Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/0/323830343a333532633a3a2f33322d3332203d3e20323632363632.roa
File:                     323830343a333532633a3a2f33322d3332203d3e20323632363632.roa (raw, json)
Hash identifier:          ksR674qJlDwyr/m14YosXE4dmDMuQeMcoJpyTARA4A4=
Subject key identifier:   87:37:C1:12:A4:23:B8:2C:B7:44:CA:7A:7D:D4:08:FB:AB:FC:27:93
Certificate issuer:       /CN=5ED75D1E0CAE781F600C73E4BF301CA2C4551EFF
Certificate serial:       6E5E82EC085136C4E3FFD95C23FD4D28A867E153
Authority key identifier: 5E:D7:5D:1E:0C:AE:78:1F:60:0C:73:E4:BF:30:1C:A2:C4:55:1E:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ED75D1E0CAE781F600C73E4BF301CA2C4551EFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/0/323830343a333532633a3a2f33322d3332203d3e20323632363632.roa
Signing time:             Thu 27 Jul 2023 00:21:27 +0000
ROA not before:           Thu 27 Jul 2023 00:16:27 +0000
ROA not after:            Thu 25 Jul 2024 00:21:27 +0000
asID:                     262662
IP address blocks:        2804:352c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5e:82:ec:08:51:36:c4:e3:ff:d9:5c:23:fd:4d:28:a8:67:e1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ED75D1E0CAE781F600C73E4BF301CA2C4551EFF
        Validity
            Not Before: Jul 27 00:16:27 2023 GMT
            Not After : Jul 25 00:21:27 2024 GMT
        Subject: CN=8737C112A423B82CB744CA7A7DD408FBABFC2793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:7f:c0:0a:fb:0d:8a:d3:00:72:97:35:7f:
                    5b:25:dd:c7:76:c0:99:25:8c:72:1d:7e:2e:11:35:
                    d0:62:fb:e8:c7:1f:81:c0:23:ee:d8:1f:3b:1a:15:
                    9b:14:cd:33:12:dc:42:c7:81:89:ed:9f:76:06:64:
                    2b:e6:23:07:3c:65:a4:18:10:c4:8a:4b:4c:75:c1:
                    6b:79:a8:5b:8c:36:ff:76:7f:a3:31:d2:a0:ed:84:
                    41:d0:d2:53:cc:52:a6:f8:10:2a:24:7f:43:bf:7c:
                    81:58:53:66:c5:46:68:46:7d:af:8a:6c:55:a1:69:
                    22:f9:ef:fe:df:ad:a6:cf:8d:77:72:8e:88:fb:dd:
                    d8:86:c8:b4:8a:0e:06:fc:59:c4:79:61:81:b8:a9:
                    06:84:49:9d:df:17:0b:65:e6:49:54:df:a4:08:5b:
                    a3:57:42:e5:78:6c:7e:3e:72:ff:31:d0:0f:38:e7:
                    38:10:32:80:ce:34:f5:0f:2c:68:68:51:5c:73:c5:
                    64:af:92:f0:72:01:ae:05:5c:1c:e8:9c:d8:b7:55:
                    64:6f:99:8a:d6:a9:90:e1:1a:55:88:86:94:54:67:
                    e8:ad:03:ae:88:c6:70:37:cd:a7:6c:a3:f0:5c:e0:
                    41:a8:b7:f8:29:70:e9:de:8a:16:94:ef:3f:6c:d6:
                    22:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:37:C1:12:A4:23:B8:2C:B7:44:CA:7A:7D:D4:08:FB:AB:FC:27:93
            X509v3 Authority Key Identifier:
                keyid:5E:D7:5D:1E:0C:AE:78:1F:60:0C:73:E4:BF:30:1C:A2:C4:55:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/0/5ED75D1E0CAE781F600C73E4BF301CA2C4551EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ED75D1E0CAE781F600C73E4BF301CA2C4551EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/0/323830343a333532633a3a2f33322d3332203d3e20323632363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:352c::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:eb:e3:9b:6a:27:75:36:06:d1:c2:62:7a:79:9e:5a:b5:2a:
         c9:f1:62:11:3e:45:a2:77:11:b6:0b:17:06:b8:6b:49:23:c9:
         64:54:57:b8:9d:0a:2d:67:48:5f:16:7e:5d:23:b4:3c:b5:83:
         c6:19:b3:1f:9c:ec:45:2f:22:8a:41:45:ac:c6:7d:1a:de:ed:
         91:66:79:9a:ac:e5:62:58:77:ec:b0:d2:3f:f5:22:e7:a5:64:
         72:ce:d7:9c:f6:22:13:66:dc:72:a9:01:46:85:a2:1f:56:d1:
         de:f0:88:be:44:59:d4:9a:c3:15:5c:60:8c:5b:fd:3d:96:33:
         9b:d1:03:bf:bd:54:71:aa:fb:51:3f:25:ba:90:69:32:d1:78:
         32:92:68:73:ee:48:8b:64:4b:73:f4:ad:61:ea:21:d9:49:1e:
         12:d0:a2:c7:92:cc:97:91:e2:11:56:b0:0e:af:49:71:34:d5:
         47:85:a4:05:eb:25:47:ff:a0:d5:45:e5:d8:72:70:d6:f4:28:
         60:3e:76:55:0e:f7:32:53:a6:b7:f7:bb:58:59:6f:f7:92:f8:
         46:81:ca:52:cb:28:c7:24:7f:fe:45:cc:5b:01:58:40:40:0b:
         76:35:f8:23:07:46:21:f6:4b:ca:98:76:41:a1:06:d8:3d:a4:
         6a:12:ca:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----