Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/323830343a383833633a313430303a3a2f34302d3430203d3e20323732373538.roa
File:                     323830343a383833633a313430303a3a2f34302d3430203d3e20323732373538.roa (raw, json)
Hash identifier:          4CV2/n7LpVN1s3n5hjS2lmo59JgjvVQXmLl85xZxpqI=
Subject key identifier:   CD:FE:F3:3B:BE:B7:B6:9F:B6:71:9D:14:19:B1:6F:09:51:13:1B:8A
Certificate issuer:       /CN=E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631
Certificate serial:       0B9547FE85E7A031E9B841D4E2A2A0156970B9A7
Authority key identifier: E9:CF:EC:E0:D0:D2:F4:78:E7:4F:51:A1:BA:EA:88:E2:F2:4B:36:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/323830343a383833633a313430303a3a2f34302d3430203d3e20323732373538.roa
Signing time:             Mon 11 Sep 2023 11:15:26 +0000
ROA not before:           Mon 11 Sep 2023 11:10:26 +0000
ROA not after:            Mon 09 Sep 2024 11:15:26 +0000
asID:                     272758
IP address blocks:        2804:883c:1400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:95:47:fe:85:e7:a0:31:e9:b8:41:d4:e2:a2:a0:15:69:70:b9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631
        Validity
            Not Before: Sep 11 11:10:26 2023 GMT
            Not After : Sep  9 11:15:26 2024 GMT
        Subject: CN=CDFEF33BBEB7B69FB6719D1419B16F0951131B8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:5f:5d:ae:6b:14:ad:b9:85:b8:b2:b2:a6:
                    4a:ad:2a:f4:81:e0:62:88:3c:94:74:14:de:ef:98:
                    b0:aa:57:6f:5e:a7:2a:9d:59:35:1e:0b:e9:8f:e2:
                    de:9a:c3:72:ae:fa:5d:e9:b4:8f:a0:44:f0:f1:67:
                    da:94:fb:97:30:ae:a1:e0:0b:56:a8:b1:19:71:7a:
                    8e:97:44:7d:96:38:6d:81:c5:32:84:60:2d:f6:b0:
                    e8:1a:ee:e1:da:58:ab:c6:5d:0f:b9:a3:ce:48:bd:
                    21:a9:19:aa:39:45:33:3c:cd:c2:89:9b:87:77:56:
                    d6:64:65:26:dd:67:5f:a1:30:84:fd:59:a3:4a:1f:
                    9c:95:04:42:65:92:79:e4:6d:df:f8:e6:ab:70:ae:
                    7c:9c:32:12:fe:f0:c8:86:57:3c:3f:ed:07:dc:47:
                    24:ba:27:e6:db:9e:f2:03:f9:a1:a8:ac:af:e7:e8:
                    19:32:06:05:1a:ce:e4:51:f0:64:78:5b:09:a7:c2:
                    00:55:53:48:f9:4f:f2:fe:e0:90:90:8b:e6:6f:86:
                    04:96:9a:cc:2b:4c:91:a2:79:f7:16:f8:ed:b9:34:
                    03:38:02:81:2e:33:bf:41:3c:5e:cd:23:28:50:30:
                    07:8b:5d:ca:34:b4:ce:53:eb:55:b8:f0:10:47:2c:
                    fe:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FE:F3:3B:BE:B7:B6:9F:B6:71:9D:14:19:B1:6F:09:51:13:1B:8A
            X509v3 Authority Key Identifier:
                keyid:E9:CF:EC:E0:D0:D2:F4:78:E7:4F:51:A1:BA:EA:88:E2:F2:4B:36:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/323830343a383833633a313430303a3a2f34302d3430203d3e20323732373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:883c:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:29:0f:a0:b3:08:6b:e0:3d:cb:3e:25:c7:12:72:d2:87:a7:
         d5:4e:74:5f:f5:e3:e5:93:75:67:e3:a3:50:ec:6d:75:7e:d2:
         78:e1:08:a8:9c:a9:ab:09:3c:b1:b6:10:c7:5f:ab:69:0d:c1:
         99:86:1a:88:9c:24:b8:98:17:7f:f5:9f:05:bd:69:a4:a8:fc:
         c6:37:7d:21:fe:3e:5c:51:47:83:97:2f:da:db:23:1c:8b:be:
         85:5b:b1:12:d7:91:de:d8:69:58:00:d0:80:79:74:af:25:a1:
         0b:07:13:06:14:07:81:59:53:82:78:e4:6f:5a:24:78:3b:ce:
         bd:22:39:38:b9:09:09:2e:ed:76:c1:0a:4f:fd:ea:6c:56:45:
         12:3a:b6:e2:0a:d6:26:4a:12:a6:3e:9f:ed:fc:e6:87:d3:66:
         af:17:fe:c9:de:c4:6b:a7:23:4a:af:c8:8d:8b:e7:63:b5:53:
         4a:97:a8:f6:3a:bf:c0:71:9f:e4:86:4a:d3:c8:15:7a:c8:b2:
         f2:56:d3:f4:86:66:28:57:5b:02:41:8c:30:3c:d5:0e:66:53:
         f7:83:e3:1b:c4:ad:6f:e0:b7:6e:44:f8:bb:58:d1:19:70:79:
         54:03:18:b4:44:9b:af:4b:44:fa:a1:6b:3d:49:2b:62:c1:c0:
         0d:90:25:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----