Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a383030303a3a2f33342d3334203d3e20323634353839.roa
File:                     323830343a323231303a383030303a3a2f33342d3334203d3e20323634353839.roa (raw, json)
Hash identifier:          8R9zdd5NEynCoCH5KlhwMhm30rXQLnxFuvCswDGvAQQ=
Subject key identifier:   07:B2:CB:48:E5:C5:A1:CC:DE:AE:6F:D6:A5:DF:C6:EF:A1:40:73:41
Certificate issuer:       /CN=9AB232D2E2328522F328939E61A9457DA0361AF1
Certificate serial:       340BB23AF80878BF1FD8B1B1124ABCBDBBB85216
Authority key identifier: 9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a383030303a3a2f33342d3334203d3e20323634353839.roa
Signing time:             Fri 23 Jun 2023 19:06:39 +0000
ROA not before:           Fri 23 Jun 2023 19:01:39 +0000
ROA not after:            Fri 21 Jun 2024 19:06:39 +0000
asID:                     264589
IP address blocks:        2804:2210:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0b:b2:3a:f8:08:78:bf:1f:d8:b1:b1:12:4a:bc:bd:bb:b8:52:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AB232D2E2328522F328939E61A9457DA0361AF1
        Validity
            Not Before: Jun 23 19:01:39 2023 GMT
            Not After : Jun 21 19:06:39 2024 GMT
        Subject: CN=07B2CB48E5C5A1CCDEAE6FD6A5DFC6EFA1407341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2f:c0:ce:67:f8:e5:8f:44:08:71:2b:fc:2a:
                    e6:d8:32:51:11:da:be:ab:d0:94:19:37:68:98:5f:
                    aa:da:c7:7b:28:64:ea:cd:22:7b:f8:a7:df:c9:58:
                    6b:07:8e:57:d2:0f:62:ef:2f:d8:d3:0a:e0:af:bf:
                    20:09:9f:65:2a:d1:02:b0:16:c1:22:dd:6d:41:db:
                    66:61:a4:7f:37:d1:fc:d2:e6:40:d8:24:ed:7c:ec:
                    da:51:c2:e5:f7:68:57:bc:c2:7b:34:13:e1:89:df:
                    e9:d5:40:62:f3:ed:61:49:0a:a8:b8:26:ef:d5:80:
                    8e:10:c2:5b:a9:c9:af:cd:09:61:f2:21:3f:56:5c:
                    53:dc:17:b1:94:01:09:03:f9:0b:ed:bd:db:02:33:
                    fa:38:71:b8:a2:e2:54:55:f8:5a:e6:a4:84:67:ec:
                    04:1c:9f:72:1d:6c:79:28:22:07:a5:67:a4:7b:43:
                    cb:15:a0:11:48:46:06:69:90:c1:76:47:4b:55:b2:
                    c2:c1:c3:54:8a:3a:8a:44:4d:7f:6a:49:de:16:80:
                    3a:0f:ea:93:c8:d5:08:d5:7a:30:ab:68:65:43:d2:
                    a0:93:aa:34:a0:21:b0:64:e4:60:43:5c:ca:1c:63:
                    a8:cb:81:e5:d7:28:7f:2d:92:89:55:d5:73:a1:cd:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B2:CB:48:E5:C5:A1:CC:DE:AE:6F:D6:A5:DF:C6:EF:A1:40:73:41
            X509v3 Authority Key Identifier:
                keyid:9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/9AB232D2E2328522F328939E61A9457DA0361AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a383030303a3a2f33342d3334203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2210:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:a0:28:9a:d1:4f:bf:57:b5:c4:7f:82:a6:1e:75:4d:8e:b2:
         40:4e:94:74:2f:ed:7b:55:ee:25:ee:be:03:9d:3f:a3:f3:f7:
         44:e2:da:70:6c:f7:7a:9b:c0:b8:c2:d1:68:dd:fc:f8:5f:20:
         03:19:04:3f:29:e3:25:80:63:80:c2:5f:20:92:89:c1:c4:63:
         92:3e:2a:7e:73:9f:11:67:b6:b3:c6:ea:e1:ab:37:33:d8:71:
         f6:ae:f4:8b:de:30:e0:eb:6f:01:4f:7a:2a:85:3a:2b:0c:3d:
         2a:55:f8:3c:84:08:06:b5:58:9a:34:42:12:6d:43:ef:16:04:
         ef:6b:b9:40:8e:75:49:b4:57:5d:0b:84:a7:92:b0:9b:09:31:
         fe:e3:29:88:6c:c5:3f:38:d4:5c:81:cf:e0:68:b9:fc:e0:73:
         8b:8d:bc:b3:9b:1c:e4:80:dc:f8:d0:ae:a8:e7:64:2d:52:4d:
         5e:a2:f0:e9:3e:e4:e7:e5:25:14:d9:69:07:74:92:32:4a:12:
         de:3e:27:76:d1:11:f4:d5:b0:a6:c6:02:e5:a8:7b:b0:0e:a6:
         9c:d7:cb:67:98:05:75:de:e0:d8:65:e0:89:e9:8d:fa:dd:45:
         6d:86:67:23:2a:4a:67:72:07:28:8f:52:9a:16:4e:fa:37:7b:
         15:d5:d2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----