Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/323830343a3963303a3a2f33322d3332203d3e20323632393839.roa
File:                     323830343a3963303a3a2f33322d3332203d3e20323632393839.roa (raw, json)
Hash identifier:          WFXHb4riCeIGJ3P7UlyDIw7VUhMBq2OekHHkQQQO6pA=
Subject key identifier:   62:5D:3E:D6:3F:22:74:AB:18:A1:53:34:86:23:75:E3:F2:09:72:8E
Certificate issuer:       /CN=207EB381959B83F7299D680B4544AE4668DCFE56
Certificate serial:       5CBCCE98A9891F9B2316B0CC50E84BD0681081DA
Authority key identifier: 20:7E:B3:81:95:9B:83:F7:29:9D:68:0B:45:44:AE:46:68:DC:FE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/207EB381959B83F7299D680B4544AE4668DCFE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/323830343a3963303a3a2f33322d3332203d3e20323632393839.roa
Signing time:             Fri 25 Aug 2023 16:32:46 +0000
ROA not before:           Fri 25 Aug 2023 16:27:46 +0000
ROA not after:            Fri 23 Aug 2024 16:32:46 +0000
asID:                     262989
IP address blocks:        2804:9c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:bc:ce:98:a9:89:1f:9b:23:16:b0:cc:50:e8:4b:d0:68:10:81:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207EB381959B83F7299D680B4544AE4668DCFE56
        Validity
            Not Before: Aug 25 16:27:46 2023 GMT
            Not After : Aug 23 16:32:46 2024 GMT
        Subject: CN=625D3ED63F2274AB18A15334862375E3F209728E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:68:0f:ab:36:d8:b6:c0:cf:f0:e1:31:48:17:
                    78:6e:95:97:f8:0e:5a:4e:cb:ce:d8:9a:4d:ce:b3:
                    cb:6a:a8:80:24:4d:12:cb:45:26:0d:fb:5b:d9:d0:
                    df:0b:5a:9f:c8:c6:b9:17:82:f1:9b:ab:6e:5f:f0:
                    dc:33:b1:17:86:e4:61:f7:d6:4d:26:51:a4:43:82:
                    d9:96:b2:58:d7:3a:6c:66:4d:cf:0c:e4:7c:57:ac:
                    e3:37:e2:65:4e:28:20:30:a9:14:44:6a:b4:50:ac:
                    a2:43:d1:8a:1a:fb:48:18:5a:97:c8:ee:75:31:41:
                    b7:55:ce:c8:02:0b:aa:bd:be:52:4a:6a:1b:6f:e8:
                    f8:54:5e:44:d2:cd:b7:37:f0:e1:1b:73:92:f3:e0:
                    8b:9b:c7:8c:16:5e:e0:cc:7e:00:e8:ab:da:71:70:
                    1d:13:08:02:a2:93:aa:70:9c:ef:37:d9:7d:7a:23:
                    61:64:d6:25:4f:99:a7:1b:3e:a6:47:04:c3:e1:b8:
                    5e:0f:cb:ec:90:83:88:de:a1:61:3f:e0:10:48:fb:
                    d3:d2:8c:2c:ef:46:6b:44:18:52:65:34:19:f6:f4:
                    34:da:3f:84:3d:f4:32:d2:57:af:6f:3c:ca:4e:09:
                    21:a5:d4:bd:53:ac:23:6e:a0:90:89:e7:16:75:d7:
                    56:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5D:3E:D6:3F:22:74:AB:18:A1:53:34:86:23:75:E3:F2:09:72:8E
            X509v3 Authority Key Identifier:
                keyid:20:7E:B3:81:95:9B:83:F7:29:9D:68:0B:45:44:AE:46:68:DC:FE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/207EB381959B83F7299D680B4544AE4668DCFE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/207EB381959B83F7299D680B4544AE4668DCFE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/323830343a3963303a3a2f33322d3332203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:6d:5e:a6:a0:4c:e8:22:ff:28:d0:08:4c:82:bc:de:2a:e3:
         b4:35:c4:74:92:65:05:42:a3:2b:73:fa:47:88:d7:8f:61:34:
         3f:54:7c:3c:87:81:1a:39:28:86:0a:1c:84:38:d1:6d:ee:49:
         37:4c:b2:f0:ca:67:b6:60:7d:f5:16:4d:b4:29:cf:57:2c:fa:
         25:0a:70:c0:47:ae:07:a5:1b:79:e3:93:89:72:2f:5f:35:a4:
         da:8d:f6:dd:55:10:37:5f:9d:04:a0:3b:61:71:8d:07:ca:58:
         43:e3:a0:bb:9e:6e:91:2a:18:81:f9:4b:75:fa:5d:a7:40:89:
         f9:4c:51:6a:f9:bd:57:7c:c5:75:bf:6a:52:a0:39:10:61:8d:
         4a:db:28:96:a8:6d:02:69:29:76:b6:aa:83:48:87:71:21:2b:
         04:45:21:ce:98:19:e1:ab:80:e7:9d:30:25:3c:3e:12:5e:ec:
         87:30:f1:c0:1d:1f:de:53:97:55:96:9b:e2:a2:04:4f:bd:84:
         ae:1f:75:9b:57:15:0c:6c:c9:75:6e:d0:2f:ce:27:00:e3:da:
         30:1e:da:a1:e1:85:76:ab:54:11:8d:21:2f:e6:2f:45:46:82:
         3d:67:1c:56:e7:cf:34:98:43:b5:39:4d:b5:0c:cc:2a:15:c1:
         16:60:0a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----