Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/323830343a6430633a376530313a3a2f34382d3438203d3e203533313132.roa
File:                     323830343a6430633a376530313a3a2f34382d3438203d3e203533313132.roa (raw, json)
Hash identifier:          MmKQBle2JEmkGqj0APbNSkJouxveV4OHztykuSTg97Y=
Subject key identifier:   26:3E:8E:AE:15:67:67:8D:A3:B5:CD:23:01:F6:E1:F5:30:F0:9C:BA
Certificate issuer:       /CN=FB77F49574CBE0843961A23238230FA3417E4159
Certificate serial:       1BA1854747EF10BFADC67D11559F712AAFC647D5
Authority key identifier: FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/323830343a6430633a376530313a3a2f34382d3438203d3e203533313132.roa
Signing time:             Sat 01 Jul 2023 11:35:42 +0000
ROA not before:           Sat 01 Jul 2023 11:30:42 +0000
ROA not after:            Sat 29 Jun 2024 11:35:42 +0000
asID:                     53112
IP address blocks:        2804:d0c:7e01::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a1:85:47:47:ef:10:bf:ad:c6:7d:11:55:9f:71:2a:af:c6:47:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB77F49574CBE0843961A23238230FA3417E4159
        Validity
            Not Before: Jul  1 11:30:42 2023 GMT
            Not After : Jun 29 11:35:42 2024 GMT
        Subject: CN=263E8EAE1567678DA3B5CD2301F6E1F530F09CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:55:32:e9:d4:c0:5c:68:63:d8:31:d2:55:
                    ab:5b:df:5d:cb:4f:eb:b6:32:d2:84:03:25:59:31:
                    73:33:0e:da:28:9a:bb:e8:82:cb:b2:80:f0:e1:c7:
                    02:5a:bb:b4:0e:25:62:55:2c:0a:57:59:9d:75:86:
                    17:21:2b:9c:f0:d7:22:2e:16:72:c9:ab:08:fb:b9:
                    da:57:74:02:a9:b2:9b:24:85:54:d7:54:b1:ec:ac:
                    68:30:33:66:bf:20:f9:ca:c8:1e:61:4c:9f:90:e8:
                    88:6f:69:8d:96:ce:30:66:68:6c:61:4f:a1:9f:a8:
                    bf:e5:72:7d:17:b5:d7:19:ad:2d:43:5b:ad:66:c8:
                    e3:86:bd:3d:68:5c:3c:bb:ed:35:c4:22:bb:12:0b:
                    01:7e:a1:92:c8:bf:f5:c9:31:3e:e6:64:fc:e9:d4:
                    94:f9:14:ab:84:34:4b:37:af:28:09:50:5e:b9:08:
                    ed:dc:a2:cf:25:28:7e:57:15:83:47:42:ba:3a:2e:
                    29:71:e1:85:b5:5f:be:42:3e:fe:dd:f2:34:3d:1d:
                    fe:5b:8f:9f:e2:8b:8c:93:f3:87:96:cf:12:50:5c:
                    2a:11:68:ce:95:b7:42:fb:b0:a6:67:6d:4f:da:7b:
                    97:14:21:fd:b9:4d:52:22:19:2a:6f:37:b9:c5:2f:
                    56:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3E:8E:AE:15:67:67:8D:A3:B5:CD:23:01:F6:E1:F5:30:F0:9C:BA
            X509v3 Authority Key Identifier:
                keyid:FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/FB77F49574CBE0843961A23238230FA3417E4159.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/323830343a6430633a376530313a3a2f34382d3438203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d0c:7e01::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:aa:e7:65:c0:93:1b:51:b2:fa:de:35:85:92:ba:4d:cd:3f:
         10:4d:f3:eb:8f:cd:f5:c8:63:89:7d:e3:7d:ac:84:82:5c:a5:
         17:fe:b2:42:f7:cf:7a:b6:49:58:6f:82:80:5d:25:5b:58:96:
         96:8d:70:3c:c4:99:0c:5d:fe:82:eb:a0:36:65:4d:d1:23:20:
         c9:04:db:91:c8:55:e6:1c:d1:ef:31:90:a2:5f:92:f4:b6:f9:
         f0:83:5a:c0:d3:1e:83:d1:d1:00:4f:b0:01:c8:77:39:f5:fa:
         22:2e:fe:6c:63:d1:ac:0c:63:56:31:8b:f5:68:01:e5:39:bb:
         f4:64:3f:3a:4e:ab:38:73:d2:1b:58:56:6e:42:e6:8b:35:14:
         4f:43:26:ae:40:dd:56:27:df:5a:0d:9c:f4:5e:19:04:68:03:
         d6:63:0a:7b:36:f7:d4:10:45:5d:17:4a:f3:e9:97:a4:d8:a6:
         b4:d5:00:33:4a:0f:cc:d3:d9:7c:eb:aa:5e:99:e5:9b:33:dc:
         3f:99:9f:43:16:d4:fd:b7:50:e4:eb:e4:27:2d:3e:5d:52:07:
         42:f7:0e:55:8d:9e:b5:df:4c:b7:19:15:fd:5d:8a:f5:52:d2:
         26:53:a0:7d:5d:55:fc:c1:b5:ad:91:aa:70:84:7a:2f:cb:34:
         8c:bd:0d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----