Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33322d3334203d3e20323634323933.roa
File:                     323830343a323561383a3a2f33322d3334203d3e20323634323933.roa (raw, json)
Hash identifier:          3yu10p7Mexh3kOMHFtKpt44UPqiSRD9ICqX7QUtBHXs=
Subject key identifier:   69:85:37:C6:71:17:AB:63:84:DE:B7:96:83:DD:28:C9:BE:BD:0F:26
Certificate issuer:       /CN=45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237
Certificate serial:       37C5E4BBD39B2718D67C3BA3DCB4DBDD0C3742C4
Authority key identifier: 45:C2:B2:7E:F4:0A:0F:DB:E3:D9:87:DA:ED:A2:AD:DB:47:E3:B2:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33322d3334203d3e20323634323933.roa
Signing time:             Tue 17 Jan 2023 01:37:02 +0000
ROA not before:           Tue 17 Jan 2023 01:32:02 +0000
ROA not after:            Tue 16 Jan 2024 01:37:02 +0000
asID:                     264293
IP address blocks:        2804:25a8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c5:e4:bb:d3:9b:27:18:d6:7c:3b:a3:dc:b4:db:dd:0c:37:42:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237
        Validity
            Not Before: Jan 17 01:32:02 2023 GMT
            Not After : Jan 16 01:37:02 2024 GMT
        Subject: CN=698537C67117AB6384DEB79683DD28C9BEBD0F26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:4b:52:a4:7c:14:04:8f:f3:14:17:c6:0e:
                    5e:d2:5b:60:34:cb:aa:b9:33:c6:b0:84:17:a4:ff:
                    63:ba:f2:10:23:9e:0f:d3:c7:06:98:11:3b:3d:0a:
                    2d:63:e0:a0:34:bb:14:eb:f3:9e:50:96:3e:e6:b5:
                    41:24:aa:77:e6:0e:7b:25:30:b1:67:81:e2:b4:ed:
                    85:fb:56:4d:6b:f6:85:32:af:eb:7c:3c:8c:26:27:
                    d3:4f:1d:06:49:5b:45:d3:0a:49:38:44:d2:ac:31:
                    03:ad:43:e0:4a:cc:dc:27:1f:06:3a:8b:64:b1:3b:
                    7b:bd:00:f1:08:ad:f6:b7:6a:1f:88:01:15:83:bd:
                    c6:44:05:64:d1:ff:8b:a1:f7:9b:62:89:5e:2d:4d:
                    6a:fd:5e:93:fb:cd:f2:28:01:80:d1:83:95:ce:d9:
                    5c:16:75:38:48:a9:d6:75:ac:4f:d9:c8:af:5f:d4:
                    7c:0d:f8:b9:d2:2a:c5:7f:fd:24:5d:5a:28:b4:22:
                    19:f8:f5:4c:d0:da:f6:38:22:ab:97:8f:65:f8:c4:
                    b3:63:2a:37:ff:49:ec:8f:a3:fe:1c:1e:e6:76:21:
                    45:98:c1:0e:4e:c6:d0:9f:34:9c:3c:b0:0f:38:c8:
                    9d:01:73:73:82:e6:86:b4:7f:ca:3e:4b:26:e4:81:
                    3d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:85:37:C6:71:17:AB:63:84:DE:B7:96:83:DD:28:C9:BE:BD:0F:26
            X509v3 Authority Key Identifier:
                keyid:45:C2:B2:7E:F4:0A:0F:DB:E3:D9:87:DA:ED:A2:AD:DB:47:E3:B2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33322d3334203d3e20323634323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:6d:d6:93:7a:bd:a7:8a:a4:76:18:07:6c:d4:c1:26:9a:92:
         12:49:7e:27:6d:06:e7:aa:be:f4:29:bc:e0:5d:bd:38:01:32:
         b3:11:c9:94:a6:59:a3:7a:89:2e:cb:36:54:b5:43:0c:15:a9:
         df:ba:82:95:f1:44:d9:2a:2e:81:60:6b:5e:61:a9:c7:8e:64:
         8f:7a:a2:e8:c6:a9:56:77:24:f7:e9:ec:2d:58:f9:76:e0:95:
         90:b3:9a:28:d9:96:86:cf:4e:a0:55:4a:f2:77:41:83:fc:7e:
         e8:07:10:83:2a:1a:e9:2a:c8:16:d7:2d:68:c3:95:43:5c:3c:
         04:26:e1:2d:f9:96:f2:87:d8:52:0a:90:db:af:46:46:cf:81:
         52:de:08:6c:91:09:59:79:c9:40:d5:c8:60:07:f9:b6:12:2d:
         d5:3a:a3:c2:40:e3:54:90:18:3c:76:d9:6d:ac:5f:f8:2f:12:
         0d:c6:5e:25:8d:ef:f3:e8:eb:a6:a1:ff:ed:69:bc:ba:34:f3:
         66:4b:5f:19:a2:3e:89:4d:70:91:74:73:b6:01:99:c4:05:96:
         c2:fd:9f:d7:00:22:ad:82:92:78:96:7b:34:2a:65:01:53:b8:
         64:fd:63:95:ae:92:c4:cd:a7:a4:31:fd:18:df:2b:dc:43:53:
         b2:dc:4c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----