Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/323830343a343431633a3a2f33322d3332203d3e20323637363033.roa
File:                     323830343a343431633a3a2f33322d3332203d3e20323637363033.roa (raw, json)
Hash identifier:          GrRJ1fOfhVKJQ7qGv7E3/wYOXAR4Bm6TDMzf/vMFFN0=
Subject key identifier:   88:B6:5D:43:52:C3:6E:45:33:41:D0:EC:41:7E:C5:38:85:45:1D:B6
Certificate issuer:       /CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
Certificate serial:       51651631436EE0FE40D49FDE3257259E6C826C7D
Authority key identifier: 7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/323830343a343431633a3a2f33322d3332203d3e20323637363033.roa
Signing time:             Wed 20 Sep 2023 18:03:32 +0000
ROA not before:           Wed 20 Sep 2023 17:58:32 +0000
ROA not after:            Wed 18 Sep 2024 18:03:32 +0000
asID:                     267603
IP address blocks:        2804:441c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:65:16:31:43:6e:e0:fe:40:d4:9f:de:32:57:25:9e:6c:82:6c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
        Validity
            Not Before: Sep 20 17:58:32 2023 GMT
            Not After : Sep 18 18:03:32 2024 GMT
        Subject: CN=88B65D4352C36E453341D0EC417EC53885451DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:0a:3d:03:7e:3f:2e:6c:15:72:f1:89:7d:
                    fa:6b:e2:e0:c5:38:24:64:af:73:4c:91:62:c6:de:
                    6b:f2:0c:43:22:de:9c:48:34:25:6b:fa:92:09:bc:
                    ae:69:85:0d:e7:24:cd:db:c1:3c:86:ed:6b:e2:36:
                    e5:12:00:d8:61:ac:06:7a:f0:b2:52:ce:fc:8e:08:
                    9b:8f:0b:0b:68:72:4e:cf:4f:b0:88:a2:31:69:fd:
                    2b:13:52:48:46:2d:f6:8b:98:8e:c2:f2:b7:20:94:
                    64:98:60:e3:99:3d:07:30:72:be:7e:e8:28:9c:6a:
                    04:63:94:09:69:2a:f1:53:35:89:6b:7d:31:23:7f:
                    99:d6:08:7a:40:a9:43:e7:54:54:fb:42:3c:a4:8a:
                    1f:83:22:e8:4b:20:78:39:51:9e:5d:0f:75:1c:83:
                    0a:6f:55:bb:04:ee:b8:28:5c:b3:5e:d5:c6:3c:c2:
                    e2:e5:6c:01:70:34:db:01:50:3c:4b:1d:07:0c:f0:
                    1c:ac:99:7e:a6:f6:f7:4f:13:52:56:7a:ac:51:1e:
                    79:1d:4c:ec:c1:d0:53:b2:4b:3c:33:13:d2:b9:d7:
                    e9:f3:a5:b5:7f:5f:25:f9:3b:57:2c:16:e8:e1:42:
                    f9:87:29:c6:85:f7:0e:25:2e:a4:b7:3d:36:8b:62:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B6:5D:43:52:C3:6E:45:33:41:D0:EC:41:7E:C5:38:85:45:1D:B6
            X509v3 Authority Key Identifier:
                keyid:7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/323830343a343431633a3a2f33322d3332203d3e20323637363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:441c::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:48:4d:62:0e:9c:2a:ca:1a:91:f8:d6:be:f9:dc:fd:80:fd:
         44:32:e0:8d:3e:9d:44:81:4a:96:77:1e:08:b1:1a:13:d2:29:
         76:d6:14:69:e8:ec:4e:aa:d9:3b:15:fa:96:0c:6b:90:31:f4:
         78:17:b5:7b:cf:df:f3:16:63:ec:45:2f:f0:9a:73:7f:3f:8d:
         6d:be:17:8b:64:e9:1d:cb:a7:92:dd:cb:68:db:04:f0:ba:38:
         94:0b:98:b1:b0:f8:be:48:a1:1a:40:23:7e:60:ae:55:69:92:
         d9:36:88:a2:2a:d6:24:69:d4:7d:c4:c3:68:b9:df:93:98:5d:
         fa:a5:88:fa:d4:06:97:aa:ab:70:1c:f2:7c:0c:23:40:7d:e7:
         48:c4:50:75:a2:e1:b7:ad:c8:c1:81:0c:b2:1d:8d:f6:48:41:
         7b:c4:33:2b:f7:7a:5d:d2:28:d9:29:7f:58:c4:3c:75:c0:d1:
         3b:cf:dd:35:70:fb:37:67:53:f0:4c:a3:4a:a8:64:8f:8f:b6:
         9c:34:b3:ea:1e:7a:2e:6b:68:3e:dc:5b:6c:1f:94:73:80:f5:
         9c:87:e6:af:c1:aa:15:b5:a4:2c:63:2a:61:f4:aa:74:aa:1c:
         aa:82:b9:ed:6d:cf:68:01:11:f6:02:5e:76:b8:ef:26:77:10:
         0d:7c:35:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----