Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/323830343a366638633a3a2f33332d3333203d3e20323730363638.roa
File:                     323830343a366638633a3a2f33332d3333203d3e20323730363638.roa (raw, json)
Hash identifier:          9vcvij1myr5qVSZozEiIW47y6S7vYXwKv3HpW4u8u0E=
Subject key identifier:   7D:0D:C8:F8:3D:94:8D:53:01:D3:46:04:C1:F6:14:73:3B:54:DB:88
Certificate issuer:       /CN=070EA8E1952151A5527479507E6D4DB57EAC2C66
Certificate serial:       752A691987059B8B47E058DA596074B72EE17CD0
Authority key identifier: 07:0E:A8:E1:95:21:51:A5:52:74:79:50:7E:6D:4D:B5:7E:AC:2C:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/323830343a366638633a3a2f33332d3333203d3e20323730363638.roa
Signing time:             Wed 22 Nov 2023 13:43:42 +0000
ROA not before:           Wed 22 Nov 2023 13:38:42 +0000
ROA not after:            Wed 20 Nov 2024 13:43:42 +0000
asID:                     270668
IP address blocks:        2804:6f8c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2a:69:19:87:05:9b:8b:47:e0:58:da:59:60:74:b7:2e:e1:7c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070EA8E1952151A5527479507E6D4DB57EAC2C66
        Validity
            Not Before: Nov 22 13:38:42 2023 GMT
            Not After : Nov 20 13:43:42 2024 GMT
        Subject: CN=7D0DC8F83D948D5301D34604C1F614733B54DB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:96:2d:b0:7a:b1:c8:50:4a:97:66:bd:38:6a:
                    51:0d:55:d0:8c:a4:c5:35:ff:43:60:4e:42:14:a3:
                    d2:ee:fb:09:db:15:82:f3:7d:c3:68:7c:48:f5:ac:
                    00:29:7d:37:a3:2f:13:e2:e1:56:60:ed:40:74:da:
                    fe:99:a0:77:2d:c2:82:5f:07:2d:b8:02:fb:e4:f6:
                    c8:a0:a3:23:98:98:aa:bc:4c:55:4d:9e:3f:cb:d7:
                    ab:3e:5a:a6:13:9a:a2:7b:b4:52:39:bf:a7:f7:61:
                    1d:75:e2:cb:61:8d:e4:2e:56:e3:0d:e9:bd:c9:e6:
                    6b:03:de:c4:30:d1:65:55:30:6f:de:91:24:88:53:
                    e1:43:82:fc:cd:89:97:3a:d4:3d:9b:22:6f:1f:c7:
                    50:7f:29:cb:65:10:04:79:0f:f8:a7:46:45:7a:49:
                    d1:b7:94:d7:5a:a9:0e:9d:ea:c8:ba:80:37:43:27:
                    74:4b:74:d0:35:1b:8a:9d:9b:e0:23:15:03:e8:d3:
                    e3:09:09:33:2c:11:dd:63:b8:06:27:db:00:1a:57:
                    d2:e1:99:0b:ca:cd:a1:f7:3b:13:b1:35:a8:fc:89:
                    ea:8a:2d:2f:66:f4:61:3c:7c:d3:40:d8:dd:b1:82:
                    af:80:f1:c0:08:39:58:d2:01:6a:51:f5:d3:0f:fc:
                    54:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0D:C8:F8:3D:94:8D:53:01:D3:46:04:C1:F6:14:73:3B:54:DB:88
            X509v3 Authority Key Identifier:
                keyid:07:0E:A8:E1:95:21:51:A5:52:74:79:50:7E:6D:4D:B5:7E:AC:2C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/323830343a366638633a3a2f33332d3333203d3e20323730363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f8c::/33

    Signature Algorithm: sha256WithRSAEncryption
         59:bb:40:86:f4:e3:fe:78:64:31:9e:7c:f1:e1:4e:33:cb:68:
         9a:ad:16:c3:1b:72:ff:f3:1f:9f:b7:a5:70:b4:07:18:7a:87:
         47:99:50:ac:dd:45:86:8f:ca:60:e1:3c:cb:a3:81:85:3b:72:
         a4:eb:b6:c1:4c:0e:44:27:e1:d2:cd:db:56:46:ae:58:5d:78:
         18:2f:de:d2:13:42:06:42:de:0f:65:08:4f:c4:f1:62:8b:4a:
         ab:ab:af:4b:43:f2:02:23:69:09:f4:e8:d7:53:d1:34:0b:a6:
         1a:b6:82:5c:91:3b:7a:d7:69:42:38:87:43:e5:26:da:a4:a0:
         81:4b:84:7f:37:56:90:1e:d2:cd:13:f0:fa:d8:b9:4f:42:00:
         ce:cf:1a:47:8c:60:92:0b:45:55:c2:f5:01:3b:bb:bc:92:a1:
         82:13:00:a7:8b:9a:71:fe:5f:5c:07:87:cb:cf:ad:7f:42:89:
         3b:8b:6b:02:72:8d:bc:61:40:6c:dc:8c:52:79:da:e1:23:f2:
         98:eb:9e:08:0b:a7:14:7c:54:4e:0b:cb:18:d4:95:23:26:0f:
         db:80:8d:bc:57:46:0e:d7:ad:74:0d:b7:e7:91:57:56:c4:47:
         15:ef:f4:11:67:6e:23:f0:5b:ab:50:6c:eb:0e:d3:d0:b3:98:
         a5:eb:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----