Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/323830343a336439303a3a2f33322d3438203d3e20323636353339.roa
File:                     323830343a336439303a3a2f33322d3438203d3e20323636353339.roa (raw, json)
Hash identifier:          1mLWnzRwY3105lo/BGH/I8oTY/HrA7kvL/KVq+nHcFA=
Subject key identifier:   8F:E8:74:E9:96:83:EF:88:7C:1C:72:31:3B:28:17:A9:0B:A9:A8:1F
Certificate issuer:       /CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
Certificate serial:       7EB2E6250BE6504F2EEC793E2174C8C87B2A6B55
Authority key identifier: A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/323830343a336439303a3a2f33322d3438203d3e20323636353339.roa
Signing time:             Wed 08 Nov 2023 14:47:02 +0000
ROA not before:           Wed 08 Nov 2023 14:42:02 +0000
ROA not after:            Wed 06 Nov 2024 14:47:02 +0000
asID:                     266539
IP address blocks:        2804:3d90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b2:e6:25:0b:e6:50:4f:2e:ec:79:3e:21:74:c8:c8:7b:2a:6b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
        Validity
            Not Before: Nov  8 14:42:02 2023 GMT
            Not After : Nov  6 14:47:02 2024 GMT
        Subject: CN=8FE874E99683EF887C1C72313B2817A90BA9A81F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:64:b7:34:29:02:64:f0:5b:c2:48:06:49:21:
                    6c:7c:32:87:6a:73:69:f9:75:4e:2e:40:45:4c:00:
                    5e:58:3e:e7:06:35:c0:9a:95:e0:83:bd:46:44:fc:
                    04:18:40:9c:d8:1d:2b:b8:e4:d2:14:97:a7:5f:63:
                    e4:c7:db:32:0e:0c:b1:f0:4d:ce:17:21:21:ef:e0:
                    df:fc:6e:7c:36:9b:0e:53:d7:81:5b:41:1c:a3:b6:
                    cc:7c:59:ae:74:f8:88:3d:eb:a9:f0:58:cb:f9:62:
                    bc:8f:fe:03:de:7b:fd:18:17:5b:ff:f6:55:2c:29:
                    4d:e3:34:95:a8:b5:e4:e5:ec:1b:74:42:2b:f7:60:
                    35:b4:0f:06:11:c2:5d:d9:61:f0:2b:63:76:1b:91:
                    7d:54:36:c8:e2:10:58:dd:d8:1f:5b:d2:5c:c7:6b:
                    76:1f:09:80:ca:f3:fe:ae:30:d0:96:99:04:df:f5:
                    1a:22:c8:fc:ff:90:3c:d4:95:1d:31:50:f7:7b:04:
                    c1:80:b9:ab:12:89:54:26:c8:35:ca:6f:7e:a0:df:
                    77:13:85:6a:17:e4:55:46:86:e4:35:a8:fc:62:23:
                    e8:dd:1a:37:85:58:0c:a7:23:61:fc:a3:85:76:40:
                    d1:d5:ca:e0:89:6f:e0:e7:06:12:32:85:67:fd:1f:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E8:74:E9:96:83:EF:88:7C:1C:72:31:3B:28:17:A9:0B:A9:A8:1F
            X509v3 Authority Key Identifier:
                keyid:A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/323830343a336439303a3a2f33322d3438203d3e20323636353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:4d:de:4e:8d:14:7c:26:af:64:c5:49:64:72:97:8f:c3:16:
         dd:ba:1f:28:43:04:18:09:f9:33:3f:06:09:e9:7f:29:b5:88:
         d4:1f:f8:77:a3:c7:43:63:df:5d:1f:11:4a:fc:37:0d:c1:1e:
         5c:a3:08:3f:ac:40:1e:ba:68:cb:76:3d:4f:a5:e4:59:e8:01:
         68:6a:6f:c5:ab:eb:54:49:27:f3:b1:47:fe:76:3d:fe:ad:be:
         fc:2b:f1:66:10:4b:48:a7:71:40:a2:16:e8:6b:b4:d2:2b:ab:
         9c:cd:7d:3d:da:e4:c8:4e:cd:e0:de:06:d6:92:df:7a:58:7f:
         68:03:b0:b9:e1:cd:bf:64:95:85:74:9f:a9:18:2e:6d:e9:b4:
         f3:9f:a7:62:9b:56:8b:8d:d5:32:a9:5c:db:f7:c8:3d:cc:1c:
         1a:76:23:b9:e9:51:d5:83:d8:ae:ad:43:95:dd:c1:1d:80:7d:
         47:10:8b:86:c5:2e:3c:ce:a0:97:50:5a:24:96:4d:78:f9:63:
         07:3e:b6:79:c4:77:b3:39:bf:50:2f:f9:83:54:e2:aa:b5:81:
         00:35:99:83:72:fa:38:37:06:34:e4:f4:68:50:b8:9c:5f:6e:
         e5:d5:12:c2:f3:6b:64:e4:b0:35:cf:53:fd:12:95:8e:3d:66:
         f2:60:2e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----