Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a33313a3a2f34382d3438203d3e20323633303733.roa
File:                     323830343a3935343a33313a3a2f34382d3438203d3e20323633303733.roa (raw, json)
Hash identifier:          ob2bytUrtjZMwTaIp/zeEPrbsjiCcidg0BFIMqS6E+Y=
Subject key identifier:   C4:84:E4:41:84:DE:51:0D:F7:0F:67:52:BC:8C:09:86:FD:CF:C1:C6
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       4C00E88C771BE5CF7566308BD6CE29091BF23C6B
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a33313a3a2f34382d3438203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:09 +0000
ROA not before:           Fri 22 Dec 2023 20:20:09 +0000
ROA not after:            Fri 20 Dec 2024 20:25:09 +0000
asID:                     263073
IP address blocks:        2804:954:31::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:00:e8:8c:77:1b:e5:cf:75:66:30:8b:d6:ce:29:09:1b:f2:3c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:09 2023 GMT
            Not After : Dec 20 20:25:09 2024 GMT
        Subject: CN=C484E44184DE510DF70F6752BC8C0986FDCFC1C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:01:01:05:5d:55:0c:41:0b:1e:52:4f:43:7c:
                    ed:3d:8b:f8:81:45:13:6d:f7:9c:7b:c6:b9:1d:76:
                    65:c2:6d:07:e7:53:83:0f:72:75:6e:91:0a:31:3f:
                    e7:bf:03:f4:18:80:94:84:3e:0f:a4:cd:8f:34:1e:
                    b1:f3:ce:c1:73:b6:06:ed:1e:bc:e2:39:5d:43:68:
                    b4:b9:c7:0c:95:47:54:c4:9a:54:40:aa:a3:3e:64:
                    00:f0:4a:60:4a:16:83:d5:e8:f3:98:41:86:8b:fb:
                    0c:f7:ac:b5:49:2d:e4:aa:c0:d6:52:98:24:9e:6f:
                    b9:c7:12:10:36:1e:38:94:af:7e:26:a7:9c:87:ad:
                    b8:9a:95:9c:ae:4d:0f:21:da:f3:7b:ec:a1:e7:1a:
                    47:27:f9:12:4d:aa:c6:ae:50:2e:cc:91:db:4f:cd:
                    9a:4e:b9:ce:dd:1b:45:79:0c:5c:24:f4:01:44:de:
                    22:2f:4b:39:01:79:3f:e7:4c:43:f7:fd:a8:33:3c:
                    fb:12:86:52:d1:6d:71:e9:cc:4b:4e:aa:62:83:f3:
                    71:8a:50:1f:33:aa:ee:0e:b0:81:d2:eb:bf:77:e3:
                    42:e9:8f:1f:40:b9:e3:c7:eb:ac:ce:fa:6d:e1:fe:
                    1c:55:e9:81:22:86:a6:a9:9e:d3:d6:b9:63:56:cd:
                    34:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:84:E4:41:84:DE:51:0D:F7:0F:67:52:BC:8C:09:86:FD:CF:C1:C6
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a33313a3a2f34382d3438203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:31::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:bc:62:a8:68:40:a7:95:c6:d2:f0:a3:be:48:bc:4b:1b:05:
         bb:a3:e1:22:54:64:9e:09:18:a6:88:b8:8a:c9:fe:c0:67:e5:
         9b:32:fb:d9:d2:b2:85:e7:d4:97:46:e2:89:2b:d2:b6:c6:44:
         96:90:26:e2:73:01:ac:ad:11:82:18:0c:23:06:5c:8a:3f:f3:
         a4:b0:8f:dc:21:2b:38:dd:32:e4:11:5c:32:75:d4:be:be:a7:
         db:ac:a3:35:b7:5e:0e:25:7d:37:f2:17:eb:d4:0c:b5:d4:70:
         79:99:53:fc:49:0f:06:49:b2:10:1c:41:b5:4f:af:8d:a3:fb:
         78:77:b2:6d:89:ec:82:a4:36:96:54:d3:20:2a:20:57:90:35:
         ad:2d:57:54:b3:3f:85:c8:1c:df:33:8e:71:4d:cc:ad:ab:86:
         9e:f3:4c:a4:cb:b4:3c:4e:04:03:73:8a:86:b8:7c:64:29:e9:
         00:f9:69:bc:05:ea:96:1c:0e:dd:54:38:ee:64:72:c9:0c:97:
         7f:be:9d:a0:8d:92:f6:58:b4:20:37:95:c5:da:7c:0a:9a:01:
         28:b3:08:0d:93:93:ef:8f:71:68:b2:3a:0f:7f:74:6b:36:9f:
         e3:a2:ff:54:86:37:db:9d:55:6b:9d:5e:9f:1d:47:37:2d:94:
         84:cb:5b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----