Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a343030303a3a2f33342d3334203d3e20323635313735.roa
File:                     323830343a326263383a343030303a3a2f33342d3334203d3e20323635313735.roa (raw, json)
Hash identifier:          Vc3Uk/N7o/h3NZdtqhO0NX3vpxmBrFsh2qCaeHPNcWc=
Subject key identifier:   D3:46:6A:D4:49:C5:DE:3B:5E:C9:DA:00:2B:E3:2D:28:2C:81:D9:1D
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       405B6AF52E25FEDD8A3450C4AB2A0871C99ACEE3
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a343030303a3a2f33342d3334203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:46:00 +0000
ROA not before:           Sun 31 Dec 2023 15:41:00 +0000
ROA not after:            Sun 29 Dec 2024 15:46:00 +0000
asID:                     265175
IP address blocks:        2804:2bc8:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5b:6a:f5:2e:25:fe:dd:8a:34:50:c4:ab:2a:08:71:c9:9a:ce:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:41:00 2023 GMT
            Not After : Dec 29 15:46:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:63:9e:41:1f:a4:f5:04:ab:45:42:1c:fb:
                    59:64:f6:64:6b:06:48:eb:ae:bd:b5:ac:92:4a:2b:
                    be:2c:c1:50:37:e6:42:06:b6:58:10:7e:2f:39:94:
                    cf:68:91:61:e5:36:60:f0:a9:ae:62:dc:d4:f6:e4:
                    8c:2e:ad:0f:dd:67:10:39:4b:d9:8d:10:5c:8c:2c:
                    d6:18:3d:9b:5b:23:d7:15:5a:9c:38:f9:16:9b:56:
                    ae:6a:a0:11:f5:91:12:4b:fd:4a:19:03:6d:98:41:
                    74:1e:e1:66:7c:fc:2a:31:f1:fc:b1:a8:cd:04:a4:
                    1e:d0:8b:af:c2:69:49:a6:cd:9e:b3:57:15:d2:f3:
                    80:68:80:c3:19:03:3e:20:81:6a:ad:ec:0f:de:0f:
                    b8:75:e9:31:07:6a:6c:40:a1:8e:a4:e8:67:ee:09:
                    04:f6:4c:78:2c:12:15:f2:b4:b3:81:19:0b:5a:42:
                    7a:20:e7:6b:8a:ea:e2:bd:99:8f:34:66:8b:33:4b:
                    ad:c9:0a:1d:65:64:28:12:ef:80:b6:0d:5b:82:16:
                    be:6d:f6:e8:c5:e5:7d:2d:d0:87:4b:ac:b8:d7:b7:
                    9b:e4:93:bc:a0:04:fb:dd:b9:68:a3:04:c9:31:51:
                    df:d9:85:2c:04:10:ba:b8:fd:35:45:98:cc:18:41:
                    c2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:46:6A:D4:49:C5:DE:3B:5E:C9:DA:00:2B:E3:2D:28:2C:81:D9:1D
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a343030303a3a2f33342d3334203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         24:24:71:5a:84:e9:fe:bc:98:6d:8c:d9:21:ec:cc:b0:e0:8b:
         56:95:d1:69:90:5e:83:e6:7e:44:f4:94:53:44:ab:88:6a:a2:
         5f:d5:5c:85:ff:03:89:d9:05:36:06:ba:0c:b9:d2:ae:35:74:
         40:84:7c:9a:b8:d5:b6:91:51:16:a3:f1:70:fa:ed:fd:59:51:
         95:da:11:d0:80:ed:11:f8:c0:76:46:f5:db:f5:e2:bf:42:f6:
         49:41:a3:9f:6c:ee:09:19:be:df:94:a2:15:cd:9f:1d:76:d0:
         6a:53:db:82:83:7c:91:be:11:4a:a8:f6:e8:d9:a1:29:1c:6b:
         35:f9:09:be:1c:3e:25:35:5f:a5:14:72:96:49:ae:94:ba:0a:
         91:35:0b:ee:25:72:be:c3:9b:8a:4c:8b:60:e0:0a:b6:5a:9b:
         60:23:8f:b2:ef:42:0f:77:88:47:18:f1:df:68:8e:d9:92:71:
         b1:ee:b3:5b:b1:59:70:22:34:b3:04:2b:cc:a6:8c:f6:f1:a8:
         31:66:93:d8:a0:b0:46:57:18:5c:56:c1:fc:d8:0e:a0:f9:6b:
         ed:6b:93:ac:09:b8:47:17:8b:5b:82:54:bb:9b:55:04:8a:43:
         53:94:62:d4:3e:52:41:be:d7:c2:fd:61:76:6e:2d:11:26:b8:
         a2:2d:1a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----