Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/0/323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa
File:                     323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa (raw, json)
Hash identifier:          lfAyUsJfR3xjLPOUB+t5TE1LCaB+KQ14dNZMu0wwXqY=
Subject key identifier:   65:A8:72:02:2C:B4:7C:12:5C:55:57:83:A6:5D:74:DF:AA:9C:98:CD
Certificate issuer:       /CN=939B51FB589E6066A78E9724A2F8D81B339948CB
Certificate serial:       0C98B1C694EC56512C5FDAEF956F6C7C74C42C49
Authority key identifier: 93:9B:51:FB:58:9E:60:66:A7:8E:97:24:A2:F8:D8:1B:33:99:48:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/939B51FB589E6066A78E9724A2F8D81B339948CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/0/323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa
Signing time:             Tue 14 Nov 2023 19:31:51 +0000
ROA not before:           Tue 14 Nov 2023 19:26:51 +0000
ROA not after:            Tue 12 Nov 2024 19:31:51 +0000
asID:                     272792
IP address blocks:        2804:88c4:fc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:98:b1:c6:94:ec:56:51:2c:5f:da:ef:95:6f:6c:7c:74:c4:2c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=939B51FB589E6066A78E9724A2F8D81B339948CB
        Validity
            Not Before: Nov 14 19:26:51 2023 GMT
            Not After : Nov 12 19:31:51 2024 GMT
        Subject: CN=65A872022CB47C125C555783A65D74DFAA9C98CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:9a:cf:27:70:49:bb:21:93:ec:95:1a:08:
                    b4:44:3c:7b:99:52:8f:c7:3f:44:94:00:09:97:40:
                    a7:25:9b:5d:2b:29:7d:06:8d:0e:21:d8:a2:7f:02:
                    ad:65:82:cf:7a:9f:96:31:74:ea:4e:0b:51:d6:78:
                    59:99:30:18:5e:13:49:2c:99:5d:99:b9:b1:8b:98:
                    f2:fe:d5:db:fc:3e:53:8c:78:33:9c:55:6f:5d:98:
                    3b:95:21:cc:9f:02:5a:d1:19:a0:cd:76:b8:11:cc:
                    3d:06:fe:22:56:a2:fc:19:11:c3:31:31:79:d9:79:
                    f0:7d:0d:4c:20:2d:59:af:41:4c:c0:06:5b:c2:de:
                    d9:17:ef:e8:94:0e:82:c1:34:fe:5c:43:8d:0f:6e:
                    5c:75:41:b4:e4:62:6e:03:a9:ee:e4:99:55:b0:2e:
                    31:d5:f7:e3:7d:85:e0:cc:2a:ba:cd:26:2b:cb:9f:
                    f4:98:9b:69:17:93:46:61:d2:46:9f:23:48:13:78:
                    47:b3:1e:02:22:ef:d0:5e:27:db:f8:19:04:b4:3e:
                    52:d1:0a:86:1c:dd:d1:3e:b4:ea:7f:93:02:93:4a:
                    1b:c0:2e:65:47:51:0c:eb:11:cc:4d:aa:69:22:ac:
                    10:ea:71:a8:0a:af:1f:04:b3:43:c4:79:da:26:d6:
                    e1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A8:72:02:2C:B4:7C:12:5C:55:57:83:A6:5D:74:DF:AA:9C:98:CD
            X509v3 Authority Key Identifier:
                keyid:93:9B:51:FB:58:9E:60:66:A7:8E:97:24:A2:F8:D8:1B:33:99:48:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/0/939B51FB589E6066A78E9724A2F8D81B339948CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/939B51FB589E6066A78E9724A2F8D81B339948CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/0/323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88c4:fc::/48

    Signature Algorithm: sha256WithRSAEncryption
         de:32:ea:c3:d4:1f:ec:fb:d6:ac:f1:37:15:1b:2a:b2:59:e6:
         fc:ab:9f:73:21:81:a2:6b:b9:92:62:22:3c:3d:70:43:bd:65:
         93:18:e1:d1:60:8c:fb:2b:b4:8b:74:58:34:a2:88:45:7c:f5:
         71:e5:c9:17:13:ec:0a:e9:10:b6:b9:1b:72:e2:a9:dd:aa:3e:
         7d:e9:6c:47:f8:0e:9d:d4:29:e8:77:03:12:d9:8a:ad:f5:c0:
         bd:b7:88:38:cf:34:51:09:4a:e5:24:57:16:57:4c:47:a9:f7:
         20:df:f8:f1:6e:32:83:57:7f:b9:4e:52:3c:01:31:15:7e:af:
         ee:a7:a8:d7:fa:b6:b3:c8:eb:63:97:98:93:a7:77:20:6c:f5:
         e8:b8:9e:0a:43:35:04:41:70:b7:e6:75:24:da:00:51:0b:54:
         67:65:0f:39:96:35:0d:43:22:e3:f1:48:54:b7:48:4a:3a:b0:
         44:d1:c4:8f:45:27:c8:4f:3f:9b:fc:d9:f7:30:9f:14:0f:bf:
         a0:29:1b:ef:28:c0:77:24:1c:54:28:99:1a:05:d5:86:47:e6:
         1c:09:76:67:de:de:2c:75:a0:57:8f:64:05:62:11:48:39:fa:
         6e:5e:01:02:fa:7d:38:a8:54:32:cc:85:81:fb:ae:9a:1b:0c:
         bb:37:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----