Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/323830343a313634633a66613a3a2f34382d3438203d3e20323633323830.roa
File:                     323830343a313634633a66613a3a2f34382d3438203d3e20323633323830.roa (raw, json)
Hash identifier:          2wG5DuO85ssW2JIugpWWvjE/ReSU1P3wzJOizcZbc4Y=
Subject key identifier:   14:25:16:C3:2B:28:6B:A5:0A:65:7A:E0:FD:B8:9B:58:7B:AD:AB:F6
Certificate issuer:       /CN=BDF79EFB23D70999B2F88388D7AC7018CCF52374
Certificate serial:       72EFF48D652EC6BE87804E16F17538430DE39A85
Authority key identifier: BD:F7:9E:FB:23:D7:09:99:B2:F8:83:88:D7:AC:70:18:CC:F5:23:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/323830343a313634633a66613a3a2f34382d3438203d3e20323633323830.roa
Signing time:             Thu 19 Oct 2023 13:28:39 +0000
ROA not before:           Thu 19 Oct 2023 13:23:39 +0000
ROA not after:            Thu 17 Oct 2024 13:28:39 +0000
asID:                     263280
IP address blocks:        2804:164c:fa::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ef:f4:8d:65:2e:c6:be:87:80:4e:16:f1:75:38:43:0d:e3:9a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF79EFB23D70999B2F88388D7AC7018CCF52374
        Validity
            Not Before: Oct 19 13:23:39 2023 GMT
            Not After : Oct 17 13:28:39 2024 GMT
        Subject: CN=142516C32B286BA50A657AE0FDB89B587BADABF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:49:78:d5:c5:18:a2:38:c1:9a:c3:c8:10:
                    42:ca:7e:70:4d:6d:43:b0:4f:24:c7:56:93:bc:d2:
                    e4:64:c2:49:28:f5:aa:6d:b0:a7:68:f3:4d:1b:7e:
                    c4:88:0f:f7:2e:90:f1:43:a6:39:a2:df:27:91:39:
                    87:64:95:24:90:db:99:51:f3:88:61:9d:07:8a:ec:
                    d6:16:df:db:2e:5b:3b:fe:d5:39:2c:48:74:bc:d3:
                    52:31:fc:27:0c:4f:8e:18:5d:a0:64:6f:d7:fd:18:
                    73:91:89:9e:0a:c0:07:29:37:62:5e:ba:69:7d:38:
                    95:92:03:2d:25:63:93:26:55:f4:fb:d5:52:e1:ec:
                    10:7f:7e:1e:28:f7:48:e7:a7:a3:26:fc:75:4e:ab:
                    45:54:a1:57:e6:e9:68:5e:00:bd:ee:07:75:57:2a:
                    75:9e:59:df:6a:6c:41:5a:62:07:ba:06:b1:d2:5b:
                    6e:61:11:6b:08:c8:9a:0b:7c:a4:0f:34:e7:da:3f:
                    84:4f:14:64:99:13:51:d7:2c:20:a8:07:58:c2:84:
                    bc:03:52:52:7b:2e:3b:3e:45:83:46:a2:96:05:3f:
                    56:59:89:72:a8:74:d2:34:94:73:7b:ed:84:89:42:
                    a1:19:f4:e3:98:4c:06:21:10:6c:63:cf:11:f5:83:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:25:16:C3:2B:28:6B:A5:0A:65:7A:E0:FD:B8:9B:58:7B:AD:AB:F6
            X509v3 Authority Key Identifier:
                keyid:BD:F7:9E:FB:23:D7:09:99:B2:F8:83:88:D7:AC:70:18:CC:F5:23:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/323830343a313634633a66613a3a2f34382d3438203d3e20323633323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:164c:fa::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:62:63:50:93:88:63:80:f6:ed:7d:03:6a:0b:ce:50:66:67:
         2f:6a:3b:69:7a:f3:28:c7:bc:a7:2a:83:62:70:9b:f9:dc:91:
         f0:c4:94:69:18:93:d9:f8:83:44:38:8f:06:df:1a:62:4f:18:
         d7:26:84:ad:b7:59:d2:69:9e:b8:f5:ac:5a:e2:bb:a0:c5:9f:
         2a:0d:be:e0:62:8a:2f:2c:26:96:51:62:aa:30:37:f2:b0:75:
         eb:75:70:76:2a:32:68:79:92:d3:73:21:3f:7e:5b:f0:0a:a4:
         f1:61:87:59:22:f9:11:f8:36:4f:b1:fb:ee:f8:4a:81:f9:0e:
         d8:4a:56:c5:87:c7:7a:ac:d3:f6:75:2a:90:2c:fe:c2:63:3f:
         57:c7:87:1d:01:a8:39:d6:6c:8c:3f:3d:9a:ff:dc:fc:4d:35:
         ab:51:c0:de:eb:13:88:93:ce:30:50:ae:7b:32:a0:c9:75:e9:
         b5:32:19:70:94:de:29:04:cd:12:a0:12:85:79:0d:2e:54:d5:
         eb:08:a3:bb:d8:27:97:d9:8e:1b:a3:8e:0b:c9:53:0b:29:87:
         22:1d:6c:68:ce:70:75:ca:b1:27:e9:45:c5:be:82:fa:18:53:
         be:8e:15:8f:c6:16:9a:56:b3:72:a4:3a:97:cf:5e:52:f1:49:
         35:7f:fc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----