Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a3a2f33322d3334203d3e20323636363131.roa
File:                     323830343a336561343a3a2f33322d3334203d3e20323636363131.roa (raw, json)
Hash identifier:          TCXaaeFm+lqCxKoJMok0+IpLh1g/02UTI7Wg86qOw6Y=
Subject key identifier:   A8:7E:23:AE:00:A6:0B:01:F4:66:D9:83:34:1C:04:7D:70:84:8B:56
Certificate issuer:       /CN=690A88BE654AD67BF30499F617A3C9BFC23AA33B
Certificate serial:       32B7C6D51BC11888CB0C46AF0F378609DC3E8C11
Authority key identifier: 69:0A:88:BE:65:4A:D6:7B:F3:04:99:F6:17:A3:C9:BF:C2:3A:A3:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/690A88BE654AD67BF30499F617A3C9BFC23AA33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a3a2f33322d3334203d3e20323636363131.roa
Signing time:             Fri 25 Nov 2022 17:04:00 +0000
ROA not before:           Fri 25 Nov 2022 16:59:00 +0000
ROA not after:            Fri 24 Nov 2023 17:04:00 +0000
asID:                     266611
IP address blocks:        2804:3ea4::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b7:c6:d5:1b:c1:18:88:cb:0c:46:af:0f:37:86:09:dc:3e:8c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690A88BE654AD67BF30499F617A3C9BFC23AA33B
        Validity
            Not Before: Nov 25 16:59:00 2022 GMT
            Not After : Nov 24 17:04:00 2023 GMT
        Subject: CN=A87E23AE00A60B01F466D983341C047D70848B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:4f:54:ec:cc:8a:14:4f:58:09:e3:79:87:
                    2f:d0:0c:a4:52:dd:0c:55:bf:70:5d:3f:8c:10:04:
                    8e:45:8f:ff:30:3e:f0:58:fb:ef:73:7d:7c:2e:a7:
                    8e:7e:d6:a7:f2:e8:ec:c4:81:87:41:77:3c:14:8d:
                    90:bb:b1:bb:26:42:90:27:2f:0a:72:56:0f:21:0f:
                    f7:15:1d:9e:91:d5:09:89:85:fd:2a:15:9a:99:58:
                    99:cf:59:80:b1:cb:de:22:e4:db:28:62:cd:39:da:
                    39:44:be:a4:03:b7:56:d4:67:86:d8:d3:ff:3b:6c:
                    65:46:69:7a:fe:43:93:2f:8b:72:fd:15:ec:b1:59:
                    81:ae:20:44:64:9f:ad:70:22:b1:a7:85:09:ee:67:
                    12:9e:f5:c2:f7:ab:6a:25:89:54:72:7c:65:95:50:
                    d1:c0:ec:bf:ae:2a:72:39:39:21:4e:30:19:8f:45:
                    58:5d:5e:26:8c:65:f4:c8:6e:38:18:6f:01:09:91:
                    6d:94:4c:1f:f1:80:ad:b7:4a:41:22:48:cf:d3:af:
                    db:bf:90:d2:29:19:d3:37:8d:20:80:f7:61:73:5b:
                    30:bf:63:cb:6d:fb:4b:5b:7f:5e:d2:8d:69:38:1e:
                    46:00:fc:02:f5:cb:f7:5a:36:91:2f:85:ce:5e:4f:
                    64:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7E:23:AE:00:A6:0B:01:F4:66:D9:83:34:1C:04:7D:70:84:8B:56
            X509v3 Authority Key Identifier:
                keyid:69:0A:88:BE:65:4A:D6:7B:F3:04:99:F6:17:A3:C9:BF:C2:3A:A3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/690A88BE654AD67BF30499F617A3C9BFC23AA33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/690A88BE654AD67BF30499F617A3C9BFC23AA33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a3a2f33322d3334203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:a1:7d:31:81:7c:ab:b2:c9:de:ee:80:c6:d6:4e:01:e4:82:
         a1:c3:ab:46:fa:da:a0:c8:6e:1d:a0:3c:99:32:8b:d6:a2:46:
         33:72:51:5c:81:89:43:c6:4b:0c:d1:66:78:4b:40:3a:21:98:
         ea:8b:30:f5:3a:54:b6:3e:55:52:cd:66:e7:2d:9e:2e:1a:4d:
         be:c9:64:bc:01:e3:06:ec:fe:e7:5f:3e:48:2f:90:ac:db:bb:
         8d:64:ed:54:d3:4a:5f:28:b0:e5:ae:fd:f2:f4:51:c5:87:de:
         15:f1:c4:89:8a:f2:24:34:b3:78:09:d5:2d:1f:a4:b5:33:d2:
         ab:bf:72:16:f4:ff:a6:ec:54:78:55:7f:10:01:1c:69:59:b4:
         2c:a9:bc:87:49:6e:64:db:0e:52:a7:31:3b:cf:21:8e:22:7e:
         8a:bc:85:cf:80:b1:1e:56:c6:4d:09:a3:27:98:cf:95:13:39:
         2b:2a:e6:34:a7:75:c6:11:b5:4f:85:69:86:0f:f1:f2:74:4e:
         cd:de:41:eb:29:dd:84:bb:e5:4c:46:68:e7:c9:b0:4a:06:dc:
         1c:e9:16:e2:7b:14:1e:04:7c:be:b8:0f:c1:e9:f1:5b:cd:3c:
         8f:4a:ce:36:b3:95:16:76:9c:47:36:80:20:1c:24:c9:10:23:
         8b:86:8d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----