Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a3a2f33322d3332203d3e20323638383736.roa
File:                     323830343a356265383a3a2f33322d3332203d3e20323638383736.roa (raw, json)
Hash identifier:          VvvRTPRfUswuS97Scrj0Px7afkHLbUNfK5B4fa8BlSo=
Subject key identifier:   95:0F:70:51:DC:B6:D7:15:A6:C7:67:A3:E5:9C:33:07:56:39:64:9F
Certificate issuer:       /CN=1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D
Certificate serial:       17FD0A6758FE3A4C716F0A5B2CDBEC124E7A0BB0
Authority key identifier: 1E:E4:0D:DF:B1:22:A5:49:8D:B8:0B:FF:1A:B6:F5:53:11:51:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a3a2f33322d3332203d3e20323638383736.roa
Signing time:             Wed 01 Mar 2023 10:42:56 +0000
ROA not before:           Wed 01 Mar 2023 10:37:56 +0000
ROA not after:            Wed 28 Feb 2024 10:42:56 +0000
asID:                     268876
IP address blocks:        2804:5be8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fd:0a:67:58:fe:3a:4c:71:6f:0a:5b:2c:db:ec:12:4e:7a:0b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D
        Validity
            Not Before: Mar  1 10:37:56 2023 GMT
            Not After : Feb 28 10:42:56 2024 GMT
        Subject: CN=950F7051DCB6D715A6C767A3E59C33075639649F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:55:6d:af:c3:ae:51:a1:be:b9:1e:83:3d:
                    6a:97:55:43:da:f6:25:4a:48:dc:b8:ec:78:5f:f0:
                    d9:a0:2a:85:56:b6:74:46:16:c0:31:09:6b:9a:c5:
                    81:48:34:08:ec:a6:2d:1f:39:c0:ca:9e:6c:3b:74:
                    b7:0c:a5:2d:8c:ad:61:e4:10:fb:87:aa:33:a4:55:
                    f6:38:fb:58:8d:2e:eb:6b:97:59:34:c8:7b:df:de:
                    20:97:09:e3:c7:3e:ea:a7:07:b9:fd:9b:fb:41:79:
                    34:4c:98:2e:9d:1d:e8:ab:37:d6:5d:15:33:10:6b:
                    c5:c1:3a:3a:d6:ba:fc:5d:d8:b3:c6:a7:6d:76:2f:
                    23:cb:b9:30:a6:1d:f7:ec:b4:20:fe:fd:49:0e:9a:
                    ba:f3:a3:97:96:54:c2:11:ec:a4:99:4f:12:13:83:
                    6e:9a:49:ce:4a:39:ed:b8:18:05:bf:3b:7d:c2:d9:
                    e4:d3:1f:36:4f:71:3d:b5:14:86:d0:dc:de:3e:5b:
                    85:f7:77:d8:35:8c:96:3a:e8:ae:bd:7e:9f:03:de:
                    51:a0:20:fa:a7:2b:eb:7b:7c:35:88:85:76:5e:53:
                    8c:1e:e4:c7:3f:11:ef:bd:f4:f7:44:d1:03:70:69:
                    20:4d:1e:3b:e1:7a:59:72:1b:92:0d:d5:b2:55:72:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0F:70:51:DC:B6:D7:15:A6:C7:67:A3:E5:9C:33:07:56:39:64:9F
            X509v3 Authority Key Identifier:
                keyid:1E:E4:0D:DF:B1:22:A5:49:8D:B8:0B:FF:1A:B6:F5:53:11:51:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a3a2f33322d3332203d3e20323638383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5be8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:d4:60:8a:29:43:59:84:41:d9:29:51:c1:b6:c3:40:ae:a7:
         3b:0f:3a:65:9a:4b:97:13:5a:d0:de:b9:0f:d9:19:ab:2c:e1:
         fe:d2:92:0a:67:eb:1e:3c:fb:7a:70:3a:0b:b9:d9:9d:8b:81:
         e1:5d:41:4c:1b:56:6e:cc:11:c7:e7:c6:04:24:85:04:c9:52:
         28:4f:af:a7:93:46:8c:9f:b6:1b:b7:67:2f:82:84:8b:e6:13:
         43:9b:dd:f8:38:e3:9e:3c:5c:c8:8d:02:06:2d:ae:38:d5:05:
         3c:51:b2:f8:7d:b4:85:e2:01:ca:b6:33:c6:2f:a0:c7:a5:77:
         00:ee:2e:84:cb:00:23:65:d3:41:d7:6a:ff:c8:b0:92:2e:1e:
         90:0f:d9:67:52:c4:49:6f:24:f5:83:d6:90:7c:34:05:17:9f:
         05:b4:32:99:41:8a:ea:e4:dc:98:b1:35:1f:23:93:fc:7b:bf:
         56:98:30:e5:e9:5a:95:ff:56:49:e3:02:9f:4d:c5:75:ad:20:
         c8:9b:49:1c:f0:91:93:08:9f:76:f4:9b:04:2d:4d:7a:14:d8:
         05:b6:dd:3a:7e:55:1d:da:63:35:c8:bd:cd:13:34:ef:3e:3c:
         f3:49:21:d1:94:86:2d:b2:1f:55:e3:03:da:25:da:1f:5e:c0:
         f2:70:ce:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----