Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0/323830343a353366383a383030303a3a2f33332d3333203d3e20323638363139.roa
File:                     323830343a353366383a383030303a3a2f33332d3333203d3e20323638363139.roa (raw, json)
Hash identifier:          RIZrU/pDuYX8IQSprw5bnmcPyaOd6KuFn8jOSmATgi4=
Subject key identifier:   F3:AE:92:2D:C7:BD:88:1D:8D:2C:0F:21:29:53:8C:28:5B:AD:75:25
Certificate issuer:       /CN=360AF1068F03010D0F49188E66411805181F3A57
Certificate serial:       1CD5E5481C069B3213B47D395EB4DFA83BA31B5C
Authority key identifier: 36:0A:F1:06:8F:03:01:0D:0F:49:18:8E:66:41:18:05:18:1F:3A:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/360AF1068F03010D0F49188E66411805181F3A57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0/323830343a353366383a383030303a3a2f33332d3333203d3e20323638363139.roa
Signing time:             Tue 21 Mar 2023 18:44:00 +0000
ROA not before:           Tue 21 Mar 2023 18:39:00 +0000
ROA not after:            Tue 19 Mar 2024 18:44:00 +0000
asID:                     268619
IP address blocks:        2804:53f8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d5:e5:48:1c:06:9b:32:13:b4:7d:39:5e:b4:df:a8:3b:a3:1b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360AF1068F03010D0F49188E66411805181F3A57
        Validity
            Not Before: Mar 21 18:39:00 2023 GMT
            Not After : Mar 19 18:44:00 2024 GMT
        Subject: CN=F3AE922DC7BD881D8D2C0F2129538C285BAD7525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:ce:5e:e6:6f:e6:34:d8:6c:1d:9a:d4:00:
                    e8:be:22:f9:79:c2:6b:8e:19:be:b5:c4:ac:d2:99:
                    55:38:13:2b:74:4d:d8:b6:6e:8c:71:7b:95:25:3d:
                    0a:37:8c:54:d3:86:a0:63:e0:41:50:bc:17:6b:08:
                    26:dc:17:9b:16:32:73:97:88:36:ba:5b:71:6f:6f:
                    a5:fb:cf:e3:f4:0b:25:12:ee:fd:96:5d:47:61:2d:
                    a4:42:64:3d:ff:b5:a7:33:03:e3:a9:5c:4b:be:fa:
                    8d:0e:86:ce:42:87:7e:9e:74:c8:5d:c9:48:fe:ce:
                    7a:c6:50:f1:e4:25:a0:38:f7:7a:92:da:eb:53:c5:
                    13:87:e5:eb:07:bd:fb:49:bb:89:72:f5:f7:26:0a:
                    0e:e1:e5:84:85:75:87:8d:f6:bf:36:63:61:9c:d6:
                    35:e9:94:a9:57:06:18:05:ce:91:0f:52:de:d7:4f:
                    85:8e:29:06:12:1c:47:e4:ed:c0:cf:91:fe:5c:8f:
                    ca:da:ef:d7:f1:8e:52:1d:a2:3c:5e:dd:49:05:35:
                    7a:ff:85:ad:4b:b3:0f:75:f2:67:8d:00:ce:cd:55:
                    d4:44:4d:5d:74:b6:ac:97:80:a0:50:be:da:7d:70:
                    3a:03:1c:15:c0:40:38:22:ab:3f:f0:56:74:78:18:
                    ef:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AE:92:2D:C7:BD:88:1D:8D:2C:0F:21:29:53:8C:28:5B:AD:75:25
            X509v3 Authority Key Identifier:
                keyid:36:0A:F1:06:8F:03:01:0D:0F:49:18:8E:66:41:18:05:18:1F:3A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0/360AF1068F03010D0F49188E66411805181F3A57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/360AF1068F03010D0F49188E66411805181F3A57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0/323830343a353366383a383030303a3a2f33332d3333203d3e20323638363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53f8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b9:35:3a:74:41:a2:63:5f:2a:91:63:12:28:0c:b7:54:a5:42:
         c4:b5:e7:9d:81:f0:4d:19:ef:e1:e5:69:19:3c:bb:96:ab:86:
         68:af:2c:e0:7f:7c:f2:03:05:01:13:0f:32:bc:25:e8:9b:4f:
         aa:ab:b2:ba:3b:4e:d7:06:21:53:df:8a:0d:a3:3b:e6:2e:b5:
         0f:c4:a9:91:a4:05:30:2f:6a:8c:e4:c2:ad:9a:47:0e:df:7a:
         c3:83:fd:23:17:f1:c3:8c:09:d1:a3:0e:82:55:49:0f:b6:8f:
         f8:56:12:8e:9e:3f:0b:8b:7f:c4:69:88:89:1c:3a:1f:4f:29:
         32:c0:7c:2e:d9:15:15:a8:6c:2b:b6:26:2d:67:57:e2:22:20:
         03:dc:6f:c4:ae:b5:1f:4f:1f:ad:d4:de:f5:47:da:56:2e:16:
         51:fb:93:eb:bf:c5:c5:59:d0:c2:16:ed:e2:d6:f8:8a:c6:7f:
         5f:51:fc:ff:2e:a2:74:b8:fa:b8:a8:e8:7a:89:ba:fd:90:e7:
         8b:f6:e1:06:3a:78:01:38:96:13:e0:9b:1d:37:3b:13:e4:4a:
         d7:9f:83:5c:bc:2e:40:7b:f8:26:f1:9f:d6:99:13:eb:54:a1:
         df:3a:72:de:a7:d2:48:fd:49:ed:6f:54:77:82:a4:41:b4:5e:
         5c:1c:38:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----