Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/0/323830343a333165343a3a2f33322d3438203d3e20323635303433.roa
File:                     323830343a333165343a3a2f33322d3438203d3e20323635303433.roa (raw, json)
Hash identifier:          wKMM5p3KofJEoGTCkCzM0o+89cBKS+HFVMoqe5yvNiY=
Subject key identifier:   91:A9:DF:D5:50:8B:5A:AC:9D:09:B4:06:A4:11:2A:75:18:53:0E:A2
Certificate issuer:       /CN=98855966534C807FD11EAA2E5EEE4143F5637538
Certificate serial:       68225BF2693E5D7C8CDE738EF4F6330860581D52
Authority key identifier: 98:85:59:66:53:4C:80:7F:D1:1E:AA:2E:5E:EE:41:43:F5:63:75:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98855966534C807FD11EAA2E5EEE4143F5637538.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/0/323830343a333165343a3a2f33322d3438203d3e20323635303433.roa
Signing time:             Mon 18 Dec 2023 11:35:20 +0000
ROA not before:           Mon 18 Dec 2023 11:30:20 +0000
ROA not after:            Mon 16 Dec 2024 11:35:20 +0000
asID:                     265043
IP address blocks:        2804:31e4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:22:5b:f2:69:3e:5d:7c:8c:de:73:8e:f4:f6:33:08:60:58:1d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98855966534C807FD11EAA2E5EEE4143F5637538
        Validity
            Not Before: Dec 18 11:30:20 2023 GMT
            Not After : Dec 16 11:35:20 2024 GMT
        Subject: CN=91A9DFD5508B5AAC9D09B406A4112A7518530EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:0c:fe:08:ef:47:35:72:98:62:19:98:e9:
                    f1:ed:2c:04:43:3b:99:4e:b6:b0:5c:38:67:26:3e:
                    db:b5:3a:f3:c7:d1:f7:96:48:19:e9:44:78:7f:fa:
                    58:b4:db:c1:ec:ae:25:92:e2:0a:ee:18:31:1f:83:
                    75:8e:0c:8f:1e:29:ce:05:6d:6a:cf:36:14:51:5a:
                    3a:db:a9:6b:76:4e:5c:d7:88:a4:7a:90:fb:dd:28:
                    80:d5:29:86:45:34:ec:d7:86:e6:2f:79:f3:8d:71:
                    56:f5:42:5a:eb:73:d7:c0:5e:72:43:51:7c:8b:3b:
                    56:1d:1b:cd:4b:d8:5f:c6:d3:de:84:7a:71:db:02:
                    61:79:78:35:ae:71:5b:55:ad:54:6c:50:64:e4:06:
                    e1:c3:f6:2b:33:5b:71:71:aa:89:99:cd:c7:bf:34:
                    7b:da:97:2b:b0:9c:b5:eb:e0:a3:93:bb:64:69:d3:
                    f4:b4:0e:1d:b8:d3:a7:9f:e6:ee:c7:2d:7a:75:f7:
                    f9:68:2d:d7:11:a3:d1:a5:6d:cc:39:d7:fc:a7:38:
                    cf:25:0f:06:a2:ea:0d:33:85:2f:46:78:4a:7b:e2:
                    57:7b:c1:31:14:7a:5a:35:27:e0:5a:1a:d1:4f:71:
                    58:04:83:73:85:8f:d5:25:bd:0b:43:07:86:3e:bb:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A9:DF:D5:50:8B:5A:AC:9D:09:B4:06:A4:11:2A:75:18:53:0E:A2
            X509v3 Authority Key Identifier:
                keyid:98:85:59:66:53:4C:80:7F:D1:1E:AA:2E:5E:EE:41:43:F5:63:75:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/0/98855966534C807FD11EAA2E5EEE4143F5637538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98855966534C807FD11EAA2E5EEE4143F5637538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/0/323830343a333165343a3a2f33322d3438203d3e20323635303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:4f:21:b8:a8:89:97:10:5a:bc:e2:ec:87:c7:79:b6:c2:db:
         8c:1b:e6:e0:15:b0:ce:80:96:96:e4:1c:e3:6f:87:3d:f2:c1:
         ad:c3:8f:c6:93:9b:ee:49:0d:0a:cc:86:b0:06:60:9c:fa:4d:
         df:5f:6b:db:4b:81:15:74:f2:78:a4:c6:8c:40:a2:b8:49:b6:
         c5:7f:0d:e8:71:51:7e:c2:98:f1:1f:22:9b:ee:3e:8c:3a:f1:
         c4:41:0d:d3:ae:ad:8a:59:d8:d4:c7:a5:19:14:e6:32:37:a5:
         f0:09:a8:b2:ad:bb:f2:b8:46:1f:64:18:63:d7:f5:00:23:2c:
         fb:92:cb:2c:80:90:3d:e4:40:e2:f8:77:b3:a1:f4:7a:53:d5:
         4a:6f:b9:b2:0d:58:55:3e:e9:b3:e5:0d:81:5f:28:f5:c6:ed:
         b0:32:40:46:ea:aa:35:c6:6c:71:ea:bb:92:75:82:cd:a1:21:
         0f:cd:de:49:a0:74:45:22:83:74:ce:1c:b6:c5:22:53:50:ab:
         f8:26:85:f5:fd:bd:9a:11:01:35:a3:1d:3f:16:9e:13:a2:16:
         4b:0e:34:a9:7d:5a:5f:fc:a9:c9:d3:e9:57:11:e7:46:94:16:
         6c:9e:61:6c:71:91:2a:05:88:35:da:df:65:9f:10:f5:96:4f:
         ea:16:8c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----