Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a3a2f33322d3333203d3e20323632383437.roa
File:                     323830343a3265383a3a2f33322d3333203d3e20323632383437.roa (raw, json)
Hash identifier:          h4E/MYvMpvVFz7sTQaI/FonT0G/9iB3osCLaPrZXqqM=
Subject key identifier:   3B:4E:F9:11:42:C5:E7:F4:6F:43:42:46:D0:F9:64:75:90:E5:A4:48
Certificate issuer:       /CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
Certificate serial:       312D6135911B4EE91FA942663734FE7A929ABE80
Authority key identifier: 7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a3a2f33322d3333203d3e20323632383437.roa
Signing time:             Fri 29 Dec 2023 18:38:38 +0000
ROA not before:           Fri 29 Dec 2023 18:33:38 +0000
ROA not after:            Fri 27 Dec 2024 18:38:38 +0000
asID:                     262847
IP address blocks:        2804:2e8::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2d:61:35:91:1b:4e:e9:1f:a9:42:66:37:34:fe:7a:92:9a:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
        Validity
            Not Before: Dec 29 18:33:38 2023 GMT
            Not After : Dec 27 18:38:38 2024 GMT
        Subject: CN=3B4EF91142C5E7F46F434246D0F9647590E5A448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:52:9a:2d:a8:99:f8:a2:a4:85:72:5e:2d:
                    db:40:b5:10:da:b8:9a:fc:41:59:7e:51:3a:46:0a:
                    ba:26:52:3b:0b:b6:52:7d:66:4d:32:b4:cd:86:9a:
                    25:61:7f:e0:a0:0e:96:e7:06:a2:6e:0c:4f:43:e6:
                    90:82:2c:3f:77:9b:6a:51:10:19:91:d1:e4:0d:80:
                    da:88:c6:ba:23:7e:46:7f:ef:a1:b9:c3:ea:2b:1b:
                    a7:40:da:e9:c0:71:44:6d:5c:0a:0d:93:39:ba:4f:
                    7a:46:17:8e:4d:9e:ca:6f:05:b0:1d:85:f4:5f:2d:
                    a6:a1:b1:3a:7e:af:7a:f0:24:d7:95:01:61:21:d8:
                    5a:42:2c:0b:80:d8:ba:6d:da:6c:ed:5a:64:81:d6:
                    69:6b:f2:56:32:5b:d7:91:ad:3d:00:65:5a:a7:28:
                    da:c8:f9:f4:3a:1d:b0:d3:6c:33:1d:24:6a:59:c0:
                    a9:03:b2:a1:25:e2:82:37:aa:df:29:d6:8f:42:7c:
                    90:67:7f:7b:ab:63:80:6e:f6:38:09:a1:f2:a4:32:
                    19:66:cc:4d:f8:94:4f:7b:df:14:55:08:f8:c3:d0:
                    54:4a:e0:73:2f:ce:d8:1f:25:b3:e4:63:e6:ec:b5:
                    f0:c0:5a:3c:84:48:a5:bf:ad:a5:5c:cd:81:0d:6c:
                    b1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4E:F9:11:42:C5:E7:F4:6F:43:42:46:D0:F9:64:75:90:E5:A4:48
            X509v3 Authority Key Identifier:
                keyid:7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/7E89C742D551BF248E147A7AC13D94D12B15C8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/323830343a3265383a3a2f33322d3333203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:02:e5:7e:e6:38:b8:57:ab:0d:f6:85:c7:59:36:0e:f2:c3:
         27:12:c6:47:51:fd:15:95:9c:1a:00:fe:39:0d:9f:87:80:3c:
         a6:ee:dc:4f:86:f6:68:f4:dc:ac:02:b9:34:ae:b5:0e:bf:a7:
         fb:c8:14:ce:48:ad:9f:65:65:8f:47:13:b5:40:f3:9f:13:76:
         d9:f2:34:b1:9d:ab:c1:c1:91:05:5b:56:51:3c:71:cc:91:34:
         2b:f4:df:5e:a5:5b:8c:ec:fd:72:f5:b9:94:92:63:6d:31:09:
         fe:c2:0b:03:b4:cb:11:72:da:29:8d:10:33:00:5c:cb:50:5b:
         dd:7f:7c:e7:e9:94:8b:c7:a1:4f:6f:ce:13:09:6e:98:8f:05:
         0f:bd:3e:d2:d5:6b:8d:e5:2f:61:7b:e0:b8:7d:71:3f:d1:87:
         8f:eb:d6:fe:38:cd:3b:2c:d3:12:c6:50:40:89:ec:35:f6:58:
         6d:84:be:94:f3:01:b0:09:34:4e:a0:21:f4:b0:a9:46:f2:d6:
         f4:f3:36:2c:b8:b0:d5:8f:c7:cb:17:f4:f9:d7:31:c3:fe:76:
         ba:2e:46:20:fe:1f:2b:4e:df:b3:55:3b:5d:d5:f5:86:b7:1f:
         7d:cc:e5:93:ff:5c:c0:f8:ca:d2:fc:f6:77:a7:92:4f:06:07:
         2c:e6:a5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----