Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0/323830343a346638303a3a2f33322d3438203d3e20323638333330.roa
File:                     323830343a346638303a3a2f33322d3438203d3e20323638333330.roa (raw, json)
Hash identifier:          d27ooaLwDlTmr3i2HTp0ymxVuPHXIzV1tFuw9/01gNw=
Subject key identifier:   03:67:53:1F:B7:64:A7:56:4A:75:A6:A3:95:06:98:5A:12:88:A2:ED
Certificate issuer:       /CN=4FDD68DAA96562ED008416263830E4D1A7EC8827
Certificate serial:       3C27CE3ED47972005D4EEDC96CFD8C9EA2EB31C0
Authority key identifier: 4F:DD:68:DA:A9:65:62:ED:00:84:16:26:38:30:E4:D1:A7:EC:88:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FDD68DAA96562ED008416263830E4D1A7EC8827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0/323830343a346638303a3a2f33322d3438203d3e20323638333330.roa
Signing time:             Mon 30 Oct 2023 14:43:23 +0000
ROA not before:           Mon 30 Oct 2023 14:38:23 +0000
ROA not after:            Mon 28 Oct 2024 14:43:23 +0000
asID:                     268330
IP address blocks:        2804:4f80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:27:ce:3e:d4:79:72:00:5d:4e:ed:c9:6c:fd:8c:9e:a2:eb:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDD68DAA96562ED008416263830E4D1A7EC8827
        Validity
            Not Before: Oct 30 14:38:23 2023 GMT
            Not After : Oct 28 14:43:23 2024 GMT
        Subject: CN=0367531FB764A7564A75A6A39506985A1288A2ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:8d:55:fb:6c:49:e6:a3:ab:0c:ea:60:36:
                    b6:2d:5a:b4:28:12:63:09:26:59:f2:55:8c:76:ea:
                    c0:cd:bc:cf:48:2a:77:ba:38:12:3b:dd:5f:e3:74:
                    7e:a9:dd:df:ca:6e:c9:dc:06:3e:56:05:87:51:cd:
                    ec:e4:a6:3d:67:e6:0f:76:12:c6:c7:ad:9f:91:e4:
                    b6:71:de:b5:f1:1f:ae:ef:22:49:89:d6:12:b5:58:
                    f2:46:c0:43:74:7b:4b:a7:3c:c8:f6:6a:d2:b9:8a:
                    f1:57:b2:cb:a1:ab:cd:c7:2d:81:bf:9b:11:ff:32:
                    59:2d:56:68:db:3f:93:1e:d6:37:f3:5f:ee:4c:3b:
                    00:02:65:de:c8:6e:d2:cc:8b:87:2b:68:3f:cb:3b:
                    b3:23:e6:40:59:2c:a9:ed:b6:d3:d6:76:2f:09:99:
                    dc:1a:27:88:78:8e:fe:3a:9b:e9:20:0c:22:61:1f:
                    23:57:6e:78:81:d2:86:b5:54:30:b9:d9:02:08:48:
                    04:9b:b2:36:bd:e0:17:72:9e:2f:4f:cb:fa:8e:60:
                    3a:65:3b:d9:3c:51:47:f8:e1:f3:ea:74:47:7e:84:
                    c4:27:fd:8f:f0:74:52:d1:b7:4f:bf:64:5b:21:98:
                    9e:9a:a6:c7:9d:35:0b:97:89:9e:b4:90:72:8b:ef:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:67:53:1F:B7:64:A7:56:4A:75:A6:A3:95:06:98:5A:12:88:A2:ED
            X509v3 Authority Key Identifier:
                keyid:4F:DD:68:DA:A9:65:62:ED:00:84:16:26:38:30:E4:D1:A7:EC:88:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0/4FDD68DAA96562ED008416263830E4D1A7EC8827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FDD68DAA96562ED008416263830E4D1A7EC8827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0/323830343a346638303a3a2f33322d3438203d3e20323638333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:f1:70:79:a5:b1:6a:7a:90:aa:4b:f4:b8:f7:47:65:8f:21:
         2a:38:f7:85:83:7c:75:2a:14:54:f8:db:b0:4d:85:e7:cd:5d:
         a3:c4:d3:81:36:46:52:b4:35:02:da:85:63:fc:0e:7b:03:c5:
         ce:19:b0:5d:e5:54:4a:1f:68:0e:d1:71:4f:c8:2b:d6:d1:99:
         6d:65:46:aa:c6:b6:04:ce:04:08:4c:58:b2:a4:94:39:53:70:
         65:26:78:b6:db:78:73:cf:27:82:be:30:f0:58:b0:9a:e3:3e:
         7e:3c:35:ba:77:c0:be:57:ac:2e:54:63:b3:7e:ac:cd:49:3e:
         84:82:4b:c0:cc:c6:5b:27:0f:82:e8:d0:36:b7:dd:82:4a:68:
         4f:ed:df:44:37:de:ac:af:49:5b:4b:34:c6:e2:38:8b:91:8a:
         b3:24:22:30:ab:75:b8:9f:d0:f8:25:1b:83:29:41:82:af:53:
         d8:69:bb:fb:0e:c0:90:54:21:3e:19:a4:86:38:23:e1:47:12:
         cc:6e:24:a3:01:6a:d4:8c:d5:a0:5f:0b:02:99:02:59:a8:17:
         52:32:57:86:a4:0a:62:23:8b:7b:df:98:2b:66:c8:2b:f2:dc:
         c9:03:ab:b8:db:64:da:24:7c:79:0d:53:5f:cb:57:71:00:e0:
         0d:65:3f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----