Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/323830343a346338303a3a2f33332d3333203d3e20323637333734.roa
File:                     323830343a346338303a3a2f33332d3333203d3e20323637333734.roa (raw, json)
Hash identifier:          XdLDigc2H4+UfczE0HZ9ILlcYv/DMXQZhHuaGYG5R+U=
Subject key identifier:   85:FE:24:15:31:D7:46:DC:38:F7:71:CF:CE:4B:57:61:D3:54:72:CD
Certificate issuer:       /CN=C88D10B687ABB2F8DC649DC753A12E98C0539139
Certificate serial:       5C4695D554C9FB56E3C2B3120ECA4ADAF74625F4
Authority key identifier: C8:8D:10:B6:87:AB:B2:F8:DC:64:9D:C7:53:A1:2E:98:C0:53:91:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/323830343a346338303a3a2f33332d3333203d3e20323637333734.roa
Signing time:             Tue 27 Jun 2023 18:38:25 +0000
ROA not before:           Tue 27 Jun 2023 18:33:25 +0000
ROA not after:            Tue 25 Jun 2024 18:38:25 +0000
asID:                     267374
IP address blocks:        2804:4c80::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:46:95:d5:54:c9:fb:56:e3:c2:b3:12:0e:ca:4a:da:f7:46:25:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C88D10B687ABB2F8DC649DC753A12E98C0539139
        Validity
            Not Before: Jun 27 18:33:25 2023 GMT
            Not After : Jun 25 18:38:25 2024 GMT
        Subject: CN=85FE241531D746DC38F771CFCE4B5761D35472CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:9b:4e:5b:06:8c:87:8f:84:5d:ce:16:a5:
                    1a:91:8b:b6:43:89:a0:70:7b:fe:e2:c4:07:94:17:
                    c9:65:36:80:fb:8b:96:b2:12:55:2e:8e:10:fa:6c:
                    e4:a7:2a:94:c3:51:76:b8:7c:2a:dc:12:b6:cb:a5:
                    59:e3:39:da:cd:77:c6:4b:ad:7e:27:0f:6e:f3:08:
                    de:38:7b:4e:47:f8:49:9b:3b:c9:83:d9:b6:85:1f:
                    49:fd:1c:e1:6b:f6:cf:96:87:74:66:ae:9c:38:5c:
                    1a:d0:ff:d5:08:0a:ba:f2:46:82:4f:0e:c8:8b:93:
                    f9:ce:78:aa:cf:8c:3f:02:41:0f:a8:d4:6a:9d:75:
                    c9:dc:62:4f:2a:91:f2:c7:e9:b6:e4:cb:1a:81:d2:
                    86:98:bc:b4:bb:93:55:88:87:82:59:ad:b0:35:2c:
                    d6:65:01:2f:43:27:d2:ff:40:d5:05:6e:75:f7:46:
                    7c:bc:61:39:ee:13:4a:fa:da:67:4e:4a:7e:6f:ab:
                    cb:78:6b:5d:6b:14:d9:df:8c:7d:07:f8:a7:49:aa:
                    50:7d:06:e0:e9:c1:b0:fd:f2:13:0e:3c:1b:28:f3:
                    24:9d:f1:77:b1:ad:c5:02:d5:a3:02:0f:e0:b6:f1:
                    cc:d5:1a:ed:0f:21:df:09:be:cf:72:7d:c8:85:de:
                    ce:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FE:24:15:31:D7:46:DC:38:F7:71:CF:CE:4B:57:61:D3:54:72:CD
            X509v3 Authority Key Identifier:
                keyid:C8:8D:10:B6:87:AB:B2:F8:DC:64:9D:C7:53:A1:2E:98:C0:53:91:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/323830343a346338303a3a2f33332d3333203d3e20323637333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c80::/33

    Signature Algorithm: sha256WithRSAEncryption
         b2:8e:31:d5:1c:6a:39:4c:24:18:c7:d8:52:73:66:2f:24:a3:
         17:d0:74:fc:2e:a7:32:32:2d:9e:ab:2a:30:72:b3:95:bc:94:
         53:0a:d3:e4:e3:04:47:ef:cf:ac:89:62:f4:1e:84:89:d4:6d:
         96:0d:9c:0a:18:bb:d3:a7:fa:22:09:6e:cc:7a:26:86:d1:20:
         cf:42:17:73:5c:24:5d:03:74:4d:b3:8f:9d:4a:d1:21:22:52:
         d9:7d:34:8f:0f:11:b5:c0:3f:db:b6:b7:ec:50:31:33:f2:d3:
         d5:40:c0:8b:42:3f:2e:f7:85:ce:50:65:c4:1d:b7:ed:d1:83:
         cf:56:7f:fa:40:6b:b2:26:11:d2:ad:92:8b:f8:fd:19:fe:17:
         52:c3:06:79:ee:b7:bd:d6:6a:1c:08:44:41:10:ce:8e:2e:72:
         1b:04:14:f2:cc:35:17:82:05:b0:b7:0a:c4:1a:9a:2d:12:23:
         bf:bd:6a:da:63:9d:b6:18:55:33:1c:8c:bf:7b:8e:cf:66:fc:
         99:47:25:0a:2b:f3:1a:32:66:f9:c0:e7:54:05:ea:3b:88:b1:
         ac:6d:7f:87:9b:2b:82:90:de:be:fb:a1:35:da:32:4c:c0:3a:
         92:fd:0f:e6:87:13:01:a5:fe:59:f9:be:95:55:46:17:c0:e7:
         3d:f3:8f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----