Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/323830343a316461383a3a2f33322d3332203d3e20323634333834.roa
File:                     323830343a316461383a3a2f33322d3332203d3e20323634333834.roa (raw, json)
Hash identifier:          IwN7Bq/JvCg+3CplzrR2gaRfM3ewiAAEyEr6fqd7rA4=
Subject key identifier:   1A:9B:29:F6:2A:E4:E5:D1:BB:94:DA:38:BC:9C:40:E9:20:03:96:74
Certificate issuer:       /CN=AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699
Certificate serial:       2A5D91A029B46279F55E1040BB7D4A5F6907C987
Authority key identifier: AC:32:EB:9E:48:59:B6:D0:CF:A4:7C:B6:8A:AA:7A:15:28:1B:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/323830343a316461383a3a2f33322d3332203d3e20323634333834.roa
Signing time:             Mon 27 Feb 2023 18:00:40 +0000
ROA not before:           Mon 27 Feb 2023 17:55:40 +0000
ROA not after:            Mon 26 Feb 2024 18:00:40 +0000
asID:                     264384
IP address blocks:        2804:1da8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5d:91:a0:29:b4:62:79:f5:5e:10:40:bb:7d:4a:5f:69:07:c9:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699
        Validity
            Not Before: Feb 27 17:55:40 2023 GMT
            Not After : Feb 26 18:00:40 2024 GMT
        Subject: CN=1A9B29F62AE4E5D1BB94DA38BC9C40E920039674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:57:8c:77:e8:0b:40:3e:9a:69:71:8e:0e:
                    3a:24:ee:44:d0:05:d7:22:71:1d:39:00:d6:3c:7a:
                    53:2e:4e:f6:e4:8c:60:0a:17:88:90:40:bc:b5:94:
                    29:ab:3a:91:eb:01:e0:53:92:ea:87:22:64:a8:88:
                    8f:ed:76:4e:57:f3:b1:fa:41:90:5c:03:eb:da:bb:
                    93:25:62:9c:d1:14:07:a3:00:3b:0c:2c:63:1c:b6:
                    74:4f:91:c7:38:05:12:ca:cc:b5:ab:8c:e1:c6:6b:
                    51:5b:e3:b8:79:55:90:1c:e2:50:0c:e5:44:74:a9:
                    28:a8:b3:09:02:ab:15:f7:1c:a2:b6:e0:1d:fd:08:
                    08:53:6e:b6:3c:91:bb:95:50:a1:06:66:4e:85:e3:
                    31:e4:7b:2a:df:50:d6:bc:29:9f:14:67:0e:9d:a3:
                    dd:c9:37:48:ed:25:6b:23:8b:a8:56:9f:5e:13:da:
                    a5:e5:56:0c:05:83:2f:07:83:08:d1:20:c9:5c:7f:
                    0c:e0:5b:bd:37:0f:94:f2:3b:9d:61:ff:5a:2d:a9:
                    6a:fb:c1:1e:45:e7:09:6b:4f:fd:59:de:40:2a:84:
                    19:9c:8a:28:fb:f7:53:af:6f:8d:f9:ab:a1:f4:81:
                    a8:60:f8:26:33:3e:8a:e8:8a:f8:55:32:73:3a:5b:
                    a8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9B:29:F6:2A:E4:E5:D1:BB:94:DA:38:BC:9C:40:E9:20:03:96:74
            X509v3 Authority Key Identifier:
                keyid:AC:32:EB:9E:48:59:B6:D0:CF:A4:7C:B6:8A:AA:7A:15:28:1B:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/323830343a316461383a3a2f33322d3332203d3e20323634333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1da8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:b5:96:7e:d7:1a:f3:8d:5b:bc:ef:85:2f:24:b9:96:83:b3:
         e9:e1:c4:f3:10:6b:59:63:49:0e:3b:a8:e0:f7:5c:7f:7b:95:
         6e:d8:da:b6:0e:d3:be:5d:41:6a:7f:5a:b3:37:81:50:27:84:
         26:33:81:79:fa:24:03:f5:49:cf:0f:15:42:d6:db:6d:a8:b7:
         3f:0b:ae:2d:3e:95:26:48:cf:29:93:c0:0e:38:1e:6e:e0:ab:
         3d:62:f8:01:18:ef:11:d3:cb:2d:10:50:94:c5:81:50:a2:15:
         23:d5:d2:72:de:29:b9:89:bd:b1:5e:b1:ee:e0:14:23:34:a8:
         07:51:02:65:f1:1c:f6:2f:a1:04:2e:dc:41:2f:1d:df:cd:15:
         40:d1:3e:cd:fc:84:74:92:ec:51:2a:6b:7f:67:a4:8c:4a:47:
         fb:8b:f1:3a:ac:72:23:72:d6:b0:aa:7e:25:a1:cf:ca:c6:95:
         85:68:75:c5:2a:b1:1b:fa:4e:12:72:b2:07:6e:7d:f0:25:5f:
         78:b9:4e:5b:4c:c0:68:ee:7d:56:d2:92:cd:2d:b4:b6:0d:bf:
         fc:22:28:d2:fe:07:8f:2f:a3:85:d5:71:f7:60:3f:be:8d:d9:
         ed:dc:c1:f2:19:44:39:ea:ba:ad:c5:f4:55:33:4f:77:e0:46:
         92:89:1e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----