Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/0/323830343a373039343a3a2f33322d3438203d3e20323730373335.roa
File:                     323830343a373039343a3a2f33322d3438203d3e20323730373335.roa (raw, json)
Hash identifier:          A3Ddll21yMAvTsQQyRY809AsWgeEeSsBJgKvGdHFttc=
Subject key identifier:   5A:51:A3:8E:79:79:75:5C:C0:42:9A:8E:21:59:86:EE:CD:1E:C3:B4
Certificate issuer:       /CN=2FA59197ADC5E55FC5D0AB6AA4FC7F5F1A95685E
Certificate serial:       7AB020A7CE097078A3BA403F7AB99EB80BA24572
Authority key identifier: 2F:A5:91:97:AD:C5:E5:5F:C5:D0:AB:6A:A4:FC:7F:5F:1A:95:68:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FA59197ADC5E55FC5D0AB6AA4FC7F5F1A95685E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/0/323830343a373039343a3a2f33322d3438203d3e20323730373335.roa
Signing time:             Wed 12 Jul 2023 13:31:09 +0000
ROA not before:           Wed 12 Jul 2023 13:26:09 +0000
ROA not after:            Wed 10 Jul 2024 13:31:09 +0000
asID:                     270735
IP address blocks:        2804:7094::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b0:20:a7:ce:09:70:78:a3:ba:40:3f:7a:b9:9e:b8:0b:a2:45:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FA59197ADC5E55FC5D0AB6AA4FC7F5F1A95685E
        Validity
            Not Before: Jul 12 13:26:09 2023 GMT
            Not After : Jul 10 13:31:09 2024 GMT
        Subject: CN=5A51A38E7979755CC0429A8E215986EECD1EC3B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ee:f4:39:b1:29:59:23:2f:50:e4:9b:06:d2:
                    ce:9b:25:7b:64:f7:06:91:97:48:70:c2:a0:7e:a6:
                    70:50:9a:c9:c3:18:08:9a:f6:e5:19:ca:07:93:82:
                    df:87:c9:12:15:66:80:86:ef:06:b0:48:7f:b2:39:
                    2a:2a:39:84:d8:76:2c:a8:fd:32:15:f6:a2:d7:93:
                    05:37:06:e6:21:0f:60:13:e9:39:a5:80:89:4d:b1:
                    9e:05:b1:bc:f7:b3:43:29:95:e6:b6:e7:81:97:72:
                    8b:8d:56:70:3f:3b:50:c0:8d:da:29:ab:05:7c:3e:
                    73:7a:5c:d4:48:b5:ee:3a:b0:b1:9d:2f:46:23:7d:
                    0f:7b:f4:9f:e5:1d:69:04:6c:8c:84:a2:ea:31:8a:
                    c6:11:9d:42:1c:1a:4e:66:d1:e8:22:44:68:73:90:
                    8a:a6:d7:16:ac:0c:23:ae:d6:eb:3e:d4:36:3e:1e:
                    c6:f5:e9:1a:40:ea:e2:c2:51:bc:40:e8:d2:97:4f:
                    9b:17:c5:9f:77:3a:6a:69:26:65:b0:c4:d5:69:6b:
                    ad:07:5f:b4:27:08:ca:d9:64:93:f9:27:09:81:1b:
                    13:7b:7f:f2:90:a2:88:b7:84:90:b8:ad:00:b0:a8:
                    71:77:2c:e3:45:06:fb:ee:ef:e7:7e:66:f2:89:a0:
                    c2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:51:A3:8E:79:79:75:5C:C0:42:9A:8E:21:59:86:EE:CD:1E:C3:B4
            X509v3 Authority Key Identifier:
                keyid:2F:A5:91:97:AD:C5:E5:5F:C5:D0:AB:6A:A4:FC:7F:5F:1A:95:68:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/0/2FA59197ADC5E55FC5D0AB6AA4FC7F5F1A95685E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FA59197ADC5E55FC5D0AB6AA4FC7F5F1A95685E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/0/323830343a373039343a3a2f33322d3438203d3e20323730373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7094::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:88:56:79:56:72:f7:4a:f4:09:39:f1:12:ad:15:96:e3:31:
         1e:43:4d:f1:70:b6:14:01:60:c1:af:31:b9:d8:80:57:6d:aa:
         7b:4e:97:f1:fe:54:54:fd:21:d0:5b:b4:ee:5e:4a:bb:65:56:
         a7:0e:71:30:39:11:1e:82:16:e8:6d:c6:4c:0b:d0:aa:33:d7:
         77:2d:dd:51:a5:d6:c6:c0:bf:93:00:4b:8c:5b:f6:4c:6b:a3:
         97:16:04:01:53:50:05:57:04:07:a6:c8:d1:ef:0d:08:e0:40:
         7f:8e:9e:81:d6:d0:8d:2a:04:f2:7c:18:ba:3b:f0:1b:7b:ff:
         f9:5b:44:60:85:91:6b:dd:38:0d:c3:6f:e9:67:3a:f5:af:2d:
         ff:41:f5:5d:5a:bd:11:b4:ce:b8:14:8f:b8:1b:b1:4e:6d:84:
         29:87:cf:f5:4e:9e:96:06:15:3b:57:1f:5d:b3:22:ac:1f:fb:
         2a:1a:1e:80:eb:bc:07:2d:9d:ff:dd:59:de:7f:ea:5f:51:5f:
         35:a2:76:e7:a8:18:c9:df:e3:f6:65:48:ba:a4:69:2d:ff:eb:
         5c:e2:00:32:96:78:ae:6f:ce:2f:f6:ff:9f:58:62:fc:94:00:
         55:5c:ce:a5:84:97:e6:8e:1b:97:44:93:40:96:cc:5b:b0:e2:
         3f:7a:e6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----