Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/323830343a356463343a633030303a3a2f33342d3334203d3e20323638393931.roa
File:                     323830343a356463343a633030303a3a2f33342d3334203d3e20323638393931.roa (raw, json)
Hash identifier:          LYuiKv0QYPFZ3ZSRueL2ZPSyZYnj0fRU8FVZ86C1eNM=
Subject key identifier:   2E:C5:9E:1D:CF:FC:20:95:E6:E9:1D:B2:90:8A:E1:AA:60:24:61:A0
Certificate issuer:       /CN=93073D69667BA705C8AE7B577FDD18FB85987CAA
Certificate serial:       097E59B36288924EDEA542AB68759C4A2C6AC23A
Authority key identifier: 93:07:3D:69:66:7B:A7:05:C8:AE:7B:57:7F:DD:18:FB:85:98:7C:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93073D69667BA705C8AE7B577FDD18FB85987CAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/323830343a356463343a633030303a3a2f33342d3334203d3e20323638393931.roa
Signing time:             Thu 19 Oct 2023 13:14:35 +0000
ROA not before:           Thu 19 Oct 2023 13:09:35 +0000
ROA not after:            Thu 17 Oct 2024 13:14:35 +0000
asID:                     268991
IP address blocks:        2804:5dc4:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7e:59:b3:62:88:92:4e:de:a5:42:ab:68:75:9c:4a:2c:6a:c2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93073D69667BA705C8AE7B577FDD18FB85987CAA
        Validity
            Not Before: Oct 19 13:09:35 2023 GMT
            Not After : Oct 17 13:14:35 2024 GMT
        Subject: CN=2EC59E1DCFFC2095E6E91DB2908AE1AA602461A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:2e:54:b0:29:7e:90:81:7b:ba:21:17:81:
                    54:f1:79:21:c1:f1:c4:6b:aa:bf:75:5d:9c:0f:c8:
                    6f:10:67:ca:ba:ff:c2:72:59:e6:9b:4c:48:98:4d:
                    6a:55:78:01:66:d6:85:89:c4:69:07:01:37:be:f8:
                    e3:0b:53:63:f5:ee:f5:c5:d5:a3:05:72:be:aa:6b:
                    c0:c0:3f:57:0d:2b:a5:96:61:c0:96:b5:40:13:bc:
                    a5:3c:5f:b3:dd:bb:f9:03:14:a4:59:d5:3c:4a:03:
                    3d:4e:d5:7c:3b:0c:8a:83:cf:b1:67:bc:ad:92:97:
                    33:bc:76:7d:73:c4:6b:30:1b:5d:36:77:01:44:7d:
                    a7:09:95:b7:03:b2:5a:83:b5:b2:0f:32:c1:b1:5e:
                    34:47:ed:ea:80:47:1f:68:f9:ce:75:8b:7a:2a:8a:
                    72:23:1a:c3:2c:73:6a:f1:cb:a1:62:43:65:54:43:
                    df:1a:24:c7:36:b9:47:4a:02:8e:d0:b3:2c:af:c7:
                    c0:9a:5d:22:18:e8:fd:96:fa:03:64:a0:d0:b0:bb:
                    49:34:61:7f:0a:ac:88:d1:cd:bb:78:0f:df:0c:75:
                    41:7c:42:7d:84:d6:aa:0a:23:f7:c8:90:49:87:61:
                    4e:16:4e:20:98:6c:0b:e4:91:db:38:ea:1b:1b:22:
                    11:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C5:9E:1D:CF:FC:20:95:E6:E9:1D:B2:90:8A:E1:AA:60:24:61:A0
            X509v3 Authority Key Identifier:
                keyid:93:07:3D:69:66:7B:A7:05:C8:AE:7B:57:7F:DD:18:FB:85:98:7C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/93073D69667BA705C8AE7B577FDD18FB85987CAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93073D69667BA705C8AE7B577FDD18FB85987CAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/323830343a356463343a633030303a3a2f33342d3334203d3e20323638393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5dc4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b4:5f:0a:ea:09:96:a5:a6:83:58:0e:d4:4a:9d:43:e3:3f:e1:
         1a:92:8b:2a:00:85:00:17:ab:4f:15:b0:b9:24:1b:bf:93:6d:
         62:48:26:13:f5:01:d9:e3:15:bb:c2:a2:35:45:fd:04:a7:4c:
         97:ff:91:7f:d8:6a:d0:a4:4d:fa:48:6e:72:76:b7:3e:7b:d4:
         31:d4:5e:2e:65:d3:d5:44:f0:8d:e6:f4:2e:94:ad:de:7b:13:
         7a:d0:f8:eb:3a:23:ee:71:b0:f9:03:96:39:4e:ca:26:37:b4:
         89:8b:d2:54:f7:c4:d2:f6:df:42:08:20:3f:f3:b1:c1:e1:06:
         71:41:ea:f5:39:6a:d2:31:18:84:86:75:b4:63:bc:3f:e3:b4:
         03:17:20:5a:cb:9c:b1:ad:9e:68:7c:77:3d:0a:6d:a7:c8:7b:
         58:81:0f:76:17:98:06:75:1c:ce:99:ff:d6:61:84:27:68:78:
         b3:29:5e:f6:4f:d0:cc:1d:56:73:f4:12:80:4c:0c:3f:69:62:
         cf:e7:c3:49:3a:7c:8d:d8:74:1c:7d:d9:7d:e3:92:11:72:a9:
         d7:4a:ec:7b:b7:7a:35:97:a3:9b:69:22:30:72:3c:62:4f:34:
         db:2c:b6:d4:97:0a:8e:a5:ad:a1:63:6e:70:d8:82:77:dc:49:
         ee:d2:95:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----