Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gvh2oYGds1N6jhtMSrDbf5Z4ikTcmqoZL9M772ZYzr1R/0/323830343a356333383a3a2f33322d3438203d3e20323638383935.roa
File:                     323830343a356333383a3a2f33322d3438203d3e20323638383935.roa (raw, json)
Hash identifier:          HMMpESfKfAmths/tJHsH6Uu7X3xhZUFrACYqeWAhS1A=
Subject key identifier:   45:02:05:73:F0:32:DA:EC:C8:95:38:9A:4B:D3:F8:26:00:2E:7A:24
Certificate issuer:       /CN=999929A8883AD7E8D9D48AC57A08777F5F0757DE
Certificate serial:       791290BD7F05C9D79196E36494EE9F04E400CC3F
Authority key identifier: 99:99:29:A8:88:3A:D7:E8:D9:D4:8A:C5:7A:08:77:7F:5F:07:57:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/999929A8883AD7E8D9D48AC57A08777F5F0757DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gvh2oYGds1N6jhtMSrDbf5Z4ikTcmqoZL9M772ZYzr1R/0/323830343a356333383a3a2f33322d3438203d3e20323638383935.roa
Signing time:             Mon 09 Jan 2023 17:00:01 +0000
ROA not before:           Mon 09 Jan 2023 16:55:01 +0000
ROA not after:            Tue 09 Jan 2024 17:00:01 +0000
asID:                     268895
IP address blocks:        2804:5c38::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:12:90:bd:7f:05:c9:d7:91:96:e3:64:94:ee:9f:04:e4:00:cc:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999929A8883AD7E8D9D48AC57A08777F5F0757DE
        Validity
            Not Before: Jan  9 16:55:01 2023 GMT
            Not After : Jan  9 17:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8d:71:db:9d:16:79:a1:5f:09:f9:4f:5b:ce:
                    9f:e8:8a:59:1b:33:ec:b0:87:0d:30:cb:c3:44:65:
                    5b:d1:3f:68:2b:b0:72:a8:16:92:e5:21:9d:c8:39:
                    f7:ed:c8:cb:8b:9d:26:4d:09:0f:1a:c4:39:ea:af:
                    ec:31:bd:68:55:19:ba:48:d5:c8:ce:36:3f:77:98:
                    9a:1f:47:2f:44:a7:c1:ec:1b:a9:d2:8d:13:95:bb:
                    5a:fc:6e:c0:f9:da:c9:80:93:ef:ec:1d:c2:fb:9e:
                    c1:09:d9:34:cd:0d:6a:6d:b9:0f:65:68:e7:13:c8:
                    64:c3:3c:4b:9c:e3:07:e5:07:f3:63:01:4c:45:4f:
                    b6:b5:56:ee:22:a9:74:3e:e2:0d:7d:45:e2:27:8d:
                    43:b2:06:44:25:aa:ba:8d:88:50:2b:4a:ec:ee:9c:
                    ab:67:ec:b0:e0:03:ce:3d:4b:61:79:0f:d0:5d:e0:
                    97:4e:2d:36:d6:30:ca:c1:e2:e4:08:fd:ad:8f:34:
                    6f:2a:3a:90:94:f9:70:ae:9f:af:af:7c:a6:a9:03:
                    57:bf:b1:b5:60:98:88:35:09:aa:00:32:34:81:aa:
                    fa:cd:64:05:d8:ce:b4:bb:d7:76:a8:9a:a7:e2:16:
                    fd:e9:4f:45:81:f3:a1:f2:66:e0:c8:00:75:30:31:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:02:05:73:F0:32:DA:EC:C8:95:38:9A:4B:D3:F8:26:00:2E:7A:24
            X509v3 Authority Key Identifier:
                keyid:99:99:29:A8:88:3A:D7:E8:D9:D4:8A:C5:7A:08:77:7F:5F:07:57:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gvh2oYGds1N6jhtMSrDbf5Z4ikTcmqoZL9M772ZYzr1R/0/999929A8883AD7E8D9D48AC57A08777F5F0757DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/999929A8883AD7E8D9D48AC57A08777F5F0757DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gvh2oYGds1N6jhtMSrDbf5Z4ikTcmqoZL9M772ZYzr1R/0/323830343a356333383a3a2f33322d3438203d3e20323638383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:89:ef:c8:6a:1c:72:af:c3:15:92:03:e8:a7:c4:e4:a3:11:
         33:29:a8:0b:66:2e:0b:13:11:88:28:8f:2e:4a:39:e3:ca:14:
         c1:4f:14:ad:3c:c5:98:05:bf:b6:3b:51:26:0f:4d:80:c2:78:
         46:83:84:15:00:59:1f:8c:33:ea:64:0f:6f:18:e2:cb:a9:14:
         23:20:c0:f7:ed:e5:a3:6c:93:4b:83:97:3d:fe:99:8d:ba:25:
         d1:8c:04:ef:8d:7a:5e:c3:10:b2:71:83:af:e4:59:40:9d:71:
         65:86:2c:ac:06:02:f5:87:eb:9c:ae:52:c8:42:90:8d:f7:5f:
         dc:2c:5e:68:cd:f1:1c:84:16:e9:0c:31:8f:99:e2:38:e5:68:
         f6:c8:9f:86:a6:15:d5:4c:37:49:b7:aa:10:6f:f8:2e:f7:d6:
         0f:3a:fa:41:1e:c8:ef:0a:ed:9d:06:19:04:c0:2d:7b:5f:62:
         2c:32:9e:bb:51:1b:5d:c3:20:7f:1a:ad:77:5a:aa:a1:25:31:
         74:18:d1:e4:81:02:9d:11:0d:3c:c2:92:aa:36:8f:3f:43:ce:
         e7:c4:e8:10:f3:b6:fd:30:bd:1f:03:32:3c:dd:49:f4:e8:39:
         27:1d:95:3e:93:98:68:08:fa:b2:5d:0c:c5:c6:f9:66:bf:d3:
         28:b1:e4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----