Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a373a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a373a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          5hELjTjXcwWa6VjXGClah1P1XihMeGvy6uJb8kbRscY=
Subject key identifier:   9D:06:26:CF:E6:5C:CE:AE:E0:CB:86:7B:28:1E:E3:23:21:8D:D5:91
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       0F06CB1B505BD74E9211D3B7EF939C8A509D6474
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a373a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:07 +0000
ROA not before:           Thu 03 Aug 2023 13:04:07 +0000
ROA not after:            Thu 01 Aug 2024 13:09:07 +0000
asID:                     262617
IP address blocks:        2804:90c:7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:06:cb:1b:50:5b:d7:4e:92:11:d3:b7:ef:93:9c:8a:50:9d:64:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:07 2023 GMT
            Not After : Aug  1 13:09:07 2024 GMT
        Subject: CN=9D0626CFE65CCEAEE0CB867B281EE323218DD591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:99:52:10:80:2b:24:a3:c0:96:b8:d5:37:
                    40:f6:21:b0:79:b3:11:12:80:37:ba:a0:e0:c5:5c:
                    56:04:ad:7c:2c:c6:64:98:08:6a:e8:71:10:82:52:
                    91:17:93:7c:31:8c:0d:e9:92:6d:87:5c:8c:c0:a0:
                    5d:18:39:73:a6:6e:40:81:4b:e4:9e:ac:e0:ce:08:
                    ce:79:36:55:29:64:df:c9:c5:c8:33:fb:d4:a8:78:
                    eb:16:ed:18:99:27:96:7f:93:e5:47:5b:e5:d7:32:
                    83:32:4d:bd:3d:4c:93:3a:6d:ee:8f:ca:6f:95:ce:
                    7e:29:ed:3d:ec:bf:a8:69:44:8f:08:6d:d7:3b:e2:
                    df:ea:0a:90:c2:d5:09:f5:0a:6e:44:2c:d5:6f:21:
                    61:c0:0f:20:23:ff:71:b6:da:4c:96:6f:76:a4:f9:
                    28:41:ee:13:58:ee:ea:ff:27:6c:92:b1:68:e2:b8:
                    55:5f:1d:a1:58:29:6c:65:db:45:c7:d3:23:93:d8:
                    1e:3e:b1:aa:e7:74:20:3f:75:9c:6a:ea:cf:8c:c0:
                    23:66:51:f0:31:4a:1c:48:8d:67:5a:6a:20:a0:7d:
                    68:32:9f:8d:94:92:89:2b:e8:ef:65:59:12:bd:18:
                    1d:a0:0d:24:3c:ae:31:1c:81:45:41:9c:e2:5a:94:
                    4b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:06:26:CF:E6:5C:CE:AE:E0:CB:86:7B:28:1E:E3:23:21:8D:D5:91
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a373a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:cf:8b:fa:bd:95:18:74:fc:d4:e5:2f:6a:1a:3a:2d:52:30:
         c9:64:e1:1d:31:24:28:cc:14:32:36:95:4d:fd:f4:79:53:0b:
         61:e0:81:67:99:7f:e6:11:fb:a9:cb:45:e0:47:20:79:2c:d8:
         5d:35:a4:d8:5c:2d:f9:bb:b6:a1:3c:54:e7:f2:bd:01:95:89:
         06:38:a2:6e:96:eb:84:9f:a5:a4:3b:d5:3e:6e:f5:48:d1:bf:
         5c:0d:c6:df:6f:06:e1:cf:79:a3:7b:08:4e:4c:bb:21:04:87:
         dd:8a:2c:c2:ed:30:9a:65:fb:39:cf:4d:78:05:87:d7:13:fa:
         15:20:a2:a9:e5:52:86:60:58:97:85:44:77:18:a1:c0:28:06:
         32:a3:37:0f:bd:c6:ed:58:4b:04:e7:85:8c:92:2e:2b:46:17:
         24:37:ea:8c:6a:56:8b:ff:9e:8f:c3:2a:1a:84:ad:83:ab:2a:
         6a:f3:e1:7f:fc:7d:a1:07:44:5a:04:6b:c6:e7:89:29:0e:b4:
         1a:88:b3:50:d8:84:50:cf:10:c7:21:c8:d4:48:1e:5e:7a:86:
         3e:08:2f:a0:58:be:74:c4:e5:fa:f6:1a:c8:71:3c:ed:af:e5:
         d8:b7:2d:de:e5:68:c4:3f:90:c0:55:10:6c:56:9d:c4:36:42:
         c8:4c:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----