Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/323830343a376232303a3a2f33322d3438203d3e20323731343132.roa
File:                     323830343a376232303a3a2f33322d3438203d3e20323731343132.roa (raw, json)
Hash identifier:          WauBji+y96w7icIEximADTf+d91f0VjCN7DYAmfdivs=
Subject key identifier:   C2:28:AA:9A:4D:F0:AB:99:5A:34:EE:00:F6:24:5B:18:63:4E:C7:A8
Certificate issuer:       /CN=471A7ADD455C68D25753DE159530C83B00C46E39
Certificate serial:       336F9C474675367FBD177B245A2EFEE9FB56F439
Authority key identifier: 47:1A:7A:DD:45:5C:68:D2:57:53:DE:15:95:30:C8:3B:00:C4:6E:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/471A7ADD455C68D25753DE159530C83B00C46E39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/323830343a376232303a3a2f33322d3438203d3e20323731343132.roa
Signing time:             Sun 25 Jun 2023 12:00:00 +0000
ROA not before:           Sun 25 Jun 2023 11:55:00 +0000
ROA not after:            Tue 25 Jun 2024 12:00:00 +0000
asID:                     271412
IP address blocks:        2804:7b20::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6f:9c:47:46:75:36:7f:bd:17:7b:24:5a:2e:fe:e9:fb:56:f4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471A7ADD455C68D25753DE159530C83B00C46E39
        Validity
            Not Before: Jun 25 11:55:00 2023 GMT
            Not After : Jun 25 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:43:69:0e:dc:f6:bf:57:0a:d1:a2:32:ce:
                    a2:f8:11:33:74:9b:e1:43:f4:0c:a6:20:eb:2c:ea:
                    f0:87:24:43:d1:9c:a7:54:a4:f6:90:e7:3f:e5:bd:
                    c2:cb:dd:bb:a5:a6:5e:e1:65:59:0a:af:2b:e3:3c:
                    ce:ed:62:ff:0f:e9:c0:0a:9d:48:2b:e6:e6:cc:80:
                    ed:15:ee:c4:ba:0f:cc:3d:25:94:84:02:1c:12:73:
                    ff:f6:0a:8c:01:a9:f2:a3:11:16:57:4d:c3:ed:06:
                    a9:25:b6:a7:97:f9:99:0e:1f:5b:81:b6:fe:e1:69:
                    94:91:0f:90:b2:b5:04:07:5d:b7:ef:d8:88:23:51:
                    a4:1b:f2:7f:f2:0c:d7:cc:18:e7:51:a5:ce:87:0a:
                    3b:b0:56:44:c7:92:6f:7c:8b:a5:e4:b6:f9:cf:1b:
                    97:fd:5d:f4:32:9c:c0:b0:a3:0b:2c:02:0f:a8:89:
                    a8:a8:46:0e:2b:b0:f8:9e:78:7f:aa:0c:01:04:d7:
                    ae:38:a4:91:90:c9:c5:65:d1:ff:8d:9a:79:b8:a9:
                    77:ee:01:dd:e0:31:8a:ba:62:82:d2:60:27:fe:4f:
                    78:b4:08:a0:4d:e0:39:cc:27:67:3a:4b:a4:a4:1d:
                    6b:8d:a8:b1:fd:0d:0e:02:fd:27:c4:65:d5:19:ff:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:28:AA:9A:4D:F0:AB:99:5A:34:EE:00:F6:24:5B:18:63:4E:C7:A8
            X509v3 Authority Key Identifier:
                keyid:47:1A:7A:DD:45:5C:68:D2:57:53:DE:15:95:30:C8:3B:00:C4:6E:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/471A7ADD455C68D25753DE159530C83B00C46E39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/471A7ADD455C68D25753DE159530C83B00C46E39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/323830343a376232303a3a2f33322d3438203d3e20323731343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:99:5c:74:7b:b5:20:c5:c0:7f:4f:5f:7a:a0:18:cb:91:72:
         73:ba:96:5d:56:b6:05:95:48:7f:03:21:37:b2:58:a5:63:b6:
         e6:c2:eb:0e:b0:a1:96:4d:f4:a1:a0:9e:01:4b:04:f5:27:06:
         fc:a2:c6:49:93:c1:1a:05:ac:00:4c:46:ad:a1:a2:08:95:c4:
         76:06:cc:ad:eb:f5:17:54:86:f9:ab:74:5d:a8:8c:2f:ac:3b:
         ea:f3:4f:67:66:5b:1d:13:e9:f3:79:3c:6f:f0:b2:52:3d:e2:
         a5:f4:63:6a:5f:71:84:b1:75:94:09:55:df:49:39:f0:3d:4d:
         66:1d:31:69:05:ec:50:0c:f6:5e:87:a8:4c:40:ae:c4:1f:f4:
         49:e7:14:c9:72:34:ea:ed:8a:32:88:82:0a:41:2e:b2:d7:a9:
         61:7e:a9:3d:15:34:79:e6:47:dc:63:76:3a:da:96:92:25:61:
         94:76:77:f1:17:17:8a:8c:62:04:88:fc:e9:dd:0d:5b:a0:f3:
         ad:8e:56:6d:07:60:0c:ac:da:07:c8:37:3f:48:34:40:09:88:
         d0:b5:4e:41:aa:33:4c:61:de:93:f4:ea:34:c0:b1:02:30:97:
         5f:51:1a:ac:22:79:6e:2b:38:ed:70:93:e8:9d:b0:28:26:f8:
         40:d8:60:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----