Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/323830343a353135383a3a2f33322d3332203d3e20323638343436.roa
File:                     323830343a353135383a3a2f33322d3332203d3e20323638343436.roa (raw, json)
Hash identifier:          7W3GggQZMd/bT57YK4vGHwE6s5mV4fZcJquOHRWyc20=
Subject key identifier:   08:46:75:11:23:11:A8:6E:BF:5F:B3:5A:50:64:20:CA:7D:15:E6:3A
Certificate issuer:       /CN=1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB
Certificate serial:       5D9CD1C4EC621C5D26C34AD55A888799C69C1356
Authority key identifier: 15:50:DF:0A:F2:4D:ED:E2:FB:9F:66:A1:C8:05:60:A1:FB:45:6C:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/323830343a353135383a3a2f33322d3332203d3e20323638343436.roa
Signing time:             Tue 15 Aug 2023 16:41:26 +0000
ROA not before:           Tue 15 Aug 2023 16:36:26 +0000
ROA not after:            Tue 13 Aug 2024 16:41:26 +0000
asID:                     268446
IP address blocks:        2804:5158::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9c:d1:c4:ec:62:1c:5d:26:c3:4a:d5:5a:88:87:99:c6:9c:13:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB
        Validity
            Not Before: Aug 15 16:36:26 2023 GMT
            Not After : Aug 13 16:41:26 2024 GMT
        Subject: CN=084675112311A86EBF5FB35A506420CA7D15E63A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:13:97:df:de:db:b1:b4:b4:40:fc:bf:a6:43:
                    6d:c5:d4:84:ef:0c:b6:4c:b0:95:dc:9b:95:70:30:
                    12:80:12:c6:fa:5f:ee:25:11:17:84:86:1e:dd:60:
                    d8:87:7f:c1:a9:18:49:7b:7e:af:7d:20:5a:2c:96:
                    9c:f6:7f:d8:af:49:7e:f3:46:c2:b9:64:20:18:23:
                    99:c8:08:59:6a:04:cd:19:e3:a5:a8:31:61:58:93:
                    68:5b:7c:83:0e:20:1b:82:e3:71:55:46:71:11:35:
                    86:b5:39:cf:29:85:7c:82:85:35:b4:0a:9f:7a:e7:
                    13:f2:b3:ea:94:38:7f:41:ef:bb:2b:31:f8:2c:1b:
                    d3:4b:32:3a:17:4d:04:3e:ea:e5:7b:78:3d:0e:c2:
                    25:65:00:1b:dc:9b:5c:ba:0e:67:db:04:b3:13:a9:
                    1a:3c:09:c8:71:08:9d:52:a5:19:9d:63:05:83:9e:
                    b4:e2:73:48:bc:7b:2e:da:e0:ab:91:5c:e2:2e:6c:
                    4c:7f:e2:09:37:a4:f7:e0:7d:cc:ba:fd:04:ac:25:
                    61:bc:2a:d4:f6:b1:62:71:5a:88:10:fb:c2:96:0a:
                    81:2e:f9:23:54:cc:5d:02:a8:24:f7:96:3e:2a:3a:
                    3f:2b:17:5b:f1:d4:92:d8:78:c3:8b:c0:67:d2:64:
                    e1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:46:75:11:23:11:A8:6E:BF:5F:B3:5A:50:64:20:CA:7D:15:E6:3A
            X509v3 Authority Key Identifier:
                keyid:15:50:DF:0A:F2:4D:ED:E2:FB:9F:66:A1:C8:05:60:A1:FB:45:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/323830343a353135383a3a2f33322d3332203d3e20323638343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5158::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:b5:c1:fa:18:22:75:a1:16:85:96:d0:51:d7:a0:ce:1d:78:
         9a:ad:fa:5a:f4:d9:2a:a2:dd:0a:f0:fa:e8:7c:57:03:97:44:
         ca:8b:32:de:c3:25:e5:8f:92:72:cc:ba:e7:08:21:a8:81:93:
         c1:51:ca:31:33:13:ee:b1:90:4c:7f:08:ce:dd:06:b0:b6:1d:
         12:2f:2e:ff:72:76:34:00:ca:c8:b3:54:f4:f1:ad:2c:25:96:
         11:93:b5:43:e6:fb:40:b3:2a:b6:7f:d2:85:33:8e:02:fe:96:
         95:25:ca:ff:d2:f0:5f:3f:88:02:b3:0c:4a:3b:cd:db:ff:07:
         20:1e:bf:1a:54:f3:cd:b3:0e:bc:b9:b5:60:7f:22:0e:67:08:
         37:f7:7b:b9:2e:6d:84:0a:1a:fa:0b:6e:2b:a1:ae:86:ff:a2:
         d4:a8:b1:92:d1:b9:4a:a2:d8:fb:66:72:eb:48:98:f1:f8:8b:
         06:7e:0a:88:71:94:dd:46:2f:b3:b4:fc:23:aa:f2:d0:16:cb:
         d6:89:60:98:cf:ab:b7:9d:bf:63:fa:fc:51:2c:b4:f2:f4:28:
         ed:30:4f:bf:b7:64:b3:cb:1a:dc:90:2c:e7:12:94:f6:9c:6b:
         8a:fb:c4:3e:a9:4a:0c:7a:21:16:90:3e:53:c4:bd:c4:fd:61:
         7a:b5:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----