Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/0/323830343a373763303a3a2f33322d3438203d3e20323731313937.roa
File:                     323830343a373763303a3a2f33322d3438203d3e20323731313937.roa (raw, json)
Hash identifier:          s5Gwpd7nfOWz6xUbXjGSg5QzmdxIOiibwPh7eIF3paw=
Subject key identifier:   6D:5C:5A:D0:C4:28:AB:BB:62:43:23:C2:DE:DA:74:96:F8:55:EE:4E
Certificate issuer:       /CN=888F367D35D0302637BEF9594895A9727E9E36B6
Certificate serial:       4761EB653BA903A6B50846B78254547566A3A8BF
Authority key identifier: 88:8F:36:7D:35:D0:30:26:37:BE:F9:59:48:95:A9:72:7E:9E:36:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/888F367D35D0302637BEF9594895A9727E9E36B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/0/323830343a373763303a3a2f33322d3438203d3e20323731313937.roa
Signing time:             Fri 22 Sep 2023 02:52:41 +0000
ROA not before:           Fri 22 Sep 2023 02:47:41 +0000
ROA not after:            Fri 20 Sep 2024 02:52:41 +0000
asID:                     271197
IP address blocks:        2804:77c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:61:eb:65:3b:a9:03:a6:b5:08:46:b7:82:54:54:75:66:a3:a8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=888F367D35D0302637BEF9594895A9727E9E36B6
        Validity
            Not Before: Sep 22 02:47:41 2023 GMT
            Not After : Sep 20 02:52:41 2024 GMT
        Subject: CN=6D5C5AD0C428ABBB624323C2DEDA7496F855EE4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:47:c1:d8:51:8d:23:e6:da:89:c1:74:85:
                    9b:76:19:e8:86:ac:5c:c9:26:86:3c:f7:c0:09:eb:
                    b3:45:23:e4:a9:59:14:4b:19:6f:f1:d8:18:ac:6b:
                    6d:81:65:3a:5a:e1:e7:11:32:c1:45:0a:41:50:c0:
                    cc:f9:82:a2:eb:b5:20:9b:2b:8c:df:dd:98:22:a4:
                    f2:7f:2b:52:80:a1:a4:fe:b5:c3:53:10:b4:66:73:
                    ef:64:ea:d2:84:11:14:91:30:75:a5:27:6c:9b:34:
                    fb:f0:54:80:e1:13:b0:2c:5a:7e:34:06:26:50:b5:
                    b4:1a:e8:d8:1f:2c:2c:65:e6:e2:e8:65:3d:d2:41:
                    61:98:f9:c2:55:ab:67:91:3f:7d:8a:3f:11:86:89:
                    2d:1d:8e:26:fb:02:53:3f:40:e5:18:8e:72:7f:c7:
                    29:e2:dd:50:f8:6e:bb:a0:e8:49:42:32:41:46:72:
                    90:9f:a3:17:02:86:63:e4:4b:0a:fd:d4:83:18:97:
                    3d:57:6c:4b:67:5a:9e:4f:ad:5b:55:32:35:ca:6b:
                    4d:41:83:04:c2:31:3d:cd:a2:54:5d:bc:7d:84:94:
                    c7:5d:5c:59:f4:f2:71:18:6d:47:95:e9:7c:b7:f9:
                    63:8c:7f:c8:dd:47:df:a9:d4:ca:74:53:bc:e4:10:
                    46:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5C:5A:D0:C4:28:AB:BB:62:43:23:C2:DE:DA:74:96:F8:55:EE:4E
            X509v3 Authority Key Identifier:
                keyid:88:8F:36:7D:35:D0:30:26:37:BE:F9:59:48:95:A9:72:7E:9E:36:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/0/888F367D35D0302637BEF9594895A9727E9E36B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/888F367D35D0302637BEF9594895A9727E9E36B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/0/323830343a373763303a3a2f33322d3438203d3e20323731313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:b8:40:71:f8:55:16:b7:a3:17:8d:3d:55:30:5a:bd:8f:bc:
         24:1a:a2:de:3a:f7:ee:0b:25:fd:66:54:c7:57:40:71:ba:19:
         aa:66:a8:63:95:f8:3e:5b:d5:51:89:c2:f6:97:a4:a5:8b:de:
         75:e6:98:48:b5:96:9f:9a:db:5d:6b:af:fc:a0:3d:5a:d7:f5:
         b3:3c:30:6b:61:1d:d1:a1:cd:18:35:91:41:33:ae:f6:75:8e:
         08:59:5d:6a:c7:1a:ff:6d:49:b0:d7:a3:95:44:46:b0:9f:0e:
         db:f9:7d:bd:c9:0f:ce:1e:13:b8:91:88:cc:1f:b9:a5:5b:07:
         65:03:5e:c7:3a:a6:b8:bd:77:f7:6a:4c:ed:e0:30:1f:e8:ea:
         00:3d:ac:e1:20:c2:e0:e6:2f:c5:86:f3:29:c8:9e:ee:ed:94:
         2b:2d:4c:e7:25:fa:51:52:96:96:6c:9c:00:f7:d9:52:28:95:
         88:f7:ea:f3:8b:3e:37:6b:12:6e:09:22:a8:07:59:06:19:df:
         38:3f:90:07:5a:a1:d3:b5:86:91:fc:64:1d:a3:28:d5:a4:1d:
         3e:bb:fc:90:15:16:3f:0a:27:f8:3e:d1:16:19:2e:65:fc:e1:
         b9:55:3d:15:83:57:ae:ab:ec:b4:7f:a7:da:34:7d:fd:45:81:
         49:5e:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----