Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a3a2f33332d3333203d3e20323731313137.roa
File:                     323830343a373638343a3a2f33332d3333203d3e20323731313137.roa (raw, json)
Hash identifier:          6MiTjJZlqqmCI98TLuM5X7F2x06413w8KPn7YjP9r9g=
Subject key identifier:   C3:F2:86:A4:EF:D9:5E:57:36:6C:25:84:F3:E0:61:FA:BF:5E:F4:FA
Certificate issuer:       /CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
Certificate serial:       12A9412C86B9BF6F9B589EFE4B3EF0D05AA04494
Authority key identifier: F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a3a2f33332d3333203d3e20323731313137.roa
Signing time:             Mon 21 Aug 2023 22:52:13 +0000
ROA not before:           Mon 21 Aug 2023 22:47:13 +0000
ROA not after:            Mon 19 Aug 2024 22:52:13 +0000
asID:                     271117
IP address blocks:        2804:7684::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a9:41:2c:86:b9:bf:6f:9b:58:9e:fe:4b:3e:f0:d0:5a:a0:44:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
        Validity
            Not Before: Aug 21 22:47:13 2023 GMT
            Not After : Aug 19 22:52:13 2024 GMT
        Subject: CN=C3F286A4EFD95E57366C2584F3E061FABF5EF4FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fa:f9:ec:9a:cd:e3:c1:b0:9c:65:3e:f0:c4:
                    12:b8:f4:c1:31:45:0c:df:41:f3:cf:5a:bf:81:ce:
                    cb:29:99:93:d2:52:f2:83:18:21:36:1b:8f:d0:8f:
                    80:5a:2b:c8:d5:d8:b9:ed:11:e0:3d:52:36:b6:0b:
                    66:b6:42:0b:0c:ed:93:aa:9e:5b:90:04:f0:31:76:
                    f9:96:8b:39:7b:a6:7f:ff:00:a0:b2:20:a1:48:a5:
                    cf:41:ef:09:c1:d2:4e:7e:dd:57:36:6b:35:f5:65:
                    80:cc:70:1b:07:b5:6a:63:34:76:87:ca:00:48:00:
                    93:df:a9:17:71:e5:91:2a:fd:f5:1a:dc:67:a0:03:
                    6a:c4:e5:fd:47:6e:1f:82:ef:ce:2d:1e:bc:7e:7a:
                    86:70:ec:a2:70:1a:3e:d2:b9:07:82:85:11:0b:e7:
                    b6:3c:a1:bc:0f:fa:87:88:0e:d7:05:29:86:78:f9:
                    58:d3:2a:bd:47:b9:5a:f2:55:ce:22:44:a9:41:80:
                    53:0f:f8:16:a8:5b:90:18:05:64:56:29:70:32:dd:
                    06:b8:58:c8:f7:18:b2:fc:fc:c8:ea:ac:01:6a:35:
                    65:3d:48:fc:4a:07:13:1a:6d:58:79:e2:43:9d:cd:
                    e6:c5:80:fc:f6:16:74:b7:43:ce:24:b2:fb:79:a9:
                    2f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F2:86:A4:EF:D9:5E:57:36:6C:25:84:F3:E0:61:FA:BF:5E:F4:FA
            X509v3 Authority Key Identifier:
                keyid:F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a3a2f33332d3333203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684::/33

    Signature Algorithm: sha256WithRSAEncryption
         6f:15:3f:e6:e4:be:01:19:11:98:f2:ec:09:88:ef:ae:31:45:
         20:6d:94:89:f1:11:d8:f0:b8:52:77:24:4f:7b:a3:27:23:61:
         4e:bc:2f:e2:02:52:6a:a2:f9:48:19:30:65:2b:51:81:7a:cf:
         05:84:8a:0a:d6:38:4c:91:9e:75:06:ec:cc:dc:e8:8d:bb:a3:
         ce:f6:92:fe:c7:94:d3:13:ba:85:59:92:40:fe:81:b8:5f:9b:
         bf:2b:0f:ee:b9:8a:a8:c2:41:ae:ba:d2:55:fe:a5:b6:66:4f:
         93:39:10:f3:ff:2e:5a:2d:49:c0:7f:99:5c:2a:d7:20:d8:ab:
         9d:a5:7d:d0:4a:99:8e:4f:f7:78:cf:d2:ba:ce:71:ae:ed:8e:
         3a:8b:7d:3d:a3:5a:d2:04:e7:23:aa:41:7b:12:72:5c:28:0a:
         d1:10:e4:63:e3:af:85:44:c5:75:06:6a:33:01:7b:c4:b7:75:
         16:0c:3e:c6:f2:b1:0e:87:74:a1:d1:13:52:5a:7f:b3:2b:37:
         e5:7e:57:f2:3c:f8:54:5d:6e:ca:bf:b3:b8:c4:dc:92:e3:f1:
         a7:9a:03:6d:e8:c6:66:ed:45:39:42:ee:dd:74:54:7f:15:3d:
         b8:36:a6:b5:29:7d:9b:f5:d6:c5:82:07:cf:37:f0:3c:be:57:
         4d:4f:7b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----