Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a31393a3a2f34382d3438203d3e20323731313939.roa
File:                     323830343a6563383a31393a3a2f34382d3438203d3e20323731313939.roa (raw, json)
Hash identifier:          L4AMwPj4lgKNvjuZL/aLFEvAgRaAwFbiaoOyuSbxTWI=
Subject key identifier:   0D:5C:32:A8:72:3B:91:9D:32:A2:39:C5:D0:D4:04:3F:B2:D4:19:75
Certificate issuer:       /CN=395D31F7781B96429D8D87B4B73FA7CFDF8760F9
Certificate serial:       0583002A8E5B58DBF61C070EE4C66D600CED9B68
Authority key identifier: 39:5D:31:F7:78:1B:96:42:9D:8D:87:B4:B7:3F:A7:CF:DF:87:60:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/395D31F7781B96429D8D87B4B73FA7CFDF8760F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a31393a3a2f34382d3438203d3e20323731313939.roa
Signing time:             Wed 12 Jul 2023 11:25:49 +0000
ROA not before:           Wed 12 Jul 2023 11:20:49 +0000
ROA not after:            Wed 10 Jul 2024 11:25:49 +0000
asID:                     271199
IP address blocks:        2804:ec8:19::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:83:00:2a:8e:5b:58:db:f6:1c:07:0e:e4:c6:6d:60:0c:ed:9b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395D31F7781B96429D8D87B4B73FA7CFDF8760F9
        Validity
            Not Before: Jul 12 11:20:49 2023 GMT
            Not After : Jul 10 11:25:49 2024 GMT
        Subject: CN=0D5C32A8723B919D32A239C5D0D4043FB2D41975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:02:6f:20:11:7e:ba:8f:ea:ea:d9:ce:7d:
                    52:a4:0a:7f:95:43:67:47:1a:3c:6f:d2:ff:53:99:
                    50:88:0c:ac:7f:e9:d1:25:9f:a2:d7:0c:85:9e:ca:
                    a9:1a:e2:5c:9a:a8:fd:85:08:83:9d:11:ff:8c:bb:
                    e5:77:76:af:e7:fd:cc:47:71:9f:cf:14:4f:c2:25:
                    0e:7b:19:e5:3a:a5:2e:36:b6:e0:88:63:ba:19:0d:
                    aa:70:77:f4:61:26:fd:0d:75:21:ad:b4:ec:20:ec:
                    c6:16:9d:64:48:d0:ef:76:f2:04:e8:47:5e:98:99:
                    69:c3:ff:b9:d4:7c:01:79:6f:3b:d3:7f:63:cc:06:
                    27:a4:ff:4a:7a:7e:7e:eb:0b:80:3b:73:bc:64:e2:
                    fe:44:ba:d0:a7:3e:cc:b1:39:37:c3:f7:21:31:19:
                    12:99:9d:0d:82:a6:73:42:f4:04:68:74:d7:fb:0f:
                    81:0c:eb:4c:05:34:42:79:6d:0e:a7:95:b9:49:0d:
                    37:50:c1:7a:38:73:95:9b:3b:0b:89:85:73:9b:84:
                    ae:7c:4b:a7:31:73:cb:b5:50:4b:9f:62:23:5e:a0:
                    08:e5:d0:d8:26:5c:cf:61:3b:fb:56:e5:8f:fb:f8:
                    51:f7:41:2a:ad:21:3e:01:24:da:43:17:fe:70:0e:
                    91:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5C:32:A8:72:3B:91:9D:32:A2:39:C5:D0:D4:04:3F:B2:D4:19:75
            X509v3 Authority Key Identifier:
                keyid:39:5D:31:F7:78:1B:96:42:9D:8D:87:B4:B7:3F:A7:CF:DF:87:60:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/395D31F7781B96429D8D87B4B73FA7CFDF8760F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/395D31F7781B96429D8D87B4B73FA7CFDF8760F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a31393a3a2f34382d3438203d3e20323731313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:61:30:75:5c:b2:19:bb:e8:74:1c:2a:f4:41:c0:84:75:6a:
         e2:b7:4d:1c:3f:7c:06:8b:55:3b:41:83:3f:2b:65:96:b1:a3:
         3b:09:e4:a4:97:19:ba:5e:f3:9c:3f:8a:66:0b:35:21:6a:25:
         e7:92:9f:e0:2c:24:b4:e6:de:8b:5d:7d:0a:06:e7:e9:3b:55:
         e3:c0:44:83:ef:e8:69:35:40:c7:b1:4a:18:40:aa:49:2d:6f:
         ba:ee:37:9d:ea:2b:92:67:b4:4e:4d:12:3f:9a:be:f8:2e:75:
         36:a7:5d:8d:f9:b6:c7:0b:87:4f:36:dc:df:c4:5d:bb:6e:c7:
         fc:d6:1d:e4:fb:fa:99:c7:d2:4e:77:77:f5:0a:65:43:72:57:
         fa:2d:58:96:87:7d:67:8a:45:d3:82:87:50:c8:8f:a5:98:d0:
         ad:5e:97:04:86:21:70:46:3e:16:04:96:57:1f:de:30:13:59:
         de:0c:52:5a:72:79:dc:35:d6:01:0e:5b:71:52:34:0c:78:f6:
         52:bd:56:84:c8:04:07:ac:c0:7b:3c:7c:2e:e8:1d:e6:8b:5b:
         96:e4:12:e0:b4:be:6b:36:d7:53:e4:12:bf:5a:80:ff:86:ad:
         5f:20:fe:09:1d:b3:75:0e:5a:d8:ce:be:5e:a5:83:db:11:f8:
         18:26:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----