Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/323830343a6233303a3a2f33332d3333203d3e203532373438.roa
File:                     323830343a6233303a3a2f33332d3333203d3e203532373438.roa (raw, json)
Hash identifier:          /i7i1EGeiAK+w49skzz5Y4hc1GhyI45cxkxsfExLFTg=
Subject key identifier:   3E:85:E3:F9:F5:E1:8A:6A:33:D8:60:F5:56:91:FF:DB:B1:69:7B:BE
Certificate issuer:       /CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
Certificate serial:       6BFE23BCB00D3AFCC26A225CAED84A11586CE462
Authority key identifier: 4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/323830343a6233303a3a2f33332d3333203d3e203532373438.roa
Signing time:             Mon 15 May 2023 20:41:25 +0000
ROA not before:           Mon 15 May 2023 20:36:25 +0000
ROA not after:            Mon 13 May 2024 20:41:25 +0000
asID:                     52748
IP address blocks:        2804:b30::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fe:23:bc:b0:0d:3a:fc:c2:6a:22:5c:ae:d8:4a:11:58:6c:e4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
        Validity
            Not Before: May 15 20:36:25 2023 GMT
            Not After : May 13 20:41:25 2024 GMT
        Subject: CN=3E85E3F9F5E18A6A33D860F55691FFDBB1697BBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:38:b7:93:6d:24:f2:4e:cf:91:f8:fd:69:
                    bc:67:50:92:41:19:f1:6d:b5:97:4f:56:c7:0f:d2:
                    c2:16:a9:b6:e1:1c:76:fc:b0:d7:86:b1:22:1f:ca:
                    fb:76:89:03:e0:76:35:be:ba:2d:e8:c2:e5:a6:15:
                    61:67:3e:41:45:67:54:fb:63:3f:eb:f4:83:03:5a:
                    3b:8a:2a:ea:a7:c0:2e:c1:dc:93:3b:e3:58:29:e1:
                    a0:6f:fb:17:34:1c:c7:f2:f0:94:09:ba:cc:8a:86:
                    aa:77:cc:97:94:66:cd:8e:9b:c1:18:17:37:29:1c:
                    6f:a1:ac:c8:de:3e:cd:1b:10:92:8d:4c:cd:6f:77:
                    6a:3f:a0:bf:ff:85:95:9d:10:f1:a3:83:a5:38:a2:
                    99:30:ea:81:07:70:81:8b:d3:88:4f:e3:83:53:80:
                    1f:e2:f7:5e:f0:71:4f:6a:39:12:27:ee:5f:fe:78:
                    26:27:90:09:3e:0e:95:2e:d5:ee:a1:ea:d4:d1:fd:
                    bd:f9:5b:b9:4d:ea:f7:66:d6:c0:02:78:d6:97:38:
                    e8:eb:ae:2d:94:bf:b4:51:d0:e4:ce:9e:9a:78:ff:
                    20:2d:5a:39:82:25:ab:e0:08:4e:e5:25:bd:1c:ea:
                    cd:5c:e1:f3:d4:3d:ed:e1:38:8f:6b:9f:8f:f2:13:
                    b8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:85:E3:F9:F5:E1:8A:6A:33:D8:60:F5:56:91:FF:DB:B1:69:7B:BE
            X509v3 Authority Key Identifier:
                keyid:4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/323830343a6233303a3a2f33332d3333203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b30::/33

    Signature Algorithm: sha256WithRSAEncryption
         1d:41:91:5d:7e:7d:39:4b:b1:ca:76:36:5c:70:95:64:2c:19:
         f5:02:60:d7:88:01:55:94:40:32:e7:a9:93:ee:ab:f2:87:23:
         4a:74:7b:7f:d0:99:ac:27:e2:93:32:2a:a1:19:58:d1:9b:2f:
         04:f1:66:75:cb:c4:a2:bc:b8:cd:50:3b:96:b8:4a:bb:03:74:
         49:47:d0:14:e8:d0:7b:df:cf:27:62:60:95:d2:94:52:55:18:
         9c:8f:4d:da:7f:dc:98:f4:db:fd:74:eb:56:d3:cf:97:2c:81:
         a6:93:ed:f7:19:61:21:65:8a:52:25:e6:75:aa:d6:73:ae:84:
         07:8e:33:80:f5:46:f8:64:8c:44:18:e1:33:f9:30:ab:92:31:
         9e:0f:f4:b5:cf:40:0d:c9:08:e9:eb:22:88:42:3a:39:31:be:
         0b:19:d5:fa:da:ba:0b:d2:35:71:d7:a3:d4:46:df:7a:ab:71:
         49:b3:95:c3:c6:46:90:18:bc:cb:d7:80:d3:2d:26:c2:09:2e:
         d5:28:4f:87:e5:b6:cb:e0:10:63:f8:be:90:6a:b4:da:84:2d:
         20:ab:01:65:77:f7:66:f4:4a:74:f2:6f:eb:65:98:38:c1:50:
         a2:65:8d:93:90:0a:85:7e:6f:1e:0e:b4:2f:54:83:fa:3c:dc:
         9d:8f:61:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----