Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/323830343a336636343a3a2f33322d313238203d3e20323635383930.roa
File:                     323830343a336636343a3a2f33322d313238203d3e20323635383930.roa (raw, json)
Hash identifier:          nxY9DZFSt1APWMzLVJOlwHZo43e26UUyjH7pDf/rSsY=
Subject key identifier:   A9:43:AC:9E:67:11:1E:A8:8C:54:A2:C7:5E:88:D8:AA:7E:81:76:05
Certificate issuer:       /CN=13E0E480CD71A0FDF89D8FB5CAB399744C305796
Certificate serial:       0AD292667C8FCE7B7165E48CB77AC43AB2A1B2B6
Authority key identifier: 13:E0:E4:80:CD:71:A0:FD:F8:9D:8F:B5:CA:B3:99:74:4C:30:57:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13E0E480CD71A0FDF89D8FB5CAB399744C305796.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/323830343a336636343a3a2f33322d313238203d3e20323635383930.roa
Signing time:             Sat 23 Mar 2024 15:24:13 +0000
ROA not before:           Sat 23 Mar 2024 15:19:13 +0000
ROA not after:            Sat 22 Mar 2025 15:24:13 +0000
asID:                     265890
IP address blocks:        2804:3f64::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d2:92:66:7c:8f:ce:7b:71:65:e4:8c:b7:7a:c4:3a:b2:a1:b2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13E0E480CD71A0FDF89D8FB5CAB399744C305796
        Validity
            Not Before: Mar 23 15:19:13 2024 GMT
            Not After : Mar 22 15:24:13 2025 GMT
        Subject: CN=A943AC9E67111EA88C54A2C75E88D8AA7E817605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:ec:eb:8b:88:d0:8a:ac:d7:3c:74:6d:25:
                    ff:5a:2c:0f:ca:db:4e:9d:6b:2f:74:1f:a7:2d:da:
                    ef:4a:99:bf:1b:34:4e:fe:30:dd:a5:5d:e8:a5:ab:
                    0c:de:be:49:6d:c0:27:f1:7f:44:34:a3:ad:c5:ba:
                    40:72:2f:e1:26:f3:4a:c7:f3:d3:92:01:f9:bd:5a:
                    08:8c:8a:fc:44:96:c6:4e:9a:33:94:53:79:d9:a6:
                    26:c2:7e:5e:01:ea:19:61:44:32:75:f8:41:06:dd:
                    19:99:c0:41:e7:40:1f:b7:d0:47:6b:53:a4:ee:2a:
                    06:6f:be:df:5e:9c:e0:02:42:53:71:72:d8:b1:e4:
                    f4:ff:bc:69:69:1a:f6:f2:e6:ec:f5:78:f1:a9:74:
                    1a:27:6b:9d:05:7c:4a:0e:86:17:ca:c2:79:5b:be:
                    68:7e:45:e1:6d:f4:55:39:bc:41:8f:9f:e4:92:ae:
                    3b:3f:ec:92:70:3a:2b:56:22:19:13:77:23:57:e5:
                    cf:d2:1c:cc:c6:06:75:18:04:bc:4b:3b:40:26:a4:
                    a2:83:6b:46:74:c1:b3:12:d4:5c:51:c3:fa:ed:5e:
                    23:1c:39:12:c2:b3:c2:6c:c1:5f:78:e7:de:bd:b2:
                    e9:23:55:f3:bd:0e:10:d4:6b:26:59:67:a0:6c:ab:
                    04:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:43:AC:9E:67:11:1E:A8:8C:54:A2:C7:5E:88:D8:AA:7E:81:76:05
            X509v3 Authority Key Identifier:
                keyid:13:E0:E4:80:CD:71:A0:FD:F8:9D:8F:B5:CA:B3:99:74:4C:30:57:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/13E0E480CD71A0FDF89D8FB5CAB399744C305796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13E0E480CD71A0FDF89D8FB5CAB399744C305796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/323830343a336636343a3a2f33322d313238203d3e20323635383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f64::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:3e:93:fd:27:0c:ca:23:0a:86:92:8b:34:d1:28:ca:d6:35:
         4f:4e:16:da:b7:eb:ea:21:46:b6:fc:1c:2f:e4:76:c6:9c:ff:
         5b:4c:d1:76:cc:9b:fe:9b:b3:9a:87:61:5a:d8:94:32:d5:d2:
         fd:6e:54:ff:60:58:73:90:fe:4a:24:d4:fe:5c:c6:64:9d:df:
         1f:c5:0f:a4:c6:5c:5a:c6:11:84:fc:2e:7a:e9:cc:27:c5:60:
         92:8e:ac:6f:e3:0e:dc:0f:88:9a:02:ed:52:6e:49:ee:ad:3d:
         b9:c3:6d:60:1e:03:2b:e1:d2:03:72:53:ee:c8:e3:78:00:9f:
         0d:73:3e:2d:e6:36:e7:cb:1b:e3:fc:c8:b5:0c:1d:7a:70:24:
         c5:cc:c1:f7:a5:d4:5c:b1:ac:90:d0:3f:64:86:cf:4e:bb:b8:
         cc:9f:39:2d:f9:21:be:47:63:fa:ec:0d:a8:a5:2d:f8:75:e4:
         c9:37:b1:d1:4d:1f:de:20:89:de:3c:52:7c:01:8e:21:ea:0d:
         d3:25:c3:f0:1c:ff:f4:9c:5b:1d:a2:de:d1:1f:a5:ba:b8:2c:
         4f:99:d9:50:ec:17:76:45:c4:b0:8b:5f:40:08:4d:03:65:bf:
         bf:f9:aa:53:5c:a2:49:24:d4:e6:19:9f:68:39:57:3c:ac:7a:
         37:ef:91:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----