:eb:05:95:cb:91:d2:44:4c:39:81:74:
                    f2:f6:7f:8c:cd:3e:2a:9f:b1:00:5e:48:4e:c3:90:
                    3b:4b:0c:03:4c:0d:aa:e9:b1:14:c9:1b:22:37:f6:
                    f1:40:ad:9e:42:c4:39:62:48:b6:ed:5c:bd:44:92:
                    03:9b:d8:21:fc:9c:60:4f:06:f0:be:e0:9c:59:02:
                    70:d1:e3:97:dd:23:16:a5:8d:eb:3d:fb:e3:5c:cf:
                    aa:5e:7b:ac:50:74:2b:ea:4f:4c:5f:a4:c1:c5:20:
                    82:1f:c3:a5:a9:4c:4b:09:f3:97:a5:c1:a4:59:e7:
                    e3:83:67:03:ce:69:ff:84:37:26:53:70:82:49:8e:
                    3b:4f:ca:82:99:8b:aa:30:f0:1b:e9:fe:db:cf:5f:
                    fb:39:c1:7c:ca:f2:5f:ab:fd:30:b9:67:ce:fd:f9:
                    ad:41:44:a2:03:cf:9b:e6:5c:b3:78:4a:f7:b1:35:
                    0c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A9:51:65:7F:9C:5A:6C:BA:6E:CC:11:6F:FA:E2:68:FA:82:2D:50
            X509v3 Authority Key Identifier:
                keyid:A1:4A:E5:01:A7:E3:5B:A9:CB:B1:55:74:90:58:7E:C3:34:AA:0C:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/A14AE501A7E35BA9CBB1557490587EC334AA0C33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14AE501A7E35BA9CBB1557490587EC334AA0C33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a383030303a3a2f33342d3334203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         16:8b:86:4e:39:d2:12:2c:af:c8:12:f9:8f:1e:90:97:cc:82:
         83:1f:b8:85:be:0e:08:7b:dd:c4:fc:90:40:51:c4:ed:32:25:
         a3:f0:d7:77:07:22:c2:76:74:33:ed:93:a6:60:63:a2:30:b0:
         2e:34:fc:9a:01:6e:84:45:16:0d:e0:32:2a:b6:16:8b:25:28:
         49:a8:96:e7:6d:cb:f0:bc:b0:01:fe:62:52:5d:d5:de:47:8f:
         19:3d:17:24:95:c5:30:f7:a4:90:a2:70:56:4e:d6:60:70:ff:
         56:09:51:5e:b6:b1:18:fc:82:ca:fb:38:0e:37:97:b0:97:53:
         b7:fb:35:b7:1a:1a:38:47:f7:27:dd:60:57:af:90:18:7b:42:
         63:05:55:9b:7f:bd:27:b4:6e:9e:f3:ea:0b:71:af:65:5b:ad:
         62:ae:3e:83:b7:2f:dc:ce:d6:29:f4:fc:b8:59:67:38:4b:60:
         54:d6:d3:04:6b:62:ea:21:78:9a:8d:a8:08:49:12:3d:ea:ed:
         ad:23:0e:5f:83:43:b4:20:8e:91:c0:8d:2a:1a:aa:2d:4e:bb:
         bd:63:75:a3:ba:06:97:1b:f5:2a:26:07:d9:4b:ae:fc:58:51:
         32:e5:4f:2a:f7:15:11:0b:ec:a2:c9:6f:54:db:48:a4:7e:13:
         a9:a0:5b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----