Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a343033663a3a2f34382d3438203d3e20323633323736.roa
File:                     323830343a313633383a343033663a3a2f34382d3438203d3e20323633323736.roa (raw, json)
Hash identifier:          Wo4ZFv7l1OlhOFm6lZcpwTzM5nMXGDQ6YjaOv0yt2dg=
Subject key identifier:   2A:77:BF:C7:A4:17:54:87:C9:75:BB:FC:A2:D3:F8:38:38:83:0F:B3
Certificate issuer:       /CN=187B3B176F0808984D1B5075CAF3CA9D636EBBD6
Certificate serial:       17E739B9533A66BD237CD958921A362B61EFAF4D
Authority key identifier: 18:7B:3B:17:6F:08:08:98:4D:1B:50:75:CA:F3:CA:9D:63:6E:BB:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a343033663a3a2f34382d3438203d3e20323633323736.roa
Signing time:             Wed 25 Oct 2023 16:12:42 +0000
ROA not before:           Wed 25 Oct 2023 16:07:42 +0000
ROA not after:            Wed 23 Oct 2024 16:12:42 +0000
asID:                     263276
IP address blocks:        2804:1638:403f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e7:39:b9:53:3a:66:bd:23:7c:d9:58:92:1a:36:2b:61:ef:af:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=187B3B176F0808984D1B5075CAF3CA9D636EBBD6
        Validity
            Not Before: Oct 25 16:07:42 2023 GMT
            Not After : Oct 23 16:12:42 2024 GMT
        Subject: CN=2A77BFC7A4175487C975BBFCA2D3F83838830FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:db:90:12:b4:7f:1a:2d:99:1d:98:e9:0e:
                    d7:cf:4f:9b:a2:15:07:5b:c8:50:7a:2e:74:c9:1b:
                    b5:cb:b3:0a:0a:aa:18:b5:66:ef:39:0b:1b:d1:6e:
                    08:12:d9:83:62:08:01:8e:a2:41:59:56:72:b8:52:
                    5e:c1:0d:ce:8f:cf:1d:38:b2:21:ff:5f:d3:28:03:
                    b6:00:b2:02:4c:02:7e:d0:5b:8f:60:ff:74:13:4c:
                    76:88:dd:b4:c4:33:e9:51:a8:87:7f:a1:0f:af:32:
                    18:96:e6:17:ca:ce:2f:3b:9b:68:c9:ed:cd:f7:60:
                    d9:4a:73:65:0e:5a:de:c9:3c:a3:4b:93:9f:53:6e:
                    a7:75:2e:b7:7a:45:df:d4:fb:4d:01:a6:10:a4:53:
                    cb:ef:9f:53:29:b0:ef:8f:5a:b3:06:7e:05:e4:8e:
                    d4:c4:3d:37:2d:9c:8a:31:1f:d6:af:d2:cc:ca:00:
                    ae:04:6c:78:94:b3:7c:97:08:b9:76:62:53:69:92:
                    9a:b9:78:70:9f:b5:09:bd:26:c6:f9:5f:1d:c1:fc:
                    fa:3b:99:e9:5e:27:e5:9a:77:14:00:c3:82:80:3a:
                    39:46:7e:4b:96:a5:47:7f:70:c5:6d:26:33:6f:de:
                    81:7e:4f:0e:39:8b:f8:d0:7c:f7:60:00:5c:59:66:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:77:BF:C7:A4:17:54:87:C9:75:BB:FC:A2:D3:F8:38:38:83:0F:B3
            X509v3 Authority Key Identifier:
                keyid:18:7B:3B:17:6F:08:08:98:4D:1B:50:75:CA:F3:CA:9D:63:6E:BB:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a343033663a3a2f34382d3438203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1638:403f::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:55:d0:98:28:d3:b6:0e:d9:67:49:b9:9a:93:4c:c5:cb:20:
         8c:0e:4b:02:62:21:07:58:bd:34:78:c3:8a:15:20:9d:9e:ba:
         c7:20:82:ca:cb:50:58:92:f8:ab:d0:49:f6:dd:74:f2:59:45:
         bb:86:aa:99:4f:2f:6b:3b:74:48:9a:71:4a:47:ab:ea:8e:5c:
         3f:c1:97:d3:8d:69:40:02:fb:90:20:f7:3a:46:07:42:94:64:
         f9:bd:d5:cc:ee:8b:76:e7:11:41:9f:53:55:04:9a:fe:3f:0b:
         79:7f:32:20:d8:37:86:c9:ae:eb:a1:b8:81:2a:22:d1:ba:3d:
         f2:cd:80:91:99:04:a3:c9:63:43:14:ce:f7:03:b9:eb:b7:76:
         7c:5b:8a:b1:5c:49:ca:f2:3d:f5:7d:26:ad:09:83:44:43:42:
         a5:5d:91:cc:fc:a9:af:af:f5:33:cd:b4:e6:a5:f9:f6:34:32:
         ae:81:0f:0f:26:5b:a1:f5:ee:2f:3d:ae:33:33:02:0a:c6:1d:
         60:55:e6:28:ae:a0:3c:00:fa:20:d5:68:6b:76:63:09:cf:1d:
         c5:0b:2a:eb:3b:b5:3a:e1:97:75:d9:c7:2d:9c:7d:7f:be:b7:
         af:f1:a6:70:71:a0:db:3a:89:b3:71:24:df:e6:a7:47:1c:2d:
         c6:9d:9b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----