Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/323830343a316431343a3a2f33322d3332203d3e203631363934.roa
File:                     323830343a316431343a3a2f33322d3332203d3e203631363934.roa (raw, json)
Hash identifier:          U4NKgGKL/K/hBJOD12P/gNxCENowYoCsswZSVVwY1ZM=
Subject key identifier:   5A:16:5D:56:F6:AE:0D:14:2A:92:D9:49:01:01:CA:FE:F9:29:2F:31
Certificate issuer:       /CN=4954164C92FA51462EBE84A75D28E2891F0752CF
Certificate serial:       702FE94814506596CF1E65A65B6F25A6AFA28364
Authority key identifier: 49:54:16:4C:92:FA:51:46:2E:BE:84:A7:5D:28:E2:89:1F:07:52:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4954164C92FA51462EBE84A75D28E2891F0752CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/323830343a316431343a3a2f33322d3332203d3e203631363934.roa
Signing time:             Wed 23 Aug 2023 15:24:28 +0000
ROA not before:           Wed 23 Aug 2023 15:19:28 +0000
ROA not after:            Wed 21 Aug 2024 15:24:28 +0000
asID:                     61694
IP address blocks:        2804:1d14::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2f:e9:48:14:50:65:96:cf:1e:65:a6:5b:6f:25:a6:af:a2:83:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4954164C92FA51462EBE84A75D28E2891F0752CF
        Validity
            Not Before: Aug 23 15:19:28 2023 GMT
            Not After : Aug 21 15:24:28 2024 GMT
        Subject: CN=5A165D56F6AE0D142A92D9490101CAFEF9292F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:80:d5:36:c5:57:25:8a:8a:69:64:e9:80:
                    93:69:f8:33:ec:92:7e:8f:4f:96:e9:76:59:57:ac:
                    39:93:1d:a3:3d:9c:39:92:70:19:c6:c6:75:69:05:
                    5e:b4:6d:ac:e5:ef:2a:41:d9:4a:a5:e0:95:4f:13:
                    a7:4a:41:53:9a:45:77:7d:f7:ca:d3:da:82:93:8b:
                    b3:67:a4:fa:ac:44:a9:3d:0a:78:19:e4:7c:34:de:
                    58:00:7e:95:53:db:53:5b:e9:18:51:7e:4f:b3:04:
                    56:33:25:2f:86:ff:19:28:16:48:ed:30:23:b3:26:
                    69:fc:ea:b5:7b:54:c8:70:9a:eb:0f:b8:07:cc:29:
                    5e:d8:70:cb:b8:52:39:00:e1:50:85:12:cf:e0:e7:
                    2e:e7:39:66:ad:e7:bd:01:24:4c:95:10:91:13:00:
                    16:94:89:ab:1e:81:24:a1:2a:0a:82:35:d2:1a:98:
                    b9:3d:b3:c0:cb:14:7b:32:30:91:27:27:39:2b:09:
                    0b:58:b7:5b:56:b3:26:93:1a:61:c1:f8:20:ee:41:
                    71:df:e0:ef:0e:9b:3e:5e:e0:ef:ae:7d:ef:d6:3b:
                    4b:92:ee:c0:f8:ef:0b:92:c2:4e:d5:ea:e0:e9:c4:
                    2b:d9:33:7a:c4:ca:91:b7:8f:3a:22:f4:10:bf:32:
                    9a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:16:5D:56:F6:AE:0D:14:2A:92:D9:49:01:01:CA:FE:F9:29:2F:31
            X509v3 Authority Key Identifier:
                keyid:49:54:16:4C:92:FA:51:46:2E:BE:84:A7:5D:28:E2:89:1F:07:52:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/4954164C92FA51462EBE84A75D28E2891F0752CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4954164C92FA51462EBE84A75D28E2891F0752CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/323830343a316431343a3a2f33322d3332203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d14::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:88:42:4c:4e:8f:d7:be:54:89:fd:a0:80:74:3b:36:f9:ec:
         ae:07:9f:fe:26:8a:c6:ff:dd:d7:ea:7d:3a:02:5a:58:51:31:
         bf:05:02:ed:1f:e0:6d:02:b7:03:6d:73:a1:0f:a8:56:8d:ad:
         4f:11:28:1c:2a:1d:17:51:91:20:26:f5:9d:14:7e:d1:c9:f4:
         bd:39:0b:53:6b:ad:3d:11:f0:40:2b:6b:59:ff:e7:af:08:db:
         59:83:15:a7:0d:19:eb:3b:20:b8:db:c4:22:f4:49:4e:3a:ba:
         77:af:08:8d:f9:88:37:f4:60:c9:b7:05:8e:67:a8:7e:64:ec:
         4c:d8:20:05:22:d9:2e:a8:22:7c:01:59:78:2b:d5:78:1b:43:
         be:ca:f5:6e:4c:f5:6a:e2:1c:56:db:49:38:d7:76:2b:cb:b8:
         fd:b2:c5:51:ac:eb:ce:5f:73:b1:c1:e7:a1:17:f3:79:e8:52:
         54:a9:11:63:59:2a:42:30:b9:78:66:a2:7e:8d:d9:46:43:ad:
         c7:b2:f8:76:20:04:9b:c7:d1:84:ee:ff:bc:a2:f5:6a:83:1a:
         ce:25:de:42:8e:af:bb:57:74:6b:29:76:98:21:ac:4b:cd:cd:
         09:b4:91:9e:d5:8b:ab:33:30:f8:76:75:d6:59:d7:17:a2:c1:
         a2:17:fa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----