Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa
File:                     323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa (raw, json)
Hash identifier:          rdU2hTUclqnJ84Z1N3WlN70HL/fYHiuiLPo1jF9yfT8=
Subject key identifier:   82:D6:16:AE:FB:48:E2:9C:B2:52:C5:40:2F:DC:ED:BE:E5:49:3E:F1
Certificate issuer:       /CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
Certificate serial:       5277BF6C6F0D04FB71DDFCC6AA2616921D2FEA2A
Authority key identifier: 7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa
Signing time:             Mon 21 Aug 2023 14:42:28 +0000
ROA not before:           Mon 21 Aug 2023 14:37:28 +0000
ROA not after:            Mon 19 Aug 2024 14:42:28 +0000
asID:                     268308
IP address blocks:        2804:4f28:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:77:bf:6c:6f:0d:04:fb:71:dd:fc:c6:aa:26:16:92:1d:2f:ea:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
        Validity
            Not Before: Aug 21 14:37:28 2023 GMT
            Not After : Aug 19 14:42:28 2024 GMT
        Subject: CN=82D616AEFB48E29CB252C5402FDCEDBEE5493EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f5:75:ee:ab:c2:79:5d:02:f5:21:5e:40:95:
                    ff:4d:a5:6c:0b:59:46:cc:7d:25:11:92:0d:b3:a5:
                    f8:d3:af:ac:86:fd:02:8b:1a:ae:b9:71:a3:e6:06:
                    41:ab:6a:4d:15:b3:69:45:a7:f7:ec:5b:4f:15:14:
                    b0:bd:2f:43:60:8a:0e:49:81:9d:54:09:24:31:06:
                    1e:d6:ce:9d:f1:e9:e5:55:da:33:f0:88:7f:f2:c4:
                    e2:07:ae:ad:16:2b:63:30:35:e0:46:0e:75:f9:97:
                    0f:de:2c:1c:86:c7:02:cb:df:fe:83:b3:8e:31:cc:
                    a3:c0:86:87:76:3b:42:c9:58:aa:cf:37:b8:02:58:
                    3a:c7:9c:00:5c:42:eb:ac:70:57:e4:04:2f:f3:13:
                    6f:ab:07:6a:39:e6:ae:c6:50:90:6d:a9:0d:5f:1d:
                    aa:57:2c:c1:c5:7c:a1:bc:c0:95:7a:6a:f5:f4:f2:
                    14:22:e3:77:b7:e4:51:57:19:8d:c8:91:47:cd:37:
                    a5:c4:14:a8:0f:8b:f1:83:31:94:bd:4b:e6:c9:2c:
                    07:4a:48:5f:51:30:5b:bf:70:62:a5:31:32:f3:48:
                    d4:5f:3b:27:4b:a0:d2:43:0d:af:a5:09:a8:67:2b:
                    74:b0:b8:30:73:fc:a7:c3:94:ae:e0:f2:dd:34:bd:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D6:16:AE:FB:48:E2:9C:B2:52:C5:40:2F:DC:ED:BE:E5:49:3E:F1
            X509v3 Authority Key Identifier:
                keyid:7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/7E71CA6C0D976155FE8642D776AC920AA8929FA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         73:d3:c9:01:4a:e7:f3:7a:3c:78:96:b0:ad:94:f8:c7:2e:df:
         0f:f6:77:48:91:48:e9:2d:e0:9f:d0:de:d9:b3:4b:da:77:d0:
         49:c8:fb:ee:f7:d0:7d:da:14:7a:ec:28:b9:03:5c:f0:fb:5f:
         c8:6f:6e:3f:b3:52:a3:a5:86:a1:a9:c9:ec:cc:0a:04:2b:04:
         c6:ca:f2:cc:63:ab:7c:cb:e5:09:9e:92:c4:34:9c:21:71:96:
         ca:ed:e1:56:ed:7f:f9:4d:54:bd:0d:b0:e3:c8:8b:24:a5:80:
         9d:a9:c4:b3:ad:94:9e:2a:ff:fb:9e:dc:87:18:b6:89:d1:47:
         ea:5c:42:20:d0:6e:e4:d3:be:8a:fd:17:24:a6:91:e0:ea:36:
         21:40:28:6e:c6:b0:7e:d4:8e:de:61:bf:da:66:8d:e8:ca:79:
         79:a9:7a:5b:49:da:e0:0f:07:61:b8:0f:a6:58:42:d1:b0:02:
         18:55:5b:00:37:50:dc:c1:a4:c7:5a:06:c2:b3:10:33:df:d8:
         fa:b1:87:c2:46:77:1c:d2:ee:22:a6:4f:07:42:5f:eb:65:9d:
         2c:c3:cd:48:61:b8:f8:a0:ff:c7:4c:09:30:81:0b:ba:3c:3b:
         6d:f7:e3:a3:db:ef:0a:34:40:67:30:51:71:d9:90:b4:81:a0:
         cc:1a:6f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----