Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/323830343a313739633a3a2f33322d3438203d3e20323633313539.roa
File:                     323830343a313739633a3a2f33322d3438203d3e20323633313539.roa (raw, json)
Hash identifier:          T5+ncJ7k1e7wGEUcooAoGyAkXOHuWYQvVNzTlSUjtGQ=
Subject key identifier:   CC:C1:85:9F:43:3E:D7:AB:C4:86:8F:BB:E1:88:3D:3F:84:26:4D:32
Certificate issuer:       /CN=C32C4CF5306FA1777F8B122237D098922FCFDEB9
Certificate serial:       043B284A32E3AAF83BB7139CE635506EBEB5EE75
Authority key identifier: C3:2C:4C:F5:30:6F:A1:77:7F:8B:12:22:37:D0:98:92:2F:CF:DE:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C32C4CF5306FA1777F8B122237D098922FCFDEB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/323830343a313739633a3a2f33322d3438203d3e20323633313539.roa
Signing time:             Sun 25 Jun 2023 00:00:00 +0000
ROA not before:           Sat 24 Jun 2023 23:55:00 +0000
ROA not after:            Tue 25 Jun 2024 00:00:00 +0000
asID:                     263159
IP address blocks:        2804:179c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3b:28:4a:32:e3:aa:f8:3b:b7:13:9c:e6:35:50:6e:be:b5:ee:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C32C4CF5306FA1777F8B122237D098922FCFDEB9
        Validity
            Not Before: Jun 24 23:55:00 2023 GMT
            Not After : Jun 25 00:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b7:77:e5:3b:9f:87:a3:84:3a:fa:cb:ae:4d:
                    a8:53:ec:72:0d:c1:2e:95:6d:7e:8f:d1:b8:17:d0:
                    ea:e6:4f:03:3d:52:cb:ef:16:30:4f:a7:72:df:73:
                    65:31:e9:37:f5:b5:fc:1e:f8:fb:8c:67:e8:d4:cc:
                    87:3f:86:d2:74:c7:04:0b:d1:6d:08:9d:bc:ff:63:
                    6c:aa:e2:ab:08:8e:b1:dd:55:99:ba:db:c1:cf:c8:
                    9d:cb:15:fe:1c:8c:00:8f:44:7f:40:67:cd:a1:f4:
                    dd:df:07:0e:fb:65:d5:91:da:87:19:1a:35:1a:f6:
                    cd:1c:71:b6:a9:cb:e2:e7:13:7b:61:73:17:c5:91:
                    d4:73:80:9a:f9:42:8e:69:9c:a8:3c:02:0b:c9:69:
                    04:2d:13:e4:c1:c6:f0:8f:43:f5:55:61:b2:4b:95:
                    43:48:95:03:b7:6e:8d:49:52:ed:85:f4:ee:b2:83:
                    df:02:ae:da:d8:18:57:4c:6f:e9:c0:37:58:5f:85:
                    08:5d:85:33:b6:37:11:fc:8c:a8:1b:ff:4e:7f:fc:
                    8c:b5:78:db:f3:f0:7b:6b:7d:8d:5f:4f:79:f3:cc:
                    0d:c9:51:7d:2e:21:2f:ad:46:d7:6e:a2:6d:e6:aa:
                    0c:c7:f1:7f:da:1d:e1:82:9c:f7:37:d1:ca:af:8d:
                    d2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C1:85:9F:43:3E:D7:AB:C4:86:8F:BB:E1:88:3D:3F:84:26:4D:32
            X509v3 Authority Key Identifier:
                keyid:C3:2C:4C:F5:30:6F:A1:77:7F:8B:12:22:37:D0:98:92:2F:CF:DE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/C32C4CF5306FA1777F8B122237D098922FCFDEB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C32C4CF5306FA1777F8B122237D098922FCFDEB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/323830343a313739633a3a2f33322d3438203d3e20323633313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:179c::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:84:f4:94:be:03:0b:e4:fe:8d:62:da:24:a9:5b:cc:84:c2:
         53:da:fc:ef:3d:31:a4:60:37:3c:d4:6c:e8:97:a4:50:ef:cc:
         be:3f:7c:52:8f:ee:37:0a:78:d2:1f:12:63:ca:f5:4d:1d:b4:
         7b:11:a4:fd:45:28:78:5c:d6:ac:74:06:2e:cb:63:bc:ba:2c:
         bf:60:3e:89:dd:84:3d:3c:20:96:de:63:42:76:db:11:4c:ed:
         06:f4:cd:20:79:0b:37:13:47:73:4c:75:a4:7b:29:14:16:da:
         2a:72:cd:af:72:2f:cf:6d:7b:65:97:38:af:bf:9b:ce:dd:0f:
         79:c7:3f:41:1f:c6:0c:43:27:bb:bb:ad:29:c9:2c:27:00:b3:
         00:c5:91:e5:83:13:d6:39:72:7f:4c:df:c1:75:ab:9d:b4:a4:
         c0:0c:f7:4f:08:4d:22:d8:d8:d1:9f:b4:8d:58:27:6e:68:93:
         cd:92:ef:44:cf:8c:ad:fb:8f:98:75:a3:9e:9f:12:39:c7:70:
         59:58:da:64:32:a6:00:d4:57:57:5e:02:0a:fe:07:a9:7c:8f:
         6f:49:07:7b:a1:db:e0:79:97:dd:31:b6:e3:50:84:e9:59:2a:
         a2:00:c1:48:32:ad:3a:f9:ae:35:29:1e:ca:fe:65:71:5e:7c:
         a2:8a:c9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----