Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343032333a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a3966383a343032333a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          gDPIoKUNtrXWqsBDOkncbKtG6MdD0J02AEpuQbI5iTk=
Subject key identifier:   E9:E9:DC:B8:29:F8:7B:D0:FA:F3:2B:18:A4:76:E3:18:2A:A1:9B:60
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       1F282D8A0DE40578FABADCC57E9513C81CE9A357
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343032333a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Mon 30 Jan 2023 21:54:32 +0000
ROA not before:           Mon 30 Jan 2023 21:49:32 +0000
ROA not after:            Mon 29 Jan 2024 21:54:32 +0000
asID:                     262773
IP address blocks:        2804:9f8:4023::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:28:2d:8a:0d:e4:05:78:fa:ba:dc:c5:7e:95:13:c8:1c:e9:a3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Jan 30 21:49:32 2023 GMT
            Not After : Jan 29 21:54:32 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c9:1a:f8:31:98:00:4f:5a:26:df:34:67:95:
                    35:87:e0:5f:63:5d:c4:8a:8a:5f:74:df:e7:f4:52:
                    87:a1:86:88:d5:04:61:f1:9c:da:56:c3:fe:b9:d6:
                    61:44:2d:d1:bf:e8:36:44:a7:de:9d:75:59:79:37:
                    f7:a7:fe:d9:6a:fc:af:18:2b:27:65:99:93:d4:75:
                    bd:c0:49:98:63:2a:84:8a:e9:9b:24:63:b3:fc:97:
                    97:e3:cc:0a:91:46:b0:a6:4a:97:cd:fd:7a:e3:61:
                    54:be:8f:dc:68:ec:4d:26:2e:95:0c:12:51:35:3d:
                    1b:ab:80:14:0c:9e:db:6e:f7:da:c4:32:b0:64:28:
                    6c:0a:9c:d5:42:ba:ca:16:5c:c5:a1:49:a6:9d:23:
                    79:6b:31:50:fb:df:25:51:b0:a9:76:cc:c9:a3:1f:
                    f6:9c:3d:52:bc:4e:f9:79:0d:6f:2e:e3:91:aa:bb:
                    b8:19:73:fb:ba:6d:d8:0c:cf:c8:47:03:7f:9c:12:
                    06:1a:e1:45:42:91:a4:51:12:2f:62:64:40:b8:cb:
                    3c:0d:de:d1:f5:9a:df:27:91:5d:ef:87:cd:80:47:
                    07:25:fe:9a:7d:80:28:48:fd:18:c6:d7:74:5a:e4:
                    3f:29:1d:98:5d:5b:97:ab:87:e5:2b:c5:37:af:d4:
                    00:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E9:DC:B8:29:F8:7B:D0:FA:F3:2B:18:A4:76:E3:18:2A:A1:9B:60
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343032333a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:4023::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:be:85:57:17:18:aa:62:51:2f:00:63:57:72:4c:6c:e6:84:
         76:41:e6:22:70:20:8f:18:d7:2e:33:72:0e:d3:0c:7b:e5:55:
         76:d1:d8:72:15:13:be:9e:e9:2d:59:66:64:78:c5:3c:b3:a0:
         19:87:01:20:fc:71:78:a1:77:d4:91:d0:ea:d9:86:f9:e6:71:
         77:6a:c3:93:aa:15:fd:f0:0f:a8:e2:03:61:86:25:ab:ad:9c:
         c6:27:59:20:ee:1e:7d:45:96:db:ca:e2:bd:c3:59:03:94:ee:
         7d:5c:b0:1e:e1:83:a8:e6:2c:17:9a:bf:65:15:02:1f:3d:c7:
         23:25:ff:d4:37:af:45:13:1a:e7:07:2b:1f:9f:4e:9e:c9:0e:
         37:6e:c8:79:c2:d9:4e:6b:8b:61:5d:93:22:d5:d8:d3:80:54:
         ba:0d:04:dc:65:65:d2:f1:24:6c:ca:7f:5b:49:cb:69:db:f8:
         7b:67:e7:40:40:fb:14:25:df:ee:73:1a:72:d0:cd:70:fe:63:
         b5:e4:b6:55:e6:d4:3a:6f:ad:25:7c:3f:c6:11:4f:9e:bc:ea:
         7a:07:c9:2a:f6:80:03:8a:21:c6:3b:6c:74:78:26:0d:db:6a:
         11:76:37:02:9f:c3:dd:bf:d7:1f:95:0f:ea:29:54:f1:53:5f:
         12:30:8a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----