Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/1/323830343a383762633a3a2f33322d3332203d3e203631363039.roa
File:                     323830343a383762633a3a2f33322d3332203d3e203631363039.roa (raw, json)
Hash identifier:          Ph8sT4HXvXt+syUaA7pSC1q5uwkLL3Gls00zN+93GcY=
Subject key identifier:   05:B9:18:B3:94:A9:7F:0D:1F:7B:B3:93:40:C7:48:60:A2:6A:40:D4
Certificate issuer:       /CN=973F6A4A45C193554E33DEDC138FE388BED07FD5
Certificate serial:       4CF6368BBF80B7707EEDE0885376180DFFB6BE24
Authority key identifier: 97:3F:6A:4A:45:C1:93:55:4E:33:DE:DC:13:8F:E3:88:BE:D0:7F:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/973F6A4A45C193554E33DEDC138FE388BED07FD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/1/323830343a383762633a3a2f33322d3332203d3e203631363039.roa
Signing time:             Wed 24 Jan 2024 11:14:14 +0000
ROA not before:           Wed 24 Jan 2024 11:09:14 +0000
ROA not after:            Wed 22 Jan 2025 11:14:14 +0000
asID:                     61609
IP address blocks:        2804:87bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f6:36:8b:bf:80:b7:70:7e:ed:e0:88:53:76:18:0d:ff:b6:be:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=973F6A4A45C193554E33DEDC138FE388BED07FD5
        Validity
            Not Before: Jan 24 11:09:14 2024 GMT
            Not After : Jan 22 11:14:14 2025 GMT
        Subject: CN=05B918B394A97F0D1F7BB39340C74860A26A40D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b6:9f:f4:0d:b4:47:59:c3:37:e8:38:4d:b8:
                    95:07:16:d3:e4:76:fe:f4:4b:f4:cc:fc:8a:0a:6b:
                    e4:84:8d:4e:fd:22:cd:70:07:e8:66:f1:c2:87:54:
                    bb:dc:2c:35:7f:c1:cf:f8:f1:13:f0:21:e1:1e:32:
                    2e:8b:6b:b8:3a:00:56:63:84:8b:8a:ec:d4:e4:d9:
                    c2:86:f8:ad:8a:a8:49:1b:56:c5:1e:ce:11:13:af:
                    48:82:4b:65:06:e9:32:1f:14:4b:5f:13:cd:d2:89:
                    26:f1:58:49:c6:6f:86:67:b4:60:df:a3:e0:7b:70:
                    19:c4:7f:0e:4e:83:58:a1:5d:aa:92:7f:16:69:b7:
                    87:dc:f4:d6:a0:0b:0d:f7:84:0c:34:c6:63:ba:13:
                    26:01:09:e7:61:ab:05:b8:40:2b:6c:a1:8b:e6:c3:
                    54:ad:b0:fb:1f:e2:d8:81:74:6e:0b:91:dc:12:3d:
                    da:32:4e:71:4a:fb:30:72:8e:e8:02:9b:4a:35:f5:
                    86:d2:ef:eb:9a:47:90:5f:40:08:78:a7:da:c1:9d:
                    14:7b:8f:a0:77:4a:4c:96:90:af:12:69:f4:e6:be:
                    d0:ee:e0:f4:16:9d:d4:5d:38:8d:1b:7c:e3:a0:bd:
                    aa:91:4f:d0:8b:5f:fd:ae:2d:6e:9d:66:7c:1c:1e:
                    f2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B9:18:B3:94:A9:7F:0D:1F:7B:B3:93:40:C7:48:60:A2:6A:40:D4
            X509v3 Authority Key Identifier:
                keyid:97:3F:6A:4A:45:C1:93:55:4E:33:DE:DC:13:8F:E3:88:BE:D0:7F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/1/973F6A4A45C193554E33DEDC138FE388BED07FD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/973F6A4A45C193554E33DEDC138FE388BED07FD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/1/323830343a383762633a3a2f33322d3332203d3e203631363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:10:2d:e0:1d:07:45:b9:a4:57:58:64:04:41:86:88:05:9d:
         b3:b7:5e:4b:0d:68:fe:0b:27:7c:ee:dd:d5:5a:8a:a6:66:06:
         77:9e:15:b1:40:9d:ce:d1:70:17:db:29:eb:a5:21:e5:38:e6:
         aa:b9:17:7b:a9:52:e7:e5:6d:df:1a:cf:4c:aa:21:d5:17:15:
         9f:58:18:e6:1f:61:b1:9a:24:12:59:46:7b:9e:51:0d:f2:bc:
         db:75:6d:ca:e2:47:44:91:d8:c9:4a:a0:62:b3:af:88:d9:a6:
         28:11:e0:20:20:fa:31:66:b5:93:4f:25:93:9f:f1:21:bb:21:
         77:82:63:3d:2c:88:6b:46:1a:78:4f:3c:3d:d2:2f:83:9f:1a:
         c4:68:9b:2e:88:e2:1c:e2:23:72:69:a9:82:85:65:4c:d1:53:
         2b:99:5c:8d:cc:f9:bf:02:2f:a1:02:9c:e9:84:e5:08:44:25:
         29:78:35:b8:22:61:28:94:91:f5:0d:f0:fc:f9:29:33:87:0e:
         b3:64:88:bd:89:13:26:80:86:9e:0e:94:7c:2d:08:0c:9a:9d:
         6e:b2:17:87:6a:25:31:7c:b4:c2:db:7b:13:01:84:0b:44:52:
         8f:5f:ed:08:bb:61:9f:74:b4:c6:03:fb:05:a9:ad:d3:58:1a:
         04:03:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----