Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230353a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3230353a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          chcFxvzopaY/9RpyU4jHst8zpGP0LO8kgLLVFIIfc2Q=
Subject key identifier:   AA:46:BE:A8:6A:81:38:7B:0F:36:5D:8A:F8:F6:D8:AD:92:CC:4F:2F
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       69CF1CE4B724D7759D2377DFAD185146ED7ABFC3
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230353a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:03 +0000
ROA not before:           Thu 03 Aug 2023 13:04:03 +0000
ROA not after:            Thu 01 Aug 2024 13:09:03 +0000
asID:                     262617
IP address blocks:        2804:90c:205::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cf:1c:e4:b7:24:d7:75:9d:23:77:df:ad:18:51:46:ed:7a:bf:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:03 2023 GMT
            Not After : Aug  1 13:09:03 2024 GMT
        Subject: CN=AA46BEA86A81387B0F365D8AF8F6D8AD92CC4F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e6:18:c8:b5:d3:33:35:2f:a8:75:2f:33:27:
                    27:31:af:93:ee:e8:a6:3a:4c:82:6a:39:9a:7c:1c:
                    1e:3c:87:98:00:69:c4:1c:7e:3c:1d:66:c5:3e:de:
                    fa:07:6d:fe:01:c8:91:5d:d4:bd:95:79:cf:90:1f:
                    cb:55:42:fb:bb:d7:b8:31:05:3b:73:d3:8e:90:04:
                    17:33:79:f4:50:ca:95:81:32:e9:ef:bb:08:4c:dd:
                    39:e8:1a:67:2b:1b:9f:83:6b:5a:7e:ff:98:5a:81:
                    cc:6e:ee:48:44:01:9a:5a:40:aa:05:8b:1d:04:db:
                    64:e1:b6:24:22:68:26:17:1e:08:eb:02:1d:7e:c6:
                    e5:d0:1c:fe:0b:fd:c6:69:a7:81:1b:8a:f2:51:0d:
                    5b:70:a9:f5:e1:5b:d8:6d:4e:8d:2d:56:a8:c2:60:
                    78:d6:0d:43:7e:5e:9e:68:96:5a:7c:a5:df:86:11:
                    0c:85:17:2a:78:45:02:82:2d:15:2f:18:78:e2:39:
                    57:02:04:19:5f:12:f5:b0:73:6c:5c:4d:92:08:de:
                    59:53:a5:20:bb:a5:31:76:80:01:a3:57:35:d5:5b:
                    df:1e:7f:b6:11:99:75:48:28:9c:93:3b:93:d0:2f:
                    c6:cb:52:31:fe:58:c3:e6:20:cd:96:6d:f8:d9:42:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:46:BE:A8:6A:81:38:7B:0F:36:5D:8A:F8:F6:D8:AD:92:CC:4F:2F
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230353a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:205::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:d4:7e:b4:bf:e1:94:ab:d0:1b:dd:f0:08:05:2d:88:73:eb:
         dd:c7:a7:fd:2d:9e:5f:d3:a5:42:5f:a2:b9:47:d3:6e:a6:a4:
         50:52:b3:a3:3d:7d:67:3f:42:be:91:28:f8:68:af:df:18:8b:
         18:f2:f4:5b:5e:00:35:e7:2f:d1:96:b6:5b:a4:b9:6c:76:5a:
         15:9c:df:0c:96:7a:62:97:1e:c5:a9:c9:a3:fc:39:82:a6:71:
         4e:8d:64:02:6f:c9:c3:f1:1d:8a:0b:18:11:4f:30:4e:ef:a6:
         fb:48:f3:5a:91:b9:db:a1:ea:a9:05:07:10:22:52:4d:0f:ad:
         1f:09:10:9c:eb:f9:53:c4:38:2d:bf:09:e8:f5:4f:1f:a9:64:
         f0:b5:df:15:75:e8:4b:85:c0:33:b6:d4:99:84:7c:30:7a:1c:
         99:95:c3:07:7c:ae:ea:b0:40:ba:ff:bd:d7:cf:94:ed:01:dd:
         2d:46:29:32:53:a5:f6:44:56:3f:2f:ac:42:c5:25:82:59:52:
         5f:52:33:b7:38:82:20:f5:48:68:eb:0a:0b:bb:22:29:f0:af:
         b1:12:c3:63:f7:00:dd:95:36:b8:cf:de:cd:b8:78:0f:7c:ba:
         38:05:df:cd:98:ce:3d:6e:db:98:25:e3:62:6c:58:96:c5:c0:
         68:d8:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----