Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/323830343a376266633a3a2f33322d3332203d3e20323731343638.roa
File:                     323830343a376266633a3a2f33322d3332203d3e20323731343638.roa (raw, json)
Hash identifier:          9/n11eMgHUwlOMR3hoXnmBBI5R/y/mUQZqUfFpaR1RM=
Subject key identifier:   B4:3C:70:43:04:40:17:92:EF:06:05:E0:52:B7:29:C2:9E:62:8A:9F
Certificate issuer:       /CN=3FB949E473014D3A4378DE464207BB64491FC1FB
Certificate serial:       42C165946CEE921DF74E9ADA7E16B55D22713895
Authority key identifier: 3F:B9:49:E4:73:01:4D:3A:43:78:DE:46:42:07:BB:64:49:1F:C1:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB949E473014D3A4378DE464207BB64491FC1FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/323830343a376266633a3a2f33322d3332203d3e20323731343638.roa
Signing time:             Tue 10 Oct 2023 18:51:27 +0000
ROA not before:           Tue 10 Oct 2023 18:46:27 +0000
ROA not after:            Tue 08 Oct 2024 18:51:27 +0000
asID:                     271468
IP address blocks:        2804:7bfc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c1:65:94:6c:ee:92:1d:f7:4e:9a:da:7e:16:b5:5d:22:71:38:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FB949E473014D3A4378DE464207BB64491FC1FB
        Validity
            Not Before: Oct 10 18:46:27 2023 GMT
            Not After : Oct  8 18:51:27 2024 GMT
        Subject: CN=B43C704304401792EF0605E052B729C29E628A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:df:f0:d7:66:4e:be:55:b1:cd:9b:ca:29:
                    41:66:27:a4:39:c8:06:59:5a:f2:ae:df:6b:20:c1:
                    73:db:f2:b1:db:c9:fa:36:e9:eb:49:b5:97:95:e6:
                    fb:79:5a:1d:d7:42:db:dd:35:21:54:f8:c0:83:6e:
                    47:0d:32:50:80:dd:3e:57:ab:99:e4:de:ec:a7:95:
                    7a:c5:52:4f:c5:c2:f4:c3:18:fa:1f:cb:6d:b4:e0:
                    f9:8b:e2:f3:27:48:a1:e3:e2:76:3d:70:0a:60:bd:
                    9e:ff:1a:82:32:fc:87:6b:fe:b0:1a:d0:e9:bb:f5:
                    9d:4c:48:25:c2:44:86:3d:ed:81:23:2f:11:7d:6d:
                    54:4a:3f:f3:7f:2a:53:1e:2a:b7:48:1a:28:4b:eb:
                    8a:dd:03:2b:a9:13:84:0d:7d:62:30:fa:df:e6:e8:
                    d3:9b:6a:d6:fb:ac:39:26:31:fa:f4:7d:01:9c:6b:
                    6f:72:84:64:bd:0d:e1:41:5e:e9:5b:7b:74:7a:3f:
                    ee:3e:82:74:9d:b5:b8:25:5d:e5:68:42:55:df:01:
                    41:bb:4a:5d:68:36:c9:0f:3c:11:08:8f:31:28:3b:
                    1e:ad:8c:8d:99:4a:af:19:47:6f:58:6a:99:4f:52:
                    20:38:04:b8:6e:b6:08:79:86:b7:60:8e:17:66:92:
                    e6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3C:70:43:04:40:17:92:EF:06:05:E0:52:B7:29:C2:9E:62:8A:9F
            X509v3 Authority Key Identifier:
                keyid:3F:B9:49:E4:73:01:4D:3A:43:78:DE:46:42:07:BB:64:49:1F:C1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3FB949E473014D3A4378DE464207BB64491FC1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB949E473014D3A4378DE464207BB64491FC1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/323830343a376266633a3a2f33322d3332203d3e20323731343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:44:2f:48:5e:b4:92:f8:cd:08:0d:7a:c4:c3:c8:cb:25:e6:
         d7:95:cd:6a:54:5d:44:cc:c8:0e:39:e2:db:5f:ea:08:ef:d8:
         27:f7:db:6d:ce:6f:2e:a7:4b:4e:4d:3d:1f:22:be:a8:18:0b:
         03:41:e0:ad:22:79:2c:43:de:f6:64:02:98:bf:c5:4d:af:6b:
         5b:9e:c8:88:8b:eb:fb:60:06:25:48:1e:8a:a6:2f:8f:f1:89:
         24:98:9a:85:5f:66:84:b1:01:9e:32:cc:52:b0:10:05:73:b2:
         83:46:f1:86:1b:53:18:6c:e7:b6:ae:14:db:07:eb:2a:e2:d2:
         27:96:93:bd:e8:27:b0:50:f9:07:c3:0e:1e:cf:6a:af:e6:ab:
         d1:c8:e4:76:f4:e6:fb:75:48:b0:ae:8b:7e:24:cf:a8:eb:0c:
         d2:2a:de:8f:6e:a8:73:58:e0:c3:59:49:5d:95:8d:64:94:4c:
         ac:e3:78:bb:47:a1:1b:6d:bf:27:63:5e:c2:14:b3:1d:a0:33:
         a2:31:44:2e:a1:c9:73:c4:ff:bd:19:ac:fd:77:68:bc:85:02:
         37:70:c9:6b:22:99:bb:ca:8b:6f:2f:5a:23:6c:00:c9:a8:f6:
         de:a0:84:93:17:aa:d4:eb:a8:89:4e:a9:84:50:ec:16:43:86:
         19:e0:f6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----