Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a363030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a363030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          pQ3L4KbDeZ04KB67grx6+vw8iMBqnXRXzfcZll1V/MU=
Subject key identifier:   35:B2:69:3C:3E:F2:B8:35:E6:26:61:47:25:F3:31:A3:27:98:DE:C8
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       0839FC5FC39A0311E67BDF169AB75C8EB915212B
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a363030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:44:00 +0000
ROA not before:           Sun 31 Dec 2023 15:39:00 +0000
ROA not after:            Sun 29 Dec 2024 15:44:00 +0000
asID:                     265175
IP address blocks:        2804:2bc8:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:39:fc:5f:c3:9a:03:11:e6:7b:df:16:9a:b7:5c:8e:b9:15:21:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:39:00 2023 GMT
            Not After : Dec 29 15:44:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:e9:9a:9d:ad:f9:f9:66:0e:cd:73:12:51:
                    a8:53:0f:58:e3:f1:16:43:d8:03:3f:26:f2:07:ee:
                    20:1e:23:f8:bb:3f:7f:4d:c1:c7:03:3f:a5:29:74:
                    6e:99:20:70:3e:d1:57:0d:67:85:c6:bd:36:81:24:
                    81:af:04:60:10:71:0a:ca:57:f7:71:9d:49:45:81:
                    ca:26:86:26:75:5a:0b:ed:5f:07:2b:9a:c1:e1:1d:
                    fe:0e:49:e9:cc:47:f7:c4:d6:f0:5e:c5:08:7d:98:
                    84:29:ef:26:75:6e:38:bf:f0:25:ce:e5:d7:7e:08:
                    47:94:c1:98:1a:14:41:97:65:0a:01:24:24:3b:1c:
                    21:2c:37:26:28:98:3f:7d:4d:4b:87:0c:48:11:55:
                    26:65:2c:da:d8:88:35:f7:c8:e0:3e:9f:71:a3:ba:
                    86:ee:c2:ca:b0:8c:19:52:a2:ca:f3:e7:f1:cc:6b:
                    5e:45:cd:d0:c6:d6:74:9d:8c:a7:a7:76:09:77:c6:
                    26:91:46:22:e9:52:71:4b:24:e2:ff:b6:34:43:58:
                    60:12:b2:6b:2a:34:7f:45:ce:ca:70:7f:d7:ad:cf:
                    40:81:0f:18:af:5c:ee:4d:cc:fb:f2:42:05:01:07:
                    c9:95:f8:a9:3f:48:0d:2d:4f:7f:8d:6e:c0:e8:8e:
                    47:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B2:69:3C:3E:F2:B8:35:E6:26:61:47:25:F3:31:A3:27:98:DE:C8
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a363030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         52:f1:03:5f:a1:f4:e6:b7:44:a2:10:52:8e:29:e3:16:63:e0:
         62:ee:db:bf:09:23:66:01:03:cb:0d:2d:35:a4:f9:34:ac:fa:
         b8:3b:48:98:a4:85:f6:73:2c:e4:79:0b:f5:3f:61:fa:22:17:
         16:7a:98:0e:47:12:80:2e:7e:72:6b:b3:e1:d6:ca:21:b1:d7:
         63:a6:6d:56:60:f5:fe:54:43:3e:7e:7a:82:b4:8a:a3:91:19:
         4f:68:23:5b:14:ef:95:5d:18:4c:cf:ba:e5:11:39:53:79:29:
         42:91:90:ce:b7:d3:79:a6:80:17:34:b9:b1:42:42:41:3d:02:
         44:a9:b2:61:de:67:15:b8:7b:da:81:4a:d5:12:62:75:9f:ac:
         7d:f0:7a:34:7d:3f:67:e9:ea:09:b2:5a:cc:65:9b:5d:03:a0:
         65:bd:f0:75:9c:06:49:02:ee:86:a0:f5:f6:d6:dc:ad:fb:5d:
         73:3c:5c:fc:2e:80:1d:8b:32:d2:32:98:7a:f0:c6:bd:34:42:
         4a:b6:19:26:b3:74:cf:8e:59:17:95:59:e9:6a:a3:c8:cf:aa:
         fe:c6:76:e4:07:ec:d0:48:bc:28:9a:a2:30:4e:99:3b:2a:2c:
         8b:d3:f9:75:bf:bc:74:67:52:97:b4:f2:ee:85:4f:7e:40:35:
         00:4c:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----