Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/2/323830343a6164633a3a2f33322d3332203d3e203532393237.roa
File:                     323830343a6164633a3a2f33322d3332203d3e203532393237.roa (raw, json)
Hash identifier:          ESe8m7UNtgyHLUc93oTBeDPDHSNfUxD2qf4FF/GxHOs=
Subject key identifier:   9F:5C:93:26:2C:80:89:47:67:86:B9:9C:DA:00:BB:B6:ED:22:EF:21
Certificate issuer:       /CN=5DCDD32616E8881974B74F53AFF3DA15BED5AE69
Certificate serial:       4A3D86D02B0DD48DC804C68929F131D0936FF0FB
Authority key identifier: 5D:CD:D3:26:16:E8:88:19:74:B7:4F:53:AF:F3:DA:15:BE:D5:AE:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DCDD32616E8881974B74F53AFF3DA15BED5AE69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/2/323830343a6164633a3a2f33322d3332203d3e203532393237.roa
Signing time:             Tue 23 May 2023 21:20:50 +0000
ROA not before:           Tue 23 May 2023 21:15:50 +0000
ROA not after:            Tue 21 May 2024 21:20:50 +0000
asID:                     52927
IP address blocks:        2804:adc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3d:86:d0:2b:0d:d4:8d:c8:04:c6:89:29:f1:31:d0:93:6f:f0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DCDD32616E8881974B74F53AFF3DA15BED5AE69
        Validity
            Not Before: May 23 21:15:50 2023 GMT
            Not After : May 21 21:20:50 2024 GMT
        Subject: CN=9F5C93262C8089476786B99CDA00BBB6ED22EF21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:46:14:43:23:81:ee:a8:fd:b0:81:54:2b:55:
                    fd:d1:8a:17:2e:06:67:82:6b:08:72:2c:43:06:26:
                    69:f7:55:fc:35:68:62:7f:eb:88:44:c6:8b:b2:ee:
                    c1:e5:21:29:0d:fb:d9:fb:f4:80:90:49:5b:62:ff:
                    74:4b:dc:18:cd:40:3f:65:c0:45:d5:13:29:7c:31:
                    8e:48:9d:a3:47:b3:f0:75:ed:ae:18:65:e4:f5:64:
                    80:2d:b7:c0:f8:1f:11:85:a5:fc:f3:3e:de:a3:e6:
                    d1:be:e9:c4:4b:c0:f2:54:7d:26:1e:90:b4:78:d0:
                    28:48:0b:a2:2a:b5:8d:25:fa:07:a0:12:40:a6:12:
                    bc:f9:b9:43:74:c9:83:10:00:64:27:ae:b1:bd:30:
                    df:de:84:28:7f:a6:da:ad:2a:be:2b:1b:a3:f0:b6:
                    4a:99:b3:53:4e:ec:1a:57:0f:78:3d:4e:58:18:18:
                    a8:a8:29:79:bf:54:87:61:c4:75:5e:bb:6a:c8:7b:
                    0b:a0:9d:09:ed:11:11:ec:4d:48:a6:e5:6e:db:d4:
                    d4:39:9c:74:83:8b:51:1b:77:5b:b5:aa:62:4d:eb:
                    8a:b9:81:1c:95:e4:6b:e9:8b:b5:fb:c1:58:bb:a9:
                    0c:11:08:ae:8a:ac:6e:db:84:df:0d:bc:44:33:6d:
                    10:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5C:93:26:2C:80:89:47:67:86:B9:9C:DA:00:BB:B6:ED:22:EF:21
            X509v3 Authority Key Identifier:
                keyid:5D:CD:D3:26:16:E8:88:19:74:B7:4F:53:AF:F3:DA:15:BE:D5:AE:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/2/5DCDD32616E8881974B74F53AFF3DA15BED5AE69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DCDD32616E8881974B74F53AFF3DA15BED5AE69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/2/323830343a6164633a3a2f33322d3332203d3e203532393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:adc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:52:6e:82:42:33:ea:9a:af:68:dc:a0:ea:06:7a:ad:e9:03:
         bc:1e:87:ac:d2:6a:4b:53:d8:b2:91:e7:ac:e4:2c:78:5e:b5:
         b8:a7:31:58:f9:c7:86:cd:93:51:6e:6b:35:4a:8c:77:43:04:
         d4:2c:58:6a:ab:3c:9d:5e:be:88:f7:4b:63:83:36:01:c9:ca:
         b0:09:d5:0f:d5:89:75:91:58:67:54:65:ef:57:17:fb:77:fd:
         2e:14:22:a0:01:94:8e:90:d7:14:4e:8a:58:18:46:6b:4d:96:
         74:01:f5:90:b4:82:0f:91:03:d9:e5:31:1e:f8:f9:4e:64:4a:
         eb:c5:c7:fb:4c:e7:21:73:11:70:2c:0b:3a:55:18:26:16:07:
         8d:01:16:69:e9:a3:6e:5a:3b:93:9e:41:e7:e4:c7:65:0d:6a:
         0e:dc:b0:dd:1b:d1:c0:ef:4f:5e:e7:d1:39:90:21:f7:d5:29:
         fe:3d:19:83:6e:0c:2a:c4:a9:54:31:24:3f:2b:ab:23:94:47:
         f0:af:f7:ab:36:b2:09:ac:b7:cd:57:80:3b:90:e5:fa:ca:0a:
         35:cd:5e:5e:e8:70:4a:70:82:f0:96:fe:1d:bf:f7:14:42:7e:
         58:67:78:67:03:40:a8:23:f4:19:6d:29:11:39:4a:08:48:4e:
         6f:d3:ac:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----