Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          G35KAWLfF6rrJGv1wkNufv1vG9Ul0hRF8yrRXGx0XtA=
Subject key identifier:   A9:91:6E:4C:D9:CF:F3:B4:6B:56:FD:C3:73:27:60:5D:B8:82:23:1A
Certificate issuer:       /CN=96E0B60592DF76BE603ED2B08A261F1D0F488BAE
Certificate serial:       152FAF56D17455FBB2B10FC41B93DF898ADBF64A
Authority key identifier: 96:E0:B6:05:92:DF:76:BE:60:3E:D2:B0:8A:26:1F:1D:0F:48:8B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96E0B60592DF76BE603ED2B08A261F1D0F488BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Wed 27 Dec 2023 15:14:09 +0000
ROA not before:           Wed 27 Dec 2023 15:09:09 +0000
ROA not after:            Wed 25 Dec 2024 15:14:09 +0000
asID:                     265919
IP address blocks:        2804:3fd8:7000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2f:af:56:d1:74:55:fb:b2:b1:0f:c4:1b:93:df:89:8a:db:f6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E0B60592DF76BE603ED2B08A261F1D0F488BAE
        Validity
            Not Before: Dec 27 15:09:09 2023 GMT
            Not After : Dec 25 15:14:09 2024 GMT
        Subject: CN=A9916E4CD9CFF3B46B56FDC37327605DB882231A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c8:f5:0e:bb:66:bc:72:5a:17:1a:45:12:9c:
                    ac:c4:27:49:81:3e:f8:6f:ae:04:49:8c:7f:31:75:
                    28:51:52:2b:c7:41:b0:b8:f8:cb:a3:ac:5e:5a:ca:
                    fd:16:2c:18:6e:00:40:93:09:87:0a:4c:f5:41:54:
                    4c:5d:08:3b:1f:28:d6:2c:3f:93:33:5b:3f:37:c4:
                    ab:3f:c7:81:83:9e:54:d5:66:bf:96:32:ec:7f:a3:
                    7d:84:c5:65:a9:3a:6e:ee:e1:11:4a:37:76:36:a2:
                    88:cb:7c:84:7a:27:a9:88:e9:87:23:47:e0:a5:1c:
                    26:a5:04:f4:ff:20:6a:98:04:2e:8e:34:5b:e6:c4:
                    0f:24:01:e4:1c:d9:22:39:d5:2e:b3:af:90:cc:80:
                    1c:11:7d:a4:2c:9e:66:ea:98:f9:61:7f:3d:ae:03:
                    0c:65:8d:9b:e1:04:d1:5c:a8:5d:a8:cd:d2:63:f8:
                    fa:a5:54:96:25:17:6c:2a:51:9a:f0:91:24:9c:54:
                    85:7e:c3:f1:d3:2d:20:4b:1b:1d:d4:4e:3e:4a:da:
                    c3:6c:39:4f:56:09:1c:b5:cb:34:fe:6a:95:7e:df:
                    87:77:3d:92:97:91:29:39:c9:5f:bf:39:f7:b2:55:
                    6c:61:79:72:9d:25:96:da:a6:bd:a2:35:c5:06:17:
                    4d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:91:6E:4C:D9:CF:F3:B4:6B:56:FD:C3:73:27:60:5D:B8:82:23:1A
            X509v3 Authority Key Identifier:
                keyid:96:E0:B6:05:92:DF:76:BE:60:3E:D2:B0:8A:26:1F:1D:0F:48:8B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/96E0B60592DF76BE603ED2B08A261F1D0F488BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96E0B60592DF76BE603ED2B08A261F1D0F488BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:90:5f:b5:98:e7:5f:bf:55:26:e0:f0:61:5c:6c:00:cd:82:
         75:fb:ff:fa:52:0e:56:b9:0b:12:d1:43:19:4c:e8:8d:67:56:
         43:c1:1d:a1:b8:c7:74:c7:f0:3d:0d:87:9d:45:47:08:e3:ab:
         0a:06:be:98:e6:f8:2c:81:56:e7:e2:12:df:e3:1b:e1:b4:f4:
         1a:0e:19:6e:e5:db:c3:1c:d9:2d:29:8c:d3:82:be:a2:d2:1c:
         3a:66:59:68:41:1d:70:52:8c:4c:c1:a7:bf:70:a0:e8:d5:3a:
         5f:7d:5e:cd:e9:16:b1:22:2a:8b:f4:00:dd:f5:cb:81:77:da:
         7c:45:81:c1:e0:57:a6:c8:13:a9:6e:18:42:b4:78:bc:8a:f0:
         03:69:c6:0c:45:94:b2:4c:9a:1e:a6:55:ac:c4:45:da:18:9f:
         2c:e8:c9:6c:2f:2e:ae:c9:1d:46:89:51:28:13:28:39:af:ec:
         c1:4d:c0:16:ce:12:1a:54:8c:1e:45:6d:57:53:e3:19:04:b6:
         14:fc:3d:fd:ef:60:94:5d:18:6d:c3:80:70:20:7b:ef:f5:00:
         33:d5:d7:e1:c1:1c:a6:7d:d9:d4:33:86:63:95:74:b7:48:dc:
         b3:b1:d4:b3:7e:47:fc:23:f6:45:7b:4b:70:56:33:75:ac:19:
         2a:41:65:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----