Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/323830343a373464633a3a2f33322d3332203d3e20323731303038.roa
File:                     323830343a373464633a3a2f33322d3332203d3e20323731303038.roa (raw, json)
Hash identifier:          63w5q8HIXlFZpgACF0mvG2vkakUKbQRCkN7kPhCokq0=
Subject key identifier:   EC:5A:FC:75:84:9F:FA:B7:79:91:F0:DB:D9:39:0B:49:79:48:50:55
Certificate issuer:       /CN=7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0
Certificate serial:       42BC6D84499FAFDF4365384871D3588C50E6184E
Authority key identifier: 7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/323830343a373464633a3a2f33322d3332203d3e20323731303038.roa
Signing time:             Fri 27 Oct 2023 18:45:22 +0000
ROA not before:           Fri 27 Oct 2023 18:40:22 +0000
ROA not after:            Fri 25 Oct 2024 18:45:22 +0000
asID:                     271008
IP address blocks:        2804:74dc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bc:6d:84:49:9f:af:df:43:65:38:48:71:d3:58:8c:50:e6:18:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0
        Validity
            Not Before: Oct 27 18:40:22 2023 GMT
            Not After : Oct 25 18:45:22 2024 GMT
        Subject: CN=EC5AFC75849FFAB77991F0DBD9390B4979485055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:e8:09:84:04:d3:83:73:7a:92:5b:9d:40:
                    ec:b7:e3:2b:de:f5:88:d1:c8:b7:b4:51:7a:02:3e:
                    ef:78:41:6b:44:f4:b9:e5:a7:1d:42:ab:85:b7:77:
                    0b:4d:e7:4c:b3:47:1a:72:03:74:18:50:b9:4c:e4:
                    09:fe:10:aa:c1:46:ef:d7:0d:54:36:e4:a6:1a:30:
                    b7:5a:5b:a4:90:ff:8f:98:95:2d:62:d4:2d:07:81:
                    60:e3:02:a8:16:8c:ff:d9:6e:68:71:ab:00:09:85:
                    f5:ea:c6:1d:dc:68:9f:1c:c8:5d:46:05:f6:03:61:
                    0c:d9:40:e5:9f:44:53:ac:07:68:5b:86:13:b9:1d:
                    97:7d:99:1a:1c:72:c8:df:b1:a6:a4:e1:0c:34:c3:
                    32:de:c5:12:4d:e2:ae:53:7c:27:30:0e:f1:ca:56:
                    3a:0a:84:b2:05:40:c8:56:08:90:e8:3f:be:7a:a2:
                    65:17:a2:e0:7e:a0:f5:2a:51:5a:24:78:b5:c4:ba:
                    52:64:13:de:cd:cf:11:5e:54:1e:8a:0c:f8:21:59:
                    a1:9e:97:2d:4d:36:cf:f6:d3:03:60:62:9d:69:cd:
                    fa:97:2e:f5:28:33:1e:a4:6d:70:c4:f8:32:06:2c:
                    67:2e:5f:b6:15:59:55:88:f5:14:51:7c:6f:4c:ae:
                    88:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5A:FC:75:84:9F:FA:B7:79:91:F0:DB:D9:39:0B:49:79:48:50:55
            X509v3 Authority Key Identifier:
                keyid:7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/323830343a373464633a3a2f33322d3332203d3e20323731303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:33:52:8d:dc:72:c8:43:02:c7:ad:df:a1:8a:e9:88:cb:10:
         fa:94:20:33:22:a5:ea:fb:f1:97:29:f3:c1:2b:80:de:3a:b5:
         bf:fd:ac:38:ce:73:45:60:30:2e:f9:43:a6:54:6f:1b:45:b8:
         29:89:de:8a:6e:e5:1d:e1:37:09:70:6e:1f:c7:a0:56:d9:0b:
         6e:4e:8a:36:14:f4:17:90:9e:10:fd:29:1c:9e:52:60:c7:d6:
         80:b4:18:d7:9b:e2:02:f6:9a:36:c9:34:09:f9:c2:3e:61:dd:
         4c:bc:bc:60:cd:4e:e5:f6:22:42:a1:45:ae:ee:a4:6e:01:d4:
         94:eb:63:24:e8:5d:2b:8b:f7:8c:a4:d8:2a:02:c7:bf:9b:05:
         be:3d:e7:cd:4f:3e:4f:38:44:b2:b6:32:c3:b1:12:ce:d0:30:
         43:a6:44:5d:ba:0f:9d:db:9c:55:ea:ba:99:fb:c6:21:4d:85:
         c4:39:25:26:87:d2:cc:9f:97:eb:aa:f9:10:36:a9:68:5a:5c:
         f5:c8:cc:13:93:04:03:e2:93:10:9c:41:d5:e1:91:c6:c8:0e:
         9d:a3:f8:53:68:f9:ce:1e:da:f5:04:d4:bd:63:30:33:40:d4:
         81:91:4d:87:be:92:c2:4a:4d:55:f4:c5:fe:37:d0:d7:0d:65:
         81:1d:aa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----