Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/323830343a333164633a343030303a3a2f33342d3334203d3e20323635303431.roa
File:                     323830343a333164633a343030303a3a2f33342d3334203d3e20323635303431.roa (raw, json)
Hash identifier:          LLEWv8SjcrfvPTcsIitJ2sRnK1UuZTLYx3GEsKbdc7w=
Subject key identifier:   17:3B:61:C2:D7:09:9F:AC:B6:1E:C0:54:70:19:2C:B2:EF:AE:CC:57
Certificate issuer:       /CN=37834545A38892C3FF1B7141126084730A12B7AC
Certificate serial:       2BF8290AAEDA569386837A56D509C683A783F3C0
Authority key identifier: 37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/323830343a333164633a343030303a3a2f33342d3334203d3e20323635303431.roa
Signing time:             Wed 25 Oct 2023 19:26:39 +0000
ROA not before:           Wed 25 Oct 2023 19:21:39 +0000
ROA not after:            Wed 23 Oct 2024 19:26:39 +0000
asID:                     265041
IP address blocks:        2804:31dc:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f8:29:0a:ae:da:56:93:86:83:7a:56:d5:09:c6:83:a7:83:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37834545A38892C3FF1B7141126084730A12B7AC
        Validity
            Not Before: Oct 25 19:21:39 2023 GMT
            Not After : Oct 23 19:26:39 2024 GMT
        Subject: CN=173B61C2D7099FACB61EC05470192CB2EFAECC57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:fa:62:04:67:91:e7:82:3a:f1:f8:55:b8:
                    58:d2:b9:2e:2e:0f:5c:76:71:6e:7f:fb:8a:2e:6e:
                    3c:81:38:8a:8b:a5:22:87:76:90:cf:26:e3:8f:b4:
                    00:b8:3b:05:b1:d9:e9:75:cf:61:1c:3a:c2:09:66:
                    37:e5:fa:f6:ed:49:1e:06:58:6e:dc:95:22:b1:0d:
                    d8:ad:7e:83:38:0d:5a:fc:86:fd:df:21:6c:12:d0:
                    27:de:cf:3f:8e:52:5d:7e:38:ae:5c:ea:f2:b5:5b:
                    5a:78:2c:28:38:0d:2e:29:2b:65:9c:b7:12:ef:9c:
                    b0:d7:31:1f:2e:53:bd:46:00:98:87:5c:e9:10:c4:
                    e3:2c:a8:a1:84:17:7d:08:2b:c6:38:b7:37:bb:db:
                    58:46:66:44:ff:c8:26:36:f4:28:54:05:fa:95:81:
                    7e:a7:4d:5e:2d:c2:33:5b:b6:5c:10:f4:ab:02:f5:
                    13:61:eb:b7:c3:e0:a9:f8:c6:b7:61:71:de:0e:43:
                    04:cc:fd:e3:6c:2b:28:ed:34:cf:92:92:ed:2e:a3:
                    93:f3:4d:c6:74:9d:4f:6b:79:90:f2:1e:b6:7d:11:
                    3c:c9:e4:7d:f9:c6:aa:34:bd:4e:d6:7f:54:75:7b:
                    47:27:b9:bd:9e:f3:9d:11:53:21:61:12:3a:3f:39:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3B:61:C2:D7:09:9F:AC:B6:1E:C0:54:70:19:2C:B2:EF:AE:CC:57
            X509v3 Authority Key Identifier:
                keyid:37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/37834545A38892C3FF1B7141126084730A12B7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/323830343a333164633a343030303a3a2f33342d3334203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31dc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7a:52:93:7e:da:08:b8:6b:e9:d0:e5:c2:6b:cc:41:7d:8c:ae:
         78:96:a7:07:51:aa:d1:99:fd:88:1d:62:2e:fd:af:43:1b:24:
         c3:4a:5e:8e:24:2b:e7:9c:47:fb:49:90:2b:9b:bf:e8:7b:28:
         8d:52:a5:d8:ee:9b:b0:31:bc:72:1b:82:0c:e4:d7:5c:27:82:
         03:6a:bb:ad:bc:e8:50:36:4c:d9:53:f4:63:7e:87:5f:a4:d6:
         32:c3:59:a3:5a:4a:a8:14:38:31:e3:ee:38:5c:7c:1b:af:72:
         8d:8c:10:bf:84:28:aa:ff:9c:60:fd:8f:3e:d9:77:5d:86:c3:
         54:eb:8c:fa:b3:78:eb:db:a3:8c:7d:6d:58:45:5a:a5:05:7c:
         6a:52:b1:f5:ff:83:0f:f3:04:74:76:79:c3:1a:bc:d2:c9:5e:
         e1:61:82:fb:57:80:aa:df:b3:85:23:b4:a0:5f:d8:6b:1b:0e:
         80:b9:ce:5b:c6:0c:f8:11:b1:f2:91:9c:9d:df:19:d3:1b:75:
         d4:e5:cd:0e:30:10:5f:3a:37:da:99:d9:37:df:bc:3c:8c:37:
         43:bb:f4:95:73:bd:8c:6f:83:1b:a3:94:7e:41:79:0d:66:dd:
         f7:55:56:e3:b6:7a:a8:49:c4:85:89:02:86:60:d8:47:5c:7a:
         c6:08:fd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----