Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/323830343a346562343a3a2f33322d313238203d3e203631353933.roa
File:                     323830343a346562343a3a2f33322d313238203d3e203631353933.roa (raw, json)
Hash identifier:          31xrCxDErwqpG42A5jGUkY+XjqeSSkcKh4uQgqyjbC0=
Subject key identifier:   8D:12:30:3E:19:81:92:73:A8:4C:80:95:75:60:C5:C2:5F:1A:7F:FF
Certificate issuer:       /CN=2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE
Certificate serial:       408334B3397585233CF8365E66803B976487C405
Authority key identifier: 2E:9F:82:AA:9A:B3:00:4C:AA:6C:86:8A:08:0C:6D:FA:63:15:B5:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/323830343a346562343a3a2f33322d313238203d3e203631353933.roa
Signing time:             Sun 09 Jul 2023 05:42:33 +0000
ROA not before:           Sun 09 Jul 2023 05:37:33 +0000
ROA not after:            Sun 07 Jul 2024 05:42:33 +0000
asID:                     61593
IP address blocks:        2804:4eb4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:83:34:b3:39:75:85:23:3c:f8:36:5e:66:80:3b:97:64:87:c4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE
        Validity
            Not Before: Jul  9 05:37:33 2023 GMT
            Not After : Jul  7 05:42:33 2024 GMT
        Subject: CN=8D12303E19819273A84C80957560C5C25F1A7FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f9:90:f6:3b:4e:1f:fc:ac:7e:eb:d5:cf:2b:
                    4f:c1:db:db:64:90:e6:25:2b:65:28:6a:c7:38:a1:
                    bb:3a:ac:a1:2e:77:5e:ad:24:e7:e9:99:d0:2b:bb:
                    42:37:ab:84:38:d6:d4:77:eb:dc:b7:86:85:19:dd:
                    11:4a:89:c3:b1:de:6d:c3:9f:79:88:02:8c:8c:cc:
                    77:c3:62:f7:21:39:bf:5e:ff:fe:2c:4d:05:81:65:
                    0c:c1:07:ea:db:c9:8c:bf:c6:c0:93:94:f6:dc:12:
                    4a:94:5d:06:7c:75:ae:2b:5e:94:41:4e:61:5f:53:
                    0b:bb:aa:ed:82:21:ff:86:f8:75:eb:2a:ea:9a:31:
                    81:bc:82:c8:e6:ae:5f:45:60:02:90:9a:9d:55:44:
                    c5:19:20:ca:a9:9f:cf:ea:69:78:ea:31:57:b6:17:
                    47:b6:45:6e:19:5e:f6:9e:13:45:35:1f:a4:ea:c9:
                    f1:46:93:08:27:b7:e3:32:31:35:64:40:e9:b7:73:
                    e4:c3:b1:a2:81:67:b0:da:57:dd:41:9a:d8:87:bf:
                    00:c8:0c:51:9c:5a:a5:b7:8d:ad:3b:4d:ca:18:41:
                    55:81:8f:7f:89:13:52:07:72:8a:e0:eb:77:1e:84:
                    d6:52:11:9b:46:fb:26:25:02:5c:46:a0:a0:f2:e0:
                    d3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:12:30:3E:19:81:92:73:A8:4C:80:95:75:60:C5:C2:5F:1A:7F:FF
            X509v3 Authority Key Identifier:
                keyid:2E:9F:82:AA:9A:B3:00:4C:AA:6C:86:8A:08:0C:6D:FA:63:15:B5:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/323830343a346562343a3a2f33322d313238203d3e203631353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4eb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:d7:20:95:ef:30:43:60:2b:64:fd:26:18:ce:07:09:26:86:
         da:07:16:0c:51:cb:78:14:ad:13:d2:c5:fc:43:59:a0:8b:d9:
         6d:69:ba:4d:a3:7d:f1:f2:93:0b:3e:2d:fb:32:7a:ce:db:05:
         9a:04:0f:99:f3:45:c0:62:5e:e0:ad:c7:53:a8:b3:bf:a9:cd:
         ec:d2:16:aa:4f:82:6e:3a:1a:b2:1f:e6:be:e7:e8:17:97:64:
         07:8c:bf:ad:cb:c7:57:08:74:89:9a:7b:af:ae:b9:45:c4:a3:
         61:32:ab:f5:59:ce:a1:c7:2b:20:79:f2:ec:9b:30:6e:46:79:
         94:f9:95:59:ef:d5:65:ae:4a:7c:c2:ce:e7:ac:24:6d:0f:bc:
         fe:e6:35:9f:ee:65:43:47:9f:9e:98:f1:75:84:02:70:a6:6a:
         ee:ef:ae:92:ee:33:a7:92:86:18:ae:be:12:34:86:96:1c:56:
         6a:29:74:f9:76:7b:87:d1:e2:e2:26:d9:14:72:63:a3:a0:1e:
         92:47:99:03:98:84:7f:e2:b5:da:40:5b:54:33:99:53:81:05:
         12:be:74:50:9d:e6:40:00:1c:8a:56:d1:e6:6e:d6:a1:4f:e1:
         ed:9a:b4:ad:c4:ae:b3:11:c2:7d:5c:27:f8:bc:59:79:c4:d1:
         8b:73:6a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----