Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa
File:                     323830343a346632383a3a2f33332d3333203d3e20323638333038.roa (raw, json)
Hash identifier:          f9ivcJKrvR94Q+g35OP/VFaEm7xwKZNNu6gp+3Wbs5U=
Subject key identifier:   7C:A7:16:6F:DF:77:A2:43:5C:F8:3F:89:45:11:00:81:76:DB:EF:DB
Certificate issuer:       /CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
Certificate serial:       301DDA8E643B129BBCC62E0D67DCF1BACB4593BC
Authority key identifier: 7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa
Signing time:             Mon 21 Aug 2023 14:42:29 +0000
ROA not before:           Mon 21 Aug 2023 14:37:29 +0000
ROA not after:            Mon 19 Aug 2024 14:42:29 +0000
asID:                     268308
IP address blocks:        2804:4f28::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1d:da:8e:64:3b:12:9b:bc:c6:2e:0d:67:dc:f1:ba:cb:45:93:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
        Validity
            Not Before: Aug 21 14:37:29 2023 GMT
            Not After : Aug 19 14:42:29 2024 GMT
        Subject: CN=7CA7166FDF77A2435CF83F894511008176DBEFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:2e:ec:31:2d:72:8d:74:47:4f:47:ec:0a:
                    ec:2e:12:04:c9:12:ee:65:0f:59:42:c4:a7:c3:6d:
                    6a:2c:80:b1:d3:b6:77:4c:4f:d4:f3:d9:a7:04:35:
                    6f:3e:1b:12:67:32:7b:b4:1c:7d:1a:e9:3f:8e:68:
                    a7:fe:d7:1b:87:41:2b:89:3e:d6:7a:f5:3d:38:43:
                    32:17:74:6d:50:85:0e:68:89:69:4e:a2:db:97:13:
                    08:9a:7c:f1:45:3b:bd:d1:29:79:c7:b9:e3:2e:e0:
                    17:c4:f3:3c:cb:64:a1:3a:04:c5:b1:1a:7c:f3:aa:
                    f2:ca:63:b7:33:4b:81:19:65:2f:67:bf:7c:ce:ea:
                    84:96:79:41:0d:85:a8:58:6f:7b:f3:7f:06:fb:e5:
                    b0:c4:a5:d5:89:df:ad:93:b3:24:56:b8:a8:e4:f7:
                    41:ae:36:54:bc:fb:d2:19:7f:87:45:70:06:ae:6b:
                    0a:6e:bc:13:68:dc:68:45:51:23:7b:e1:47:c1:64:
                    4a:1f:36:ae:1c:e1:96:34:53:54:b8:00:e7:8d:43:
                    71:cf:ca:4e:2a:1c:25:d7:c4:b6:a1:3b:c3:84:ac:
                    f2:bb:1d:64:06:7a:3f:15:79:18:2b:47:b3:ab:f9:
                    6d:26:57:5f:2f:78:50:18:bb:9e:72:d0:85:9a:72:
                    b8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A7:16:6F:DF:77:A2:43:5C:F8:3F:89:45:11:00:81:76:DB:EF:DB
            X509v3 Authority Key Identifier:
                keyid:7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/7E71CA6C0D976155FE8642D776AC920AA8929FA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28::/33

    Signature Algorithm: sha256WithRSAEncryption
         63:ff:38:ac:45:46:30:c1:cc:50:c9:6a:b6:62:d5:d9:80:14:
         1c:3b:be:3d:ff:20:5b:85:d6:b5:91:73:86:7d:69:42:76:a8:
         42:f8:69:1d:ec:78:dc:d9:92:42:dd:3f:30:14:77:bd:ef:7d:
         b8:3b:2f:0b:f9:3b:8b:68:d9:a2:84:ec:d0:ae:d5:f9:44:e5:
         b8:03:62:42:1b:bb:70:de:3f:04:d9:a4:f6:64:15:f3:56:1f:
         fe:76:b7:ab:64:91:59:62:fc:e9:75:74:29:a8:41:3d:48:7f:
         39:22:a6:62:30:bf:87:ec:f8:c4:5b:bc:cc:c8:a6:7b:4f:97:
         35:f8:27:03:fb:c4:a9:8d:fa:94:b6:17:dd:b9:64:8a:97:0a:
         ed:c0:5a:72:cd:42:a0:9b:94:1c:66:64:dc:43:9d:09:98:4e:
         57:47:c1:02:a4:6b:92:f6:e7:d8:3c:33:ca:5a:2c:b1:b7:f8:
         09:d6:fb:58:15:f8:13:be:d7:f6:9b:61:30:f1:94:51:84:18:
         8c:23:8c:24:76:de:0c:e3:82:50:0d:fa:84:a7:ca:ef:c6:c9:
         f2:89:ec:04:21:93:eb:12:2c:40:d2:7d:cf:0c:1e:5d:c6:b4:
         5f:fa:35:f6:02:08:de:ae:94:d6:4c:97:1a:f4:b8:d4:0c:46:
         80:b1:59:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----