Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/323830343a373261633a633030303a3a2f33342d3334203d3e20323730383638.roa
File:                     323830343a373261633a633030303a3a2f33342d3334203d3e20323730383638.roa (raw, json)
Hash identifier:          LGVXlyU/P2WaT2u55VsNbosahMVHwEzrOpf8re8Bv44=
Subject key identifier:   B9:0A:57:76:63:DC:1D:E3:8D:42:BF:72:56:0E:E8:B5:34:C0:66:F2
Certificate issuer:       /CN=135AE876E6C6DE65386EB266C9EEC0A2E23574DE
Certificate serial:       377316FB48BE2A0F3E1A4E7EE947A2FAC20A4EB6
Authority key identifier: 13:5A:E8:76:E6:C6:DE:65:38:6E:B2:66:C9:EE:C0:A2:E2:35:74:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/135AE876E6C6DE65386EB266C9EEC0A2E23574DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/323830343a373261633a633030303a3a2f33342d3334203d3e20323730383638.roa
Signing time:             Wed 12 Jul 2023 01:32:46 +0000
ROA not before:           Wed 12 Jul 2023 01:27:46 +0000
ROA not after:            Wed 10 Jul 2024 01:32:46 +0000
asID:                     270868
IP address blocks:        2804:72ac:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:73:16:fb:48:be:2a:0f:3e:1a:4e:7e:e9:47:a2:fa:c2:0a:4e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135AE876E6C6DE65386EB266C9EEC0A2E23574DE
        Validity
            Not Before: Jul 12 01:27:46 2023 GMT
            Not After : Jul 10 01:32:46 2024 GMT
        Subject: CN=B90A577663DC1DE38D42BF72560EE8B534C066F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:06:35:ae:d8:29:a7:e2:88:19:6d:fc:d5:
                    8c:e0:7e:29:fb:11:79:30:3c:02:08:06:7f:20:ff:
                    c3:7d:96:05:fd:51:9c:04:78:8e:cb:da:c0:ec:02:
                    26:f2:92:79:e7:c8:9d:d3:ec:4a:f1:1c:84:f0:97:
                    9f:21:9f:b4:c5:1c:f6:f5:99:9e:e2:3b:28:24:d8:
                    ba:94:e4:33:bc:67:ba:57:72:1a:0a:20:0a:f9:0a:
                    4f:91:30:ef:5c:55:42:04:7f:9f:c6:45:3e:71:ab:
                    2e:62:97:69:41:a8:f2:01:d1:d4:dd:65:2b:85:cc:
                    25:81:bb:36:4c:8f:7a:9b:46:1f:a5:7e:be:44:9b:
                    da:3a:c7:2a:b0:e4:25:78:ca:1c:1a:1c:ed:6f:32:
                    d7:d7:3e:4c:d3:06:92:5d:c4:f1:7d:5f:e6:c8:9a:
                    57:fd:6d:41:47:43:0a:70:fa:fd:f7:a1:52:cb:5c:
                    c6:55:f9:1a:a3:39:14:fc:6e:09:0d:6d:8e:33:bb:
                    36:d6:40:30:93:4a:ba:12:d0:77:91:8e:3a:db:33:
                    27:15:89:8c:4f:13:07:20:16:43:0d:11:ab:63:7c:
                    37:0a:a8:df:bf:8f:c5:2f:b4:d7:4b:66:ea:1c:15:
                    d3:13:68:52:c1:52:0a:2b:31:a3:f7:82:ee:f4:11:
                    54:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0A:57:76:63:DC:1D:E3:8D:42:BF:72:56:0E:E8:B5:34:C0:66:F2
            X509v3 Authority Key Identifier:
                keyid:13:5A:E8:76:E6:C6:DE:65:38:6E:B2:66:C9:EE:C0:A2:E2:35:74:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/135AE876E6C6DE65386EB266C9EEC0A2E23574DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/135AE876E6C6DE65386EB266C9EEC0A2E23574DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/323830343a373261633a633030303a3a2f33342d3334203d3e20323730383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72ac:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         59:6e:0b:f2:82:98:17:ff:2b:16:49:36:9d:4e:78:4e:cd:c3:
         6e:96:36:b9:5d:82:23:f0:5c:77:98:3d:7d:f5:7f:11:6c:6c:
         2c:27:a6:d4:cb:4c:11:75:9b:ee:3e:eb:17:bb:08:d2:0a:2f:
         d6:70:9e:a6:80:e8:7f:dc:84:f9:4e:1c:e7:74:07:a0:5e:11:
         b5:3e:e5:aa:47:3a:51:ff:6d:fb:4e:a5:59:ac:65:4e:a0:8f:
         c7:28:92:82:bd:0e:4e:76:d6:53:37:29:0a:31:5c:80:72:26:
         0a:b2:4f:be:f3:dd:78:aa:96:66:2f:44:94:96:85:36:40:ef:
         34:71:75:e3:29:de:3f:ad:d6:c3:55:0d:93:9e:c5:f9:d5:ae:
         8f:e0:e2:07:11:8f:11:14:4e:20:6a:90:fc:d0:b5:72:97:09:
         51:25:15:0d:f8:e0:71:98:0a:b3:fa:05:ae:9a:61:52:93:d8:
         e6:27:c2:45:f9:bf:23:10:d5:e1:b7:78:a6:e8:42:4e:8e:a7:
         56:9a:5f:f1:c8:aa:b1:01:8d:02:2d:7e:05:79:63:6c:e5:b4:
         5b:18:5f:9b:0d:87:ab:16:1f:6c:b6:86:ba:e4:6f:d0:30:15:
         6b:c0:38:ad:59:ed:33:87:63:b8:40:a3:92:e6:3d:ec:6a:19:
         cb:09:f0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----