Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/323830343a363931633a3a2f33322d313238203d3e20323730323439.roa
File:                     323830343a363931633a3a2f33322d313238203d3e20323730323439.roa (raw, json)
Hash identifier:          laUL63eQnqRFJ9uWwQCuNFGtCEZd1u6GPghwxlkeCHI=
Subject key identifier:   1F:58:BB:6F:F1:88:A4:23:E8:7E:46:23:50:51:FF:1C:87:56:1F:72
Certificate issuer:       /CN=F220AC26EF920D90F2FDAD8C8F43587AA6142B09
Certificate serial:       4B2CE551905F38E604887F1AFB6A6C18F2DE313F
Authority key identifier: F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/323830343a363931633a3a2f33322d313238203d3e20323730323439.roa
Signing time:             Wed 29 Nov 2023 23:57:17 +0000
ROA not before:           Wed 29 Nov 2023 23:52:17 +0000
ROA not after:            Wed 27 Nov 2024 23:57:17 +0000
asID:                     270249
IP address blocks:        2804:691c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2c:e5:51:90:5f:38:e6:04:88:7f:1a:fb:6a:6c:18:f2:de:31:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F220AC26EF920D90F2FDAD8C8F43587AA6142B09
        Validity
            Not Before: Nov 29 23:52:17 2023 GMT
            Not After : Nov 27 23:57:17 2024 GMT
        Subject: CN=1F58BB6FF188A423E87E46235051FF1C87561F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:51:87:45:56:cb:84:ca:f6:d6:e4:ca:70:
                    58:64:62:10:f2:9e:0d:2d:ce:a1:c3:84:fa:c3:d9:
                    33:79:a9:24:5d:c7:24:1c:ec:54:b1:c4:00:b2:a7:
                    b5:3d:30:67:80:a4:af:23:62:3a:af:6e:b9:0b:15:
                    8a:50:1c:b1:04:6d:2d:b4:99:44:f9:7c:eb:da:04:
                    c6:12:1d:95:c1:ab:ee:46:32:cc:92:45:84:a7:a1:
                    74:57:6f:1a:a9:dc:dc:d2:99:92:d4:d7:19:18:ee:
                    69:90:be:dc:93:2e:47:02:7c:9b:18:f1:ac:cb:a3:
                    bd:41:7d:79:16:1d:08:96:4a:5d:db:16:9a:8d:9d:
                    40:a3:86:fd:eb:5b:99:63:00:e5:1e:47:8f:e8:8d:
                    4b:32:47:94:b7:07:eb:d4:b8:e4:e9:02:c5:6f:ee:
                    a8:65:d6:39:5a:af:50:d0:80:61:78:56:ac:c6:1c:
                    e7:64:d8:06:f7:2b:c2:b2:e3:20:12:dd:ec:55:26:
                    2d:4a:c7:6b:fd:df:fe:3a:1e:a0:19:16:15:d9:2c:
                    76:0e:9c:5b:21:23:1f:7e:93:d0:36:61:1c:98:2d:
                    ae:d3:e6:6e:73:ce:62:42:f4:c8:7e:04:21:db:6c:
                    85:78:37:91:d3:99:ce:44:c2:bf:64:3e:10:72:1b:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:58:BB:6F:F1:88:A4:23:E8:7E:46:23:50:51:FF:1C:87:56:1F:72
            X509v3 Authority Key Identifier:
                keyid:F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/323830343a363931633a3a2f33322d313238203d3e20323730323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:691c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:0f:72:41:e2:c3:90:e8:3c:4a:3f:a6:62:b3:db:55:08:24:
         78:c8:f3:20:36:36:d7:c5:27:d9:0f:d4:c4:28:bd:08:94:49:
         2f:00:f4:34:c2:3b:c6:39:21:98:9b:b5:d6:3b:50:9c:72:f1:
         6c:6e:8e:d4:18:a9:65:a7:d1:20:8a:d9:3a:88:08:88:86:81:
         98:c2:74:e0:e9:b5:d9:51:3d:a6:a9:f8:66:ee:f2:80:e9:5c:
         8e:94:2d:5b:bd:16:11:1f:fb:77:b3:43:06:9d:ea:49:a2:34:
         7e:e0:e3:b2:e0:19:f9:17:3b:88:66:5e:c7:e9:3a:ee:44:9a:
         39:7b:3b:ed:2d:05:49:94:d8:7b:bf:0d:79:5b:c6:5b:db:27:
         de:46:0d:ae:bf:f2:fc:82:e9:42:8e:5c:09:fc:8f:99:5f:54:
         a7:eb:c0:42:a9:1d:96:7c:e7:3f:d1:1d:61:aa:c9:d0:d5:d1:
         92:49:1b:63:af:91:ab:1e:8f:78:25:94:5d:f6:71:56:7f:31:
         b9:1c:ef:55:72:fa:b4:f1:57:d0:b7:c2:43:77:a3:1c:c8:51:
         db:67:99:2e:72:9b:c6:81:3a:a0:2f:be:cb:d5:48:bf:d1:76:
         85:52:b1:2d:6b:1d:21:0c:20:94:19:20:1e:6b:05:5e:73:39:
         d1:13:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----