Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/323830343a3763383a3a2f33322d3438203d3e20323632333233.roa
File:                     323830343a3763383a3a2f33322d3438203d3e20323632333233.roa (raw, json)
Hash identifier:          PmhqH8nAxa2s8mZCacEVpzotvHc8emj93scuGPglNuM=
Subject key identifier:   F0:CA:6D:7E:33:5D:F4:AD:99:2D:29:B3:A9:8B:A8:4F:38:E0:AF:68
Certificate issuer:       /CN=F4A13298B8B1DBC0257898EF603127C38CA91069
Certificate serial:       017DC7349544E89BB3730613E8200A43C677F0A5
Authority key identifier: F4:A1:32:98:B8:B1:DB:C0:25:78:98:EF:60:31:27:C3:8C:A9:10:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4A13298B8B1DBC0257898EF603127C38CA91069.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/323830343a3763383a3a2f33322d3438203d3e20323632333233.roa
Signing time:             Wed 31 Jan 2024 11:56:51 +0000
ROA not before:           Wed 31 Jan 2024 11:51:51 +0000
ROA not after:            Wed 29 Jan 2025 11:56:51 +0000
asID:                     262323
IP address blocks:        2804:7c8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7d:c7:34:95:44:e8:9b:b3:73:06:13:e8:20:0a:43:c6:77:f0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4A13298B8B1DBC0257898EF603127C38CA91069
        Validity
            Not Before: Jan 31 11:51:51 2024 GMT
            Not After : Jan 29 11:56:51 2025 GMT
        Subject: CN=F0CA6D7E335DF4AD992D29B3A98BA84F38E0AF68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:69:33:b7:77:15:37:43:7e:2e:ee:37:56:
                    f4:de:fa:d4:ef:c6:47:c0:4a:0a:39:25:eb:12:e2:
                    5f:a2:8d:74:b0:84:19:7b:27:43:65:9f:c4:06:3f:
                    4f:d1:1d:29:0d:8d:38:44:fc:82:ab:2f:4c:55:f1:
                    cb:e8:e8:d2:a4:77:f3:58:8b:70:3e:59:df:7f:67:
                    6c:a8:d2:be:e5:52:a8:81:32:36:56:35:da:c7:5b:
                    67:7c:08:52:01:e5:64:f2:34:d3:f8:28:22:6c:70:
                    7a:45:8f:05:a1:79:36:a3:c7:8d:fd:a4:ba:ef:e0:
                    a2:b7:d9:93:65:89:e0:e6:c8:b4:e5:2b:0d:4c:22:
                    8a:ec:52:81:40:52:bb:87:b9:4f:c5:e8:27:6f:de:
                    ed:af:98:7b:40:54:ad:39:ea:b0:83:fe:d1:89:0b:
                    7f:c2:c1:55:ff:20:d9:ef:76:79:d9:a1:40:54:01:
                    52:4f:54:3b:58:e0:04:83:dc:0e:9a:6f:95:94:af:
                    45:5d:ae:3e:43:b4:c7:50:d2:0b:86:01:27:08:64:
                    85:80:26:bf:95:35:91:c0:57:9c:46:27:44:30:30:
                    53:cb:b2:da:25:26:74:af:ca:e5:49:9e:b3:e5:7f:
                    7a:69:a6:8c:66:c2:2e:ff:f5:5c:75:c2:c4:08:8a:
                    a5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CA:6D:7E:33:5D:F4:AD:99:2D:29:B3:A9:8B:A8:4F:38:E0:AF:68
            X509v3 Authority Key Identifier:
                keyid:F4:A1:32:98:B8:B1:DB:C0:25:78:98:EF:60:31:27:C3:8C:A9:10:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/F4A13298B8B1DBC0257898EF603127C38CA91069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4A13298B8B1DBC0257898EF603127C38CA91069.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/323830343a3763383a3a2f33322d3438203d3e20323632333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:c9:53:ee:5a:8e:cd:c9:6b:34:9c:f5:5c:39:1b:ea:6c:6b:
         c1:68:ba:b8:61:33:ba:d1:d9:fd:74:4b:e0:08:ba:f7:2e:d2:
         6f:5f:26:39:36:48:76:03:b6:14:d0:ca:ce:51:fd:b9:c4:87:
         9d:2b:e1:86:47:12:8c:28:e8:27:64:db:7c:bf:66:f7:92:81:
         95:10:8f:3d:85:15:ef:a9:17:19:9f:66:c7:10:ef:48:88:ee:
         c3:e8:09:09:58:3b:d4:0e:71:01:7e:28:75:74:3f:b9:51:3b:
         9c:45:74:e7:dd:e6:31:d3:d1:b7:7d:f1:0b:e1:c0:89:44:9a:
         d8:f3:05:93:38:0c:6a:a1:79:df:0e:63:d8:64:3a:f4:f7:59:
         52:81:90:6e:2a:30:f5:14:40:af:11:60:c1:8c:2e:c1:cb:61:
         80:e5:72:03:13:8e:f6:77:d1:75:80:fa:12:55:c8:54:ae:04:
         fe:e1:18:13:5d:b2:71:ab:47:b1:f5:71:ef:eb:74:d8:15:f3:
         db:c3:7a:09:cc:dc:60:44:29:18:7d:f5:f2:3e:17:b1:24:f1:
         c6:b8:63:b6:b6:3e:4e:65:59:a2:06:d0:d5:c7:a1:fe:42:fc:
         bb:0c:e8:ca:86:a8:34:59:a6:9d:67:a1:db:2f:53:7b:89:8e:
         7f:b5:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----