Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/323830343a373564633a3a2f33322d3332203d3e20323731303734.roa
File:                     323830343a373564633a3a2f33322d3332203d3e20323731303734.roa (raw, json)
Hash identifier:          aYn9rHMzfM3sqDHiRdDhwi5MwPzjTBH2fQKUPUZ3dFY=
Subject key identifier:   B8:A6:19:BE:63:F5:50:E8:C7:93:5D:68:6D:A2:B5:A0:09:06:51:4F
Certificate issuer:       /CN=C5A6914B09BBA46156D17B286AA27C54E320625A
Certificate serial:       103E2937C45D9869F905B8EF40ECCD9C8998F099
Authority key identifier: C5:A6:91:4B:09:BB:A4:61:56:D1:7B:28:6A:A2:7C:54:E3:20:62:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5A6914B09BBA46156D17B286AA27C54E320625A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/323830343a373564633a3a2f33322d3332203d3e20323731303734.roa
Signing time:             Thu 12 Jan 2023 17:27:48 +0000
ROA not before:           Thu 12 Jan 2023 17:22:48 +0000
ROA not after:            Thu 11 Jan 2024 17:27:48 +0000
asID:                     271074
IP address blocks:        2804:75dc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3e:29:37:c4:5d:98:69:f9:05:b8:ef:40:ec:cd:9c:89:98:f0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5A6914B09BBA46156D17B286AA27C54E320625A
        Validity
            Not Before: Jan 12 17:22:48 2023 GMT
            Not After : Jan 11 17:27:48 2024 GMT
        Subject: CN=B8A619BE63F550E8C7935D686DA2B5A00906514F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:cb:ce:a4:02:91:0e:ce:16:e4:c0:cb:2f:
                    1e:33:2d:cb:0c:34:30:eb:c6:7c:db:4b:f6:2c:c0:
                    0b:9e:09:81:2b:33:f6:ce:c4:9e:18:d6:d7:58:b1:
                    e0:b0:3d:6a:cd:3d:b6:b7:f9:c4:d3:32:fe:bc:5b:
                    2e:09:77:8e:45:31:d4:eb:9e:36:2d:16:8b:fc:73:
                    b1:aa:40:25:0b:c5:da:7a:89:05:ea:0f:16:31:58:
                    35:1f:26:a4:b3:e0:2b:25:da:9e:e2:b6:74:1a:8e:
                    dc:84:ba:3e:77:4e:ed:0b:82:17:cb:4a:76:91:0c:
                    98:bf:5e:df:d4:b5:c0:e4:62:12:de:69:ff:0d:a9:
                    48:98:e0:5c:1a:fe:c0:d8:5c:87:10:ae:62:5f:c7:
                    70:e0:39:07:c3:ba:92:8d:03:48:6a:ed:9f:63:dc:
                    97:71:fb:2a:e4:c8:d4:c7:96:9c:59:46:98:43:7d:
                    9b:30:14:1a:31:5c:23:6d:0a:b3:55:e7:57:47:d6:
                    2c:04:f3:55:ca:2b:2e:74:ec:72:c6:ff:07:9b:25:
                    1a:86:55:b3:67:d3:a3:89:54:b4:b8:6a:33:68:7c:
                    0d:39:e0:9b:c2:e3:68:bf:9d:15:73:d6:2f:74:ce:
                    2e:d9:c3:4c:8e:c4:2e:0b:08:85:e3:e3:a8:a2:bb:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A6:19:BE:63:F5:50:E8:C7:93:5D:68:6D:A2:B5:A0:09:06:51:4F
            X509v3 Authority Key Identifier:
                keyid:C5:A6:91:4B:09:BB:A4:61:56:D1:7B:28:6A:A2:7C:54:E3:20:62:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/C5A6914B09BBA46156D17B286AA27C54E320625A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5A6914B09BBA46156D17B286AA27C54E320625A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/323830343a373564633a3a2f33322d3332203d3e20323731303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:1f:ab:7c:a7:54:61:68:dc:5f:14:9c:40:db:99:18:b8:13:
         7b:97:b3:1c:3d:3f:8e:09:15:60:8e:6d:d3:25:90:45:3f:5f:
         f7:28:83:74:14:68:b4:cb:6e:5b:19:c6:a3:0e:c3:97:68:c5:
         a8:c4:29:97:47:48:97:72:4b:1f:9a:cb:35:bc:dc:5a:77:50:
         34:06:e5:4a:d4:95:0f:e3:04:71:e8:66:c4:9d:ce:2e:f1:d1:
         d2:c1:c9:8c:30:06:1a:c2:79:af:97:e6:fb:bb:6d:3c:2a:f7:
         6e:d4:db:b7:f9:41:d5:46:a1:e9:d7:0d:8d:4f:42:ee:de:fe:
         c2:96:77:7c:8e:4c:f5:98:6d:6e:f5:45:cf:56:54:0a:ef:2b:
         ec:73:12:d7:cd:96:71:48:d4:96:93:4c:a5:c0:7b:74:c2:7b:
         06:7e:4b:4f:23:6c:75:31:b7:ba:c2:99:cb:30:b2:2e:50:da:
         20:52:a2:11:fd:14:b9:b8:88:02:72:f9:cd:49:fe:7e:b0:fb:
         a3:9c:58:8e:d3:3b:af:c0:3d:15:cc:60:a1:41:40:93:63:0d:
         e5:44:54:e6:29:9b:b8:b3:0b:66:39:0c:4d:8b:e7:75:16:ce:
         99:eb:d1:88:20:24:eb:2e:51:ae:e5:3f:40:d4:94:b9:ae:2e:
         b4:7d:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----