Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1/323830343a316434303a3a2f33322d3438203d3e203532363734.roa
File:                     323830343a316434303a3a2f33322d3438203d3e203532363734.roa (raw, json)
Hash identifier:          MWopw8+WxXye9F2kjNPempiGZ0MPU8OMOYnQKUk0Fvo=
Subject key identifier:   02:E1:49:15:83:2B:4D:88:6E:E0:7A:0E:A3:B8:68:F5:FC:A4:F6:AB
Certificate issuer:       /CN=D35F81E9E55C4E76424E39703EB07E6238E47B82
Certificate serial:       3C84551B5956B54EDE49A3957200B6F55BA3A10B
Authority key identifier: D3:5F:81:E9:E5:5C:4E:76:42:4E:39:70:3E:B0:7E:62:38:E4:7B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F81E9E55C4E76424E39703EB07E6238E47B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1/323830343a316434303a3a2f33322d3438203d3e203532363734.roa
Signing time:             Thu 02 Mar 2023 20:52:03 +0000
ROA not before:           Thu 02 Mar 2023 20:47:03 +0000
ROA not after:            Thu 29 Feb 2024 20:52:03 +0000
asID:                     52674
IP address blocks:        2804:1d40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:84:55:1b:59:56:b5:4e:de:49:a3:95:72:00:b6:f5:5b:a3:a1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35F81E9E55C4E76424E39703EB07E6238E47B82
        Validity
            Not Before: Mar  2 20:47:03 2023 GMT
            Not After : Feb 29 20:52:03 2024 GMT
        Subject: CN=02E14915832B4D886EE07A0EA3B868F5FCA4F6AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:df:19:81:27:c2:30:83:c3:77:00:20:fa:96:
                    57:87:bd:b9:bf:08:91:d1:2a:0f:e3:c7:1f:52:cf:
                    60:6b:36:0d:51:40:85:ca:e6:e2:ec:10:9b:05:2d:
                    b2:ca:75:b4:5f:e2:6c:1f:8a:b9:23:c9:9e:02:dc:
                    74:66:f6:ec:6f:74:b5:d1:9b:b2:6f:29:23:23:dd:
                    20:c3:76:4c:7f:63:c3:54:a0:56:09:30:28:d2:eb:
                    fa:22:e5:85:ed:c5:8b:1a:15:75:76:27:f3:b2:14:
                    e6:38:13:a2:21:41:71:23:b8:83:6f:5f:4b:db:97:
                    8f:44:13:52:72:5b:b8:fe:d5:00:cd:b7:7a:fa:23:
                    1e:b2:e5:85:4b:38:0f:e6:ed:60:44:4f:8c:d8:03:
                    eb:13:fb:cb:3a:40:b6:03:2e:ef:dc:0e:69:42:53:
                    c4:f2:e0:2c:54:80:cb:50:d1:d8:ff:ae:2e:99:06:
                    b2:73:f4:77:32:90:9d:86:00:ec:d8:b0:b7:dc:db:
                    13:51:7a:92:ad:08:e1:27:26:ac:0d:dd:5f:ff:f7:
                    b5:e3:31:d2:fe:29:76:56:63:96:f7:e8:9d:2e:4e:
                    80:78:35:86:58:7c:80:51:f1:05:a3:5d:42:22:1a:
                    5e:d5:97:ea:08:10:2b:8c:df:5d:97:f1:71:da:c7:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E1:49:15:83:2B:4D:88:6E:E0:7A:0E:A3:B8:68:F5:FC:A4:F6:AB
            X509v3 Authority Key Identifier:
                keyid:D3:5F:81:E9:E5:5C:4E:76:42:4E:39:70:3E:B0:7E:62:38:E4:7B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1/D35F81E9E55C4E76424E39703EB07E6238E47B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F81E9E55C4E76424E39703EB07E6238E47B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1/323830343a316434303a3a2f33322d3438203d3e203532363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:a4:09:a8:ea:28:86:cf:04:78:6b:ca:9a:62:5a:b1:85:b5:
         e4:2a:84:96:55:30:43:d5:d8:fd:ca:02:87:b6:b1:92:ef:ed:
         90:21:7a:38:c5:3d:85:38:e1:f8:8f:e3:e7:ee:21:f9:1c:6c:
         95:19:72:bc:fe:56:58:81:cf:45:a8:40:7f:f8:35:61:37:b2:
         e2:7c:e3:b2:7b:19:44:b4:ab:4c:e1:34:7d:12:10:cb:53:0d:
         a3:6f:8e:ce:d1:5d:f7:ce:a4:54:8b:bd:39:62:4a:8a:35:45:
         8c:df:30:62:c0:d3:79:b0:64:c7:93:5e:bd:58:fd:d8:22:1b:
         9a:e6:c5:b4:c2:d1:3e:2e:df:88:51:12:88:83:67:5b:f1:49:
         6c:5b:86:bf:81:1a:89:15:ca:b3:0e:56:a7:23:ca:3c:cb:a1:
         cb:5d:3c:b6:49:5e:53:ca:25:fd:46:59:69:97:9f:d5:03:6a:
         ba:f6:47:de:18:da:e4:a7:bd:56:41:e2:40:7d:4a:7a:ce:cc:
         ad:01:e1:df:45:c8:e4:fe:e7:06:0f:db:16:ea:36:af:18:e7:
         4b:f8:c7:e6:37:aa:5a:d6:a1:ac:bb:68:ca:bb:ad:60:3e:d4:
         37:3a:55:78:f0:de:b4:c6:b2:d6:66:f1:32:db:39:a9:2c:60:
         6d:29:33:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----