Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/0/323830343a323038633a3a2f33322d3438203d3e20323634343937.roa
File:                     323830343a323038633a3a2f33322d3438203d3e20323634343937.roa (raw, json)
Hash identifier:          1L+mfaBjYFsO1oMn9WyXpSLpLO4q+oERaWD2Ppeq1F8=
Subject key identifier:   BF:E1:B2:5A:6D:A2:94:49:71:04:C5:F1:8A:E4:D4:EE:DC:25:F7:1F
Certificate issuer:       /CN=0405267F7F9B7583A314B52E811AE07A7E07175A
Certificate serial:       4ADB5F265F98BFB5F6B26A976B454629B42300E1
Authority key identifier: 04:05:26:7F:7F:9B:75:83:A3:14:B5:2E:81:1A:E0:7A:7E:07:17:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0405267F7F9B7583A314B52E811AE07A7E07175A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/0/323830343a323038633a3a2f33322d3438203d3e20323634343937.roa
Signing time:             Tue 19 Sep 2023 19:58:01 +0000
ROA not before:           Tue 19 Sep 2023 19:53:01 +0000
ROA not after:            Tue 17 Sep 2024 19:58:01 +0000
asID:                     264497
IP address blocks:        2804:208c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:db:5f:26:5f:98:bf:b5:f6:b2:6a:97:6b:45:46:29:b4:23:00:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0405267F7F9B7583A314B52E811AE07A7E07175A
        Validity
            Not Before: Sep 19 19:53:01 2023 GMT
            Not After : Sep 17 19:58:01 2024 GMT
        Subject: CN=BFE1B25A6DA294497104C5F18AE4D4EEDC25F71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c5:2e:5e:19:0b:16:39:bf:a9:16:e6:08:81:
                    59:55:38:3f:25:9f:a7:69:c8:d9:e5:e3:ad:10:1e:
                    fa:32:4a:cb:89:fe:b2:12:24:48:65:20:88:ec:57:
                    32:1c:41:70:dc:7a:f3:7f:0f:ac:ea:3c:0f:a7:8a:
                    9f:a2:8a:b6:ea:4f:1d:3f:b9:d5:7c:25:c1:19:5b:
                    f2:5c:de:88:67:af:c9:88:20:a1:43:f0:fc:0e:a0:
                    a1:8d:ef:23:9b:25:96:f0:4a:bd:14:05:1d:2c:5e:
                    44:05:4e:bd:60:5f:b2:40:70:4a:71:b3:8d:ad:7f:
                    c4:59:ef:32:b9:3f:5d:ce:2d:08:b7:b1:4c:47:27:
                    18:69:1b:1d:ee:f9:ca:8c:f7:45:75:c0:71:29:79:
                    54:b4:94:e6:0a:4e:4d:1d:d0:96:2d:b9:11:56:5b:
                    f0:9f:79:f9:9f:73:9a:a0:19:b7:25:8a:66:b3:30:
                    42:1f:2f:db:05:c5:a0:95:b4:21:70:f7:45:a2:d0:
                    dc:72:85:b7:76:46:5d:35:e9:02:bc:2e:95:e8:d8:
                    5e:36:80:4b:99:b3:1e:59:4c:a1:5d:e2:41:4d:b8:
                    47:82:0d:7d:7d:d4:ae:f8:fd:75:a0:1a:c6:d2:47:
                    fb:7c:0e:62:0b:91:1a:3e:98:be:2f:cf:62:0d:33:
                    97:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E1:B2:5A:6D:A2:94:49:71:04:C5:F1:8A:E4:D4:EE:DC:25:F7:1F
            X509v3 Authority Key Identifier:
                keyid:04:05:26:7F:7F:9B:75:83:A3:14:B5:2E:81:1A:E0:7A:7E:07:17:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/0/0405267F7F9B7583A314B52E811AE07A7E07175A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0405267F7F9B7583A314B52E811AE07A7E07175A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/0/323830343a323038633a3a2f33322d3438203d3e20323634343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:208c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:cb:8b:e7:79:0d:9d:70:fe:5f:e2:a8:99:1a:9d:97:69:5b:
         00:13:7b:53:23:9c:36:08:81:86:37:ec:00:28:b1:44:36:d1:
         6f:dc:8b:90:81:8f:87:4e:9d:55:ff:bd:70:4b:d5:12:16:46:
         d0:1d:41:05:c5:55:81:1d:ca:5d:c4:d7:09:4b:c0:aa:8d:ee:
         08:f2:61:2c:21:96:7d:e2:8f:84:16:93:88:f5:d3:f5:98:4c:
         87:56:8a:63:5c:32:c3:d3:8e:1f:c4:b3:51:ab:af:b9:8e:7d:
         b0:96:55:03:ba:04:e9:94:2b:3e:f5:ed:91:e3:ac:66:1b:a3:
         92:01:6c:83:42:ad:93:a8:ce:cd:8a:76:1b:dd:01:37:bc:f7:
         6a:85:7d:6b:7b:3c:f2:70:11:6b:6f:1d:a3:3d:98:81:03:12:
         c2:e9:ba:c3:2d:ce:b7:69:14:7a:80:2e:a4:97:21:69:c0:41:
         43:09:ed:e4:f1:9d:81:d3:38:81:5c:10:30:bb:0b:7c:dd:04:
         d0:96:4a:ec:7f:4a:b7:96:62:0a:d2:ca:7e:1a:66:2e:e1:2c:
         19:54:ef:77:8d:98:ad:ba:1d:b6:47:b0:33:9a:26:b2:58:a0:
         ce:4a:93:ef:41:ee:60:9e:c2:ef:66:10:2a:50:42:22:32:7e:
         f1:9a:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----