Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/323830343a373530343a3a2f33322d3332203d3e20323731303138.roa
File:                     323830343a373530343a3a2f33322d3332203d3e20323731303138.roa (raw, json)
Hash identifier:          LEkNTiBiHQVaaLqus7SSTJuDSqLTizLDDmlfoaVc0h8=
Subject key identifier:   98:2F:FA:69:F2:ED:13:53:B4:BD:81:63:4F:9D:93:CE:B3:35:5F:1B
Certificate issuer:       /CN=AA607E5E454F44A3D5284D9663DCB35738F2672D
Certificate serial:       0B61E9CDD643FF15F779922A48EC6905DE7618E9
Authority key identifier: AA:60:7E:5E:45:4F:44:A3:D5:28:4D:96:63:DC:B3:57:38:F2:67:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA607E5E454F44A3D5284D9663DCB35738F2672D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/323830343a373530343a3a2f33322d3332203d3e20323731303138.roa
Signing time:             Thu 23 Feb 2023 14:41:40 +0000
ROA not before:           Thu 23 Feb 2023 14:36:40 +0000
ROA not after:            Thu 22 Feb 2024 14:41:40 +0000
asID:                     271018
IP address blocks:        2804:7504::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:61:e9:cd:d6:43:ff:15:f7:79:92:2a:48:ec:69:05:de:76:18:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA607E5E454F44A3D5284D9663DCB35738F2672D
        Validity
            Not Before: Feb 23 14:36:40 2023 GMT
            Not After : Feb 22 14:41:40 2024 GMT
        Subject: CN=982FFA69F2ED1353B4BD81634F9D93CEB3355F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:0e:c9:ab:aa:0d:b8:b7:ec:ad:61:30:2c:
                    05:54:f7:53:fe:36:5f:84:83:fe:10:fd:f1:f6:76:
                    69:e9:92:e1:74:44:ae:6c:b3:49:a5:e1:bf:63:1c:
                    10:61:1f:0b:28:42:e5:74:10:a9:17:8a:3f:eb:55:
                    4f:32:b5:44:bf:1f:56:0a:86:6f:d7:b0:3b:3e:ea:
                    bb:c9:11:1f:38:0e:2e:88:17:08:8d:7f:d7:f4:b9:
                    65:02:7b:1c:5b:1e:52:80:dd:67:21:aa:ea:73:dd:
                    85:e9:e6:ba:aa:14:1b:cf:74:44:30:67:9b:14:a6:
                    93:c6:10:eb:4c:ca:ee:85:b5:db:06:5d:98:ee:98:
                    f8:4a:22:ec:4c:c3:a5:69:fb:8f:08:14:4d:6a:8f:
                    4c:b7:0f:76:98:80:1a:ef:1d:c5:8d:0f:02:b4:ad:
                    df:1f:0a:40:27:5b:f9:aa:41:af:83:e6:d8:09:a3:
                    d8:2f:cb:6c:3a:fc:15:1b:b7:d9:9a:7f:33:67:63:
                    ff:7b:03:37:b1:a8:a5:67:6d:94:71:94:20:a4:24:
                    58:2d:de:d7:52:38:39:36:e2:c7:89:ec:7b:7d:47:
                    5e:c2:af:57:fe:5c:29:ae:00:43:06:70:6b:c9:52:
                    c7:df:c0:8d:e5:61:8e:db:79:75:4d:1a:74:56:1c:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2F:FA:69:F2:ED:13:53:B4:BD:81:63:4F:9D:93:CE:B3:35:5F:1B
            X509v3 Authority Key Identifier:
                keyid:AA:60:7E:5E:45:4F:44:A3:D5:28:4D:96:63:DC:B3:57:38:F2:67:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/AA607E5E454F44A3D5284D9663DCB35738F2672D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA607E5E454F44A3D5284D9663DCB35738F2672D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/323830343a373530343a3a2f33322d3332203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7504::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:19:1b:bb:9a:d9:5d:a0:97:62:10:3f:2e:68:5e:c4:35:4f:
         bd:fd:3a:85:b6:44:b4:11:e6:fb:11:ce:27:82:1b:a6:bb:19:
         e6:4f:8c:04:8e:06:a9:6e:e3:20:e1:bc:17:a5:94:33:3a:8c:
         b5:30:ad:11:b6:e5:4a:84:7b:28:95:56:ea:e3:dd:a2:29:a3:
         ef:f8:84:88:d8:5b:83:63:79:9a:8d:07:16:82:93:9c:30:24:
         f6:e1:47:86:83:48:60:82:77:27:20:8d:47:1b:a9:b7:80:88:
         b4:46:6f:98:59:0a:fc:56:94:03:03:19:88:a5:c5:f7:b8:99:
         c9:eb:8b:e9:8a:20:8e:16:00:50:2c:7a:e6:64:0d:1c:de:b8:
         1a:f3:34:58:27:7c:32:06:49:5f:cb:f2:7a:08:81:03:6d:76:
         08:2c:b4:f4:26:54:0d:c4:23:81:ad:0a:94:5b:8f:13:db:37:
         97:65:ee:59:9f:d8:4f:ad:dd:78:2b:64:50:ce:ad:ea:a9:d5:
         c4:47:b3:cd:bb:ac:3f:40:e1:c2:db:2d:a3:3c:ec:08:ad:83:
         33:85:57:f6:43:6e:b4:d2:e2:bd:55:ba:41:f4:5b:cd:8e:8e:
         53:29:ca:bf:0c:db:ad:a6:f0:c2:9d:3e:02:d1:d9:cd:51:03:
         65:38:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----