Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33322d3332203d3e20323637343230.roa
File:                     323830343a346433633a3a2f33322d3332203d3e20323637343230.roa (raw, json)
Hash identifier:          U35du8H53ZWhpV+qktKevd15C6rxtSVhbaewiG2q3/w=
Subject key identifier:   34:86:86:F6:BC:36:64:D5:3F:B8:94:42:09:19:F0:A2:CD:DA:62:27
Certificate issuer:       /CN=B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47
Certificate serial:       5FDB146D7EFBDF7297F7AB1E7ED1E2A9008D63AC
Authority key identifier: B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33322d3332203d3e20323637343230.roa
Signing time:             Tue 02 May 2023 21:33:56 +0000
ROA not before:           Tue 02 May 2023 21:28:56 +0000
ROA not after:            Tue 30 Apr 2024 21:33:56 +0000
asID:                     267420
IP address blocks:        2804:4d3c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:db:14:6d:7e:fb:df:72:97:f7:ab:1e:7e:d1:e2:a9:00:8d:63:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47
        Validity
            Not Before: May  2 21:28:56 2023 GMT
            Not After : Apr 30 21:33:56 2024 GMT
        Subject: CN=348686F6BC3664D53FB894420919F0A2CDDA6227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:fd:ff:c2:71:cd:34:4b:58:13:13:00:fd:
                    d4:37:eb:df:cc:cf:9d:3a:8a:74:94:84:5d:77:6c:
                    64:13:f3:fa:2f:0d:d2:cc:fa:37:38:5c:02:f9:f1:
                    9e:fe:da:80:20:b1:ff:8d:4d:8e:18:82:dc:c2:35:
                    fe:f0:e4:c8:94:a6:6e:28:61:4e:af:25:01:74:5b:
                    19:9d:b7:e8:be:69:d7:62:0b:55:6b:34:94:e0:c2:
                    22:b4:8c:a9:b1:d3:06:ba:57:59:1c:9a:c2:65:29:
                    ab:66:99:96:86:65:8e:e6:33:25:c4:57:5d:51:b0:
                    3d:bc:7e:8e:20:aa:06:37:b1:76:18:a1:66:cd:c6:
                    a3:e4:03:cd:02:42:da:6c:6e:db:eb:d5:c2:66:4c:
                    fe:a4:c9:75:44:aa:aa:ab:99:09:8a:46:a2:d6:4c:
                    79:92:a5:ba:02:e2:eb:84:0f:bd:4f:29:b9:cd:2a:
                    0f:08:32:4c:b0:65:8c:4c:7a:e2:78:b9:82:44:28:
                    81:5d:05:4a:ad:3f:0f:05:96:fa:d9:1a:b3:48:a3:
                    2b:df:28:71:fe:a9:b1:81:3f:1a:4b:ff:7b:7b:43:
                    cb:c5:28:aa:a4:0d:97:d7:aa:2a:0c:1c:97:81:43:
                    40:ba:70:5b:f4:f7:83:8d:8b:6a:43:f3:2c:be:e5:
                    67:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:86:86:F6:BC:36:64:D5:3F:B8:94:42:09:19:F0:A2:CD:DA:62:27
            X509v3 Authority Key Identifier:
                keyid:B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33322d3332203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:a8:7a:e0:e1:da:ba:a9:17:dc:cb:29:a2:f2:fc:25:92:98:
         10:4a:0d:3b:87:69:ca:91:89:c8:bf:ec:32:04:09:d2:78:e8:
         8a:04:6e:d0:9b:e5:a0:a0:ee:fb:c7:49:d9:46:ac:7e:c9:23:
         39:0d:6a:5f:8a:13:23:f1:68:aa:b3:04:68:71:dc:46:36:01:
         bb:bd:05:49:0a:ae:ba:03:97:06:b8:06:c4:2a:b6:f5:ca:07:
         2e:6d:9f:20:68:cb:3c:db:3f:14:e0:d0:cd:c7:c5:0f:f0:c5:
         ce:70:df:33:f1:ca:42:b3:17:bb:d3:b5:1a:23:46:9f:7b:d4:
         41:91:8b:53:68:5c:39:7c:73:43:bf:22:fe:aa:02:10:17:3a:
         16:e7:c8:2e:0c:3b:ea:c6:44:c4:50:bd:72:51:94:3e:91:65:
         28:b5:0a:84:04:86:fd:6f:dc:43:66:d2:3e:5a:4e:6a:0f:ac:
         9c:b5:80:4d:36:ca:0e:14:c6:df:d2:45:ea:dc:1f:e9:58:8f:
         ed:9e:bd:a1:39:a5:89:05:9d:66:b4:e2:d6:a1:ee:b6:c2:b7:
         4a:37:53:04:3b:da:be:30:a2:97:37:f0:b8:1d:5b:7b:72:3d:
         28:02:29:4c:27:5f:fc:3f:0a:55:a8:78:b4:aa:81:a8:e3:a7:
         8a:1c:2c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----