Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/0/323830343a363436633a3a2f33322d3430203d3e20323639343237.roa
File:                     323830343a363436633a3a2f33322d3430203d3e20323639343237.roa (raw, json)
Hash identifier:          zC4mSNZUhQvUr2s6xtEZlmH3uRk0kxSfUPHQPNXiKUo=
Subject key identifier:   94:09:0E:71:B9:3E:6A:9F:4B:82:3B:DD:9E:42:D4:04:C1:30:B3:82
Certificate issuer:       /CN=83141F3B22C1291EAC400AB3E90135ACD95AE9D6
Certificate serial:       78185E5D1825176C91B9751A3787D4E287D9BE69
Authority key identifier: 83:14:1F:3B:22:C1:29:1E:AC:40:0A:B3:E9:01:35:AC:D9:5A:E9:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83141F3B22C1291EAC400AB3E90135ACD95AE9D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/0/323830343a363436633a3a2f33322d3430203d3e20323639343237.roa
Signing time:             Wed 17 May 2023 00:39:29 +0000
ROA not before:           Wed 17 May 2023 00:34:29 +0000
ROA not after:            Wed 15 May 2024 00:39:29 +0000
asID:                     269427
IP address blocks:        2804:646c::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:18:5e:5d:18:25:17:6c:91:b9:75:1a:37:87:d4:e2:87:d9:be:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83141F3B22C1291EAC400AB3E90135ACD95AE9D6
        Validity
            Not Before: May 17 00:34:29 2023 GMT
            Not After : May 15 00:39:29 2024 GMT
        Subject: CN=94090E71B93E6A9F4B823BDD9E42D404C130B382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:39:b5:e5:e8:50:a3:28:63:63:12:0f:45:
                    fc:77:59:57:dd:6a:61:bc:04:0e:eb:62:f7:eb:b2:
                    d7:6f:eb:0c:68:49:86:4b:f7:b5:d2:91:be:ad:be:
                    69:f0:7a:91:35:ef:68:de:e2:6a:1f:01:cd:5c:3c:
                    aa:7a:f9:20:55:09:f1:42:bb:b6:c5:ae:82:02:77:
                    bb:48:f2:5b:90:2c:42:20:37:df:0e:f6:e7:e3:8e:
                    56:a1:68:4e:ca:aa:e0:5a:94:4d:1c:65:ed:5a:b8:
                    11:38:7d:cd:40:b1:bf:ce:53:46:48:0a:4f:36:19:
                    57:e9:d0:1b:a8:89:ef:30:cf:10:56:a2:ad:7f:91:
                    f6:e9:80:62:c9:3d:64:0c:ce:6e:25:94:3a:e0:45:
                    f7:61:2f:b3:2f:ae:89:e6:5c:db:30:59:c2:5b:ef:
                    ba:0e:eb:2f:9e:16:01:bb:85:92:0b:4a:8d:dd:53:
                    80:44:40:0e:c9:3f:bd:31:b2:ef:72:e2:c5:2c:b3:
                    18:0c:8d:c0:c8:ee:65:2f:2a:52:12:c0:a2:c9:a0:
                    f1:8b:de:90:c5:89:41:8d:46:c4:94:15:62:55:3c:
                    8b:ff:dd:f2:f5:85:aa:61:f8:ba:32:8b:a7:94:f5:
                    de:62:4d:5c:22:47:6b:ad:eb:67:38:aa:7c:45:be:
                    4b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:09:0E:71:B9:3E:6A:9F:4B:82:3B:DD:9E:42:D4:04:C1:30:B3:82
            X509v3 Authority Key Identifier:
                keyid:83:14:1F:3B:22:C1:29:1E:AC:40:0A:B3:E9:01:35:AC:D9:5A:E9:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/0/83141F3B22C1291EAC400AB3E90135ACD95AE9D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83141F3B22C1291EAC400AB3E90135ACD95AE9D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/0/323830343a363436633a3a2f33322d3430203d3e20323639343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:646c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:d8:26:21:e4:79:ba:96:ac:ec:29:9a:8c:d4:06:65:de:82:
         91:0c:57:49:71:a0:bf:49:f4:b9:cd:1c:3d:6e:0a:c3:bd:70:
         1b:80:f8:0a:72:78:e7:70:db:52:61:ed:83:88:1a:36:fe:61:
         3d:b7:7f:98:b7:25:5e:70:c7:12:d6:53:0f:eb:80:18:ba:85:
         d5:96:65:8d:78:ef:47:b3:e5:9a:d5:8e:72:94:2e:7f:09:8e:
         f2:fb:d2:9d:25:65:f1:af:1f:73:f1:11:1d:be:5a:70:c4:16:
         7c:a7:4e:f9:28:13:2a:16:b0:29:67:8a:cf:77:13:2b:46:3c:
         0d:45:2f:65:f9:12:67:8b:61:38:2e:f7:1d:ed:7a:f4:89:3c:
         9b:4a:69:53:7f:a5:29:ee:8b:6b:53:67:30:64:0d:bd:33:f6:
         11:b5:77:20:f2:06:af:f2:5d:46:7d:f9:0c:38:4a:d4:25:08:
         b6:3d:44:0d:8a:d9:5d:a8:95:60:91:ef:3a:9e:7f:1a:30:78:
         9a:1f:79:66:40:39:c2:dd:80:1f:e9:f2:d3:93:a2:82:1c:fe:
         c8:4b:63:f4:e5:eb:ae:96:fd:86:93:de:c8:5a:c1:d2:62:d7:
         ea:7e:a0:b3:09:d6:f1:4c:c5:d3:fb:d2:1d:95:bc:ee:76:5b:
         53:da:cc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----