Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a383030313a3a2f34382d3438203d3e203631363738.roa
File:                     323830343a316364343a383030313a3a2f34382d3438203d3e203631363738.roa (raw, json)
Hash identifier:          GY14N9XXGoBZ7/W5e5GOFhH1XEZf6+DKCNG4XDG1B+E=
Subject key identifier:   3D:F0:96:76:C3:03:76:AB:83:0A:24:90:63:46:CA:71:A8:C1:F7:6B
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       40F75D221394F9B6ECC8D6698F8D8348BE9426E7
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a383030313a3a2f34382d3438203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:43:52 +0000
ROA not before:           Tue 24 Oct 2023 12:38:52 +0000
ROA not after:            Tue 22 Oct 2024 12:43:52 +0000
asID:                     61678
IP address blocks:        2804:1cd4:8001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f7:5d:22:13:94:f9:b6:ec:c8:d6:69:8f:8d:83:48:be:94:26:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:38:52 2023 GMT
            Not After : Oct 22 12:43:52 2024 GMT
        Subject: CN=3DF09676C30376AB830A24906346CA71A8C1F76B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d9:d6:6d:b2:f6:74:67:d6:5e:12:dd:b1:ff:
                    af:c1:81:94:31:a9:fd:45:14:d0:1a:db:84:68:0b:
                    d8:aa:b8:a7:8a:b8:fc:ad:34:d8:b8:b1:d3:bd:8b:
                    3b:56:a4:65:2d:e9:98:b4:52:06:89:45:40:7f:92:
                    cc:93:24:5c:8a:d4:31:55:c3:33:53:55:37:c1:9f:
                    9e:a9:c2:32:c1:18:54:c8:b4:84:43:5a:5d:0f:19:
                    91:fa:bd:bf:d1:6a:f9:d5:a6:53:81:42:cc:f2:31:
                    d2:92:ce:2f:74:ff:25:4a:10:bd:95:b1:3d:c0:c7:
                    bf:53:11:b0:bc:26:37:fd:12:e3:6d:13:69:fd:5e:
                    74:dc:c0:a7:a7:f4:ce:16:cf:6b:f8:fb:a2:95:1b:
                    14:b3:50:cd:b7:04:37:a7:b6:a5:5e:23:85:b7:1d:
                    95:f6:45:7f:8e:6c:4a:a8:03:b7:09:b1:dc:69:97:
                    7b:ad:19:a3:9f:96:52:d4:2a:b7:1a:ad:87:da:17:
                    6b:06:85:df:8d:4d:dd:6d:f6:a0:93:95:31:50:10:
                    21:52:4b:c7:e8:a7:44:be:88:cb:0b:20:1b:6c:ca:
                    97:28:d7:b3:ba:57:3b:ad:80:57:de:72:cd:41:2e:
                    44:d5:4d:39:d0:7e:3f:b3:88:af:aa:9e:8a:0b:c7:
                    dc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F0:96:76:C3:03:76:AB:83:0A:24:90:63:46:CA:71:A8:C1:F7:6B
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a383030313a3a2f34382d3438203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:ab:9f:2f:9a:b0:4c:12:34:7c:e6:b1:63:75:44:01:24:4d:
         62:8b:07:69:49:4a:b7:56:41:c9:e3:9f:4f:fd:4f:18:bc:94:
         72:e4:20:25:1f:ed:5e:44:ef:25:7b:31:38:0c:64:3c:44:0a:
         2a:a0:78:e9:cb:88:a4:23:e0:60:f9:43:14:7e:95:ac:82:68:
         c1:52:5e:8b:50:d3:f3:4b:b1:d1:a5:f7:03:a8:ea:7b:41:1e:
         72:f0:78:ce:5f:4f:9a:95:0f:52:c3:af:bb:10:af:c1:a8:d8:
         df:c4:aa:82:16:4a:ad:51:15:e0:3d:ba:ef:01:9d:98:6c:e3:
         b7:e2:0a:12:bc:42:47:d6:7d:bf:82:f0:e6:aa:dc:c4:69:73:
         21:a9:ca:c0:a9:df:e9:16:84:16:87:64:6d:d5:8a:a6:c4:4f:
         c6:97:35:e3:cb:16:ed:1c:21:e1:e5:b3:6f:db:e0:85:4a:c8:
         33:03:fe:c8:94:9c:18:28:76:01:8b:7f:45:f3:48:ae:13:63:
         d2:36:a0:af:48:fb:c7:c2:45:94:25:a5:cb:a0:83:8e:92:ba:
         cd:35:6a:de:4c:6e:02:b7:33:94:7f:b3:7e:f1:23:cf:5d:33:
         04:05:a9:a3:e7:b3:58:51:0c:3d:24:ee:63:c1:7d:6c:24:ff:
         38:9b:33:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----