Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/323830343a346139383a3a2f33322d3332203d3e20323637323531.roa
File:                     323830343a346139383a3a2f33322d3332203d3e20323637323531.roa (raw, json)
Hash identifier:          sFyYEQyeMbxz5rJgji3q0PyBOCVsdwnGx1WX8ycj2wo=
Subject key identifier:   03:AF:57:36:31:EF:38:EE:76:15:B8:BE:B8:5F:F0:84:BF:4A:59:80
Certificate issuer:       /CN=9C9296102315824CFD263B973FA8E26ADEAD1475
Certificate serial:       568CDBD35114A58A53438464C21269AB98C0EFFF
Authority key identifier: 9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C9296102315824CFD263B973FA8E26ADEAD1475.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/323830343a346139383a3a2f33322d3332203d3e20323637323531.roa
Signing time:             Tue 16 May 2023 17:00:00 +0000
ROA not before:           Tue 16 May 2023 16:55:00 +0000
ROA not after:            Tue 14 May 2024 17:00:00 +0000
asID:                     267251
IP address blocks:        2804:4a98::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8c:db:d3:51:14:a5:8a:53:43:84:64:c2:12:69:ab:98:c0:ef:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C9296102315824CFD263B973FA8E26ADEAD1475
        Validity
            Not Before: May 16 16:55:00 2023 GMT
            Not After : May 14 17:00:00 2024 GMT
        Subject: CN=03AF573631EF38EE7615B8BEB85FF084BF4A5980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:ba:1f:2e:fc:de:5a:76:0d:e2:87:48:dd:
                    17:58:ce:fd:96:b8:19:fe:30:58:23:b1:21:5c:bd:
                    ef:11:27:ce:52:1b:fb:9a:ce:3b:cf:fd:a3:99:8b:
                    c7:31:f9:09:e4:8f:69:02:54:e7:fe:b9:ba:6c:1d:
                    db:2b:52:d1:6b:27:55:97:d0:10:60:2e:03:1e:2c:
                    3a:a5:80:7c:85:b7:a7:d4:42:00:95:76:47:68:44:
                    b0:c7:29:53:ba:df:b4:f1:8b:58:a5:a6:4b:be:e1:
                    4b:10:4e:7c:c9:9a:6c:31:fe:80:f6:c3:0d:2c:0d:
                    56:fd:17:9a:e5:34:75:49:a2:34:09:f0:0d:98:28:
                    ae:49:af:8f:12:7c:30:00:50:01:11:d9:b4:9f:76:
                    63:ab:1b:97:48:1d:d9:42:f2:0a:86:41:26:c0:36:
                    c8:51:ed:5d:cc:63:32:c1:e1:b9:e5:ca:1c:47:d6:
                    9d:00:64:c7:8c:94:be:c4:e7:3e:d9:60:74:61:ce:
                    88:22:b2:d0:a0:d7:23:e7:57:2d:a7:a0:d7:1b:f2:
                    26:96:b1:3b:74:be:1b:ea:ac:9e:b1:a4:c7:6d:09:
                    e5:fb:ed:ce:fc:33:61:cf:91:ba:3a:63:cc:12:b4:
                    a5:72:12:11:c6:9f:af:09:28:8a:ea:7c:6f:63:dc:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AF:57:36:31:EF:38:EE:76:15:B8:BE:B8:5F:F0:84:BF:4A:59:80
            X509v3 Authority Key Identifier:
                keyid:9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/9C9296102315824CFD263B973FA8E26ADEAD1475.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C9296102315824CFD263B973FA8E26ADEAD1475.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/323830343a346139383a3a2f33322d3332203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a98::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:11:24:7f:d9:35:33:38:70:5c:40:47:cd:09:f4:f6:95:78:
         13:07:10:13:9e:3c:20:9c:2b:a3:bf:f9:42:73:15:79:9e:1f:
         ef:3f:bd:03:35:73:f2:ba:50:01:6c:c5:2b:f2:f8:a5:6a:3c:
         08:d8:41:40:e0:26:81:b1:99:8c:94:4e:1d:fc:59:53:fe:c4:
         f3:e8:f2:61:38:af:89:0f:9e:0f:4c:5c:bd:2c:1c:c4:ff:f9:
         ba:17:f9:2e:36:2f:bd:12:6a:25:50:8c:02:03:50:51:09:6d:
         c1:14:59:c2:c7:d7:08:a1:ad:d7:a5:e8:d8:a3:f6:08:71:8c:
         20:1d:42:1d:fa:dc:42:98:e4:69:82:1d:ee:72:f8:ce:df:c6:
         5d:4c:0c:93:1e:ba:61:2d:ce:e4:92:26:83:f3:68:34:f4:50:
         76:de:0c:76:f4:82:bd:bc:ba:46:8d:d0:02:30:6f:52:a8:80:
         1d:fe:36:7b:60:de:40:2b:55:60:9d:f4:fd:a2:51:0b:e0:38:
         3a:05:82:10:76:9a:25:6a:82:bc:bb:fc:3c:68:1f:6e:02:64:
         a9:5f:b3:11:6a:b3:d0:40:39:c0:87:f1:80:a3:64:1e:6a:f0:
         85:92:e7:8a:87:74:00:fa:af:d6:bd:b1:d7:e1:b0:eb:17:31:
         79:20:91:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----