Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230313a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3230313a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          B2jwb91+KHvtKtLELmwl6Lbk2fiLZKrragNUb/aYq18=
Subject key identifier:   F6:4A:16:B7:CA:2A:39:88:C1:07:74:83:94:35:86:F2:94:C2:A2:4F
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       09EDF2F6A433E55DDBAB3538EDB63392FBE474D5
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230313a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:19 +0000
ROA not before:           Thu 03 Aug 2023 13:04:19 +0000
ROA not after:            Thu 01 Aug 2024 13:09:19 +0000
asID:                     262617
IP address blocks:        2804:90c:201::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ed:f2:f6:a4:33:e5:5d:db:ab:35:38:ed:b6:33:92:fb:e4:74:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:19 2023 GMT
            Not After : Aug  1 13:09:19 2024 GMT
        Subject: CN=F64A16B7CA2A3988C1077483943586F294C2A24F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:83:ef:55:58:a7:4b:61:5b:d4:da:a1:0e:35:
                    1d:a3:66:1e:b7:1e:7e:e8:c5:b7:02:b3:b6:54:8d:
                    aa:d9:5f:fb:34:4f:77:13:71:7d:b5:5d:94:45:e7:
                    2c:d0:c6:d3:f3:a4:b8:bf:10:71:e0:a0:db:80:33:
                    d1:2a:33:c5:35:c1:58:7b:7e:8a:0c:5c:f6:05:08:
                    12:12:96:b8:a7:db:c9:3b:04:19:65:30:1f:9f:a1:
                    c5:94:5b:38:c3:b0:44:dc:3f:3f:62:18:87:78:42:
                    06:b5:c0:72:36:90:51:49:ae:b3:3a:af:2e:70:cc:
                    a7:99:67:82:26:4c:0e:b0:82:81:57:2e:53:6d:48:
                    e0:89:26:23:ee:ce:2a:b3:ed:41:b6:59:72:12:40:
                    52:a9:88:78:0a:32:b0:c4:d1:db:64:11:4e:e2:c6:
                    9a:a2:2f:06:f9:4f:ed:12:d2:2b:e1:51:7d:f4:17:
                    d2:10:58:a7:ee:e9:83:a3:b8:04:59:26:41:34:93:
                    11:73:36:7f:03:5d:c5:c1:32:fb:14:0d:bc:f6:95:
                    99:b8:e3:18:09:a3:af:da:72:94:cc:dc:a7:b6:56:
                    8e:b9:f6:3a:86:cd:e7:3e:af:d7:c8:98:d1:c7:33:
                    36:dd:4d:da:4a:77:c9:d3:51:22:d8:06:d9:5e:55:
                    c7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4A:16:B7:CA:2A:39:88:C1:07:74:83:94:35:86:F2:94:C2:A2:4F
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230313a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:201::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:db:07:e9:fb:9d:a9:13:2d:d6:77:66:d7:20:4c:00:b6:1c:
         50:94:5d:f9:44:30:3c:40:bd:20:b1:78:d8:cd:d3:3b:81:5c:
         56:7f:65:47:99:9f:9c:d2:a9:92:c4:f1:10:f0:ba:15:68:b7:
         67:8a:8f:d5:5c:93:dd:a3:db:e7:75:eb:d9:7f:c3:fe:3e:a4:
         fb:85:f4:1d:97:e8:3f:18:1e:07:56:eb:c4:28:7e:5d:0c:c8:
         e6:b6:13:ff:c8:23:f5:0d:3f:bf:d3:8a:36:b5:eb:94:e7:a2:
         40:18:91:fa:89:1e:7e:12:85:38:b0:45:11:e3:dd:1d:c5:47:
         d2:f8:db:bd:86:c5:3b:f8:5c:f3:ca:a9:e4:c7:15:19:af:76:
         2f:3b:8c:db:24:56:6e:52:35:6e:55:40:c2:18:5f:ae:eb:90:
         ee:24:6d:8f:a7:8a:93:69:f1:eb:79:ab:19:8a:ee:be:bb:ff:
         f3:82:a4:c8:ae:74:49:a9:2d:f5:65:f6:ea:7f:a4:3c:17:69:
         c1:12:06:71:05:85:41:fc:52:65:e7:21:ae:1b:00:dc:45:38:
         a7:76:0e:3a:c9:d8:39:60:a2:94:35:c2:8e:d8:a9:11:db:5f:
         bc:40:2f:81:5a:17:ef:e9:d3:f0:98:da:77:db:ff:ca:53:1f:
         e7:9b:44:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----