Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/323830343a346435633a3a2f33322d3332203d3e20323638313932.roa
File:                     323830343a346435633a3a2f33322d3332203d3e20323638313932.roa (raw, json)
Hash identifier:          fHehiSt1xi2RcjEJ7MRjPop7J+OoTVC5eK/r71kf3Wc=
Subject key identifier:   E3:D0:2C:6B:6B:3C:EF:7A:D4:04:54:D4:23:C5:3C:AA:34:09:4F:5D
Certificate issuer:       /CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
Certificate serial:       15A25C1EAE9685D63E4FA65B0B2FE508A6437EE0
Authority key identifier: DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/323830343a346435633a3a2f33322d3332203d3e20323638313932.roa
Signing time:             Mon 14 Aug 2023 15:58:38 +0000
ROA not before:           Mon 14 Aug 2023 15:53:38 +0000
ROA not after:            Mon 12 Aug 2024 15:58:38 +0000
asID:                     268192
IP address blocks:        2804:4d5c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a2:5c:1e:ae:96:85:d6:3e:4f:a6:5b:0b:2f:e5:08:a6:43:7e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
        Validity
            Not Before: Aug 14 15:53:38 2023 GMT
            Not After : Aug 12 15:58:38 2024 GMT
        Subject: CN=E3D02C6B6B3CEF7AD40454D423C53CAA34094F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bd:1f:aa:21:44:52:a9:60:1b:12:fa:fa:fe:
                    32:4f:4d:53:5d:ba:96:aa:8c:b3:ba:c2:b3:9d:16:
                    ab:d4:17:1a:7e:c6:7d:02:0e:03:21:71:db:fe:23:
                    08:4f:5d:4a:be:72:38:8d:20:7a:85:08:3b:cf:20:
                    d8:c6:5c:db:0f:0d:6a:f7:e3:f2:ed:ec:92:f7:9c:
                    87:59:ee:61:aa:22:35:3e:d0:f9:a7:2c:84:f0:e4:
                    40:fc:4e:3d:12:f8:41:02:d0:f3:98:a2:88:c9:00:
                    98:ed:f5:42:89:e5:fc:10:0b:75:20:63:bf:3b:81:
                    cf:3c:c3:1e:13:65:41:08:ed:ee:59:7a:23:92:f7:
                    11:0a:8b:f5:fa:0f:d4:c4:ff:78:d6:dd:69:35:27:
                    71:cc:b2:82:b6:c0:d2:2b:0b:35:b2:a9:b2:48:89:
                    c1:60:5e:7b:41:3b:69:47:8e:ad:f1:87:e9:86:24:
                    d3:f3:21:02:ea:64:94:3e:7c:3e:66:3d:ce:63:0c:
                    cd:1a:5c:f4:b3:4e:60:b3:11:48:d1:62:a8:d1:d5:
                    59:80:2f:d2:77:73:6e:e1:d7:8e:ac:c8:66:b2:ba:
                    af:26:7c:2d:84:b8:34:b3:06:99:1b:0a:2e:1c:2c:
                    c7:97:ce:d4:20:e4:49:f8:41:a1:91:02:62:52:cb:
                    ff:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D0:2C:6B:6B:3C:EF:7A:D4:04:54:D4:23:C5:3C:AA:34:09:4F:5D
            X509v3 Authority Key Identifier:
                keyid:DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/DCA8042978431D2B4D15E54233868E8EBA0D1446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/323830343a346435633a3a2f33322d3332203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:d7:51:f4:ba:fe:ba:ee:88:9b:4d:ac:72:13:43:98:1c:45:
         2f:22:7c:28:49:09:ec:36:df:cb:01:3d:0d:04:e8:8b:b9:2e:
         bc:dd:39:36:f0:f9:45:1b:df:bb:8e:93:48:bf:81:83:6a:19:
         77:9f:e9:1e:e0:4d:75:64:b3:49:9c:5f:44:d2:95:df:fc:5a:
         86:83:f8:9d:75:60:86:c1:89:e4:27:b4:22:1d:e3:47:76:4c:
         ac:7f:76:ab:98:8b:09:c9:68:1d:45:f7:88:ed:f7:af:27:da:
         e4:ba:36:9c:f4:11:54:16:51:11:e3:8f:0d:b6:59:d5:19:bb:
         37:7d:82:af:f5:be:81:c4:f8:2c:83:a3:12:9a:5c:af:12:52:
         b0:d3:f8:fc:be:41:37:cb:2b:eb:a1:b5:85:f5:33:53:3d:f4:
         80:27:18:9d:1d:0f:1f:e2:33:9e:f9:bb:d9:51:7e:f1:79:2e:
         6d:ed:d2:05:d6:0b:06:cb:68:13:a1:ff:5f:38:5f:c5:74:9e:
         41:60:e7:b1:a9:99:f6:bc:7c:8f:db:58:ea:7f:52:e9:ef:b6:
         4e:85:ac:75:78:fb:96:b8:d8:a3:cc:45:95:eb:f6:6a:6a:2a:
         c9:42:08:fa:b5:6e:0e:60:ad:21:96:b9:66:05:bd:30:ca:50:
         76:47:ba:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----