Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/323830343a3937303a3a2f33322d3536203d3e20323633303836.roa
File:                     323830343a3937303a3a2f33322d3536203d3e20323633303836.roa (raw, json)
Hash identifier:          euoqkmTCtUEYdhhEriapneSWwCJhywBqGDB0UUkCVmQ=
Subject key identifier:   4A:C8:1A:45:71:75:0B:F8:42:93:55:E2:58:C1:B3:2C:83:5A:54:94
Certificate issuer:       /CN=1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B
Certificate serial:       78A0999D4194CB64353A0E598FE78B5321A329E4
Authority key identifier: 1C:5F:E8:A7:A5:CA:F8:C0:33:2E:DF:71:1A:BD:C0:80:5B:20:8F:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/323830343a3937303a3a2f33322d3536203d3e20323633303836.roa
Signing time:             Tue 07 Mar 2023 15:02:15 +0000
ROA not before:           Tue 07 Mar 2023 14:57:15 +0000
ROA not after:            Tue 05 Mar 2024 15:02:15 +0000
asID:                     263086
IP address blocks:        2804:970::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a0:99:9d:41:94:cb:64:35:3a:0e:59:8f:e7:8b:53:21:a3:29:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B
        Validity
            Not Before: Mar  7 14:57:15 2023 GMT
            Not After : Mar  5 15:02:15 2024 GMT
        Subject: CN=4AC81A4571750BF8429355E258C1B32C835A5494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:63:2b:62:03:6c:a6:01:c1:9d:cc:ee:db:05:
                    3c:e7:53:9f:a6:b4:76:07:6c:22:6e:dd:ef:d3:63:
                    cd:37:f4:04:a4:51:51:30:95:84:60:db:6d:3d:45:
                    30:f8:57:be:9d:af:e8:88:49:66:40:d1:ad:76:e2:
                    40:a4:e9:5e:82:2a:e1:0b:e6:64:7a:cb:9d:e4:4b:
                    37:3a:3c:66:05:33:44:5c:3c:55:8c:8f:9e:95:41:
                    f3:b6:4e:eb:59:b6:68:b2:69:c9:91:e5:bb:d8:2c:
                    c5:a3:1b:37:e7:93:cc:c0:aa:e9:8b:76:8b:4c:42:
                    af:04:50:df:b5:ba:39:8a:54:2d:ac:08:38:cb:19:
                    d2:ab:bf:1a:ca:b8:26:c4:fa:00:e4:60:c0:e5:b6:
                    3b:2a:24:86:78:67:3a:19:0b:ce:d0:3d:38:20:55:
                    cb:76:d7:50:9b:37:25:91:2c:67:b0:3e:f5:8e:13:
                    b1:3d:0c:7e:89:24:d8:c8:07:1e:13:cd:86:65:f1:
                    e4:36:c0:ec:42:8e:bd:4e:6b:a2:bd:b6:ff:6d:a7:
                    58:d6:ab:da:cf:c8:43:4d:6a:21:49:65:d0:94:9c:
                    cf:a4:9c:ba:49:84:e1:d9:88:13:74:0d:11:33:c0:
                    77:4a:dc:a5:20:75:eb:93:4f:4d:29:1e:75:6c:58:
                    94:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C8:1A:45:71:75:0B:F8:42:93:55:E2:58:C1:B3:2C:83:5A:54:94
            X509v3 Authority Key Identifier:
                keyid:1C:5F:E8:A7:A5:CA:F8:C0:33:2E:DF:71:1A:BD:C0:80:5B:20:8F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/323830343a3937303a3a2f33322d3536203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:970::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:a7:61:d7:79:94:4f:1f:57:30:b0:a5:74:89:28:3f:84:a9:
         81:68:51:e2:88:3b:0e:95:3e:07:3d:88:0c:8b:d4:12:5a:db:
         72:a4:ff:6d:29:35:98:42:85:26:59:e0:14:c8:08:2f:36:9b:
         50:5b:f9:0a:5d:fd:fa:f4:bf:9a:4c:4f:f2:fa:ba:ae:84:68:
         08:d8:ab:b0:29:23:41:85:f1:f9:3b:3b:4a:b9:6e:60:ab:9a:
         fa:68:5a:10:1b:f0:a4:4d:1c:52:60:64:30:d8:e6:f7:1a:1f:
         e0:00:ef:f6:ae:b8:5a:78:e9:a8:ce:03:8b:54:0c:19:33:92:
         21:13:6a:50:65:fa:46:5d:ed:91:dc:69:10:77:ab:1c:09:4f:
         f1:5a:75:d8:68:58:af:b3:84:e0:62:1b:e2:b6:3f:87:11:27:
         5f:03:51:36:fb:1b:c7:a3:94:1d:9e:82:b3:a2:8c:c8:90:91:
         27:6b:10:f1:66:f2:2f:8c:02:67:16:9f:cd:f8:b8:ff:34:ca:
         54:6f:e7:20:00:3a:09:a9:29:68:b7:ac:e7:cc:d1:db:94:94:
         9e:55:3c:b3:6d:45:98:af:de:82:74:59:ae:bc:45:10:c6:8e:
         d2:01:50:31:c2:4d:98:f6:8c:80:ae:80:4a:f1:e1:5c:89:40:
         e2:5b:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----