Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a343034323a3a2f34382d3438203d3e20323633323736.roa
File:                     323830343a313633383a343034323a3a2f34382d3438203d3e20323633323736.roa (raw, json)
Hash identifier:          NZLQOak14NdveVqof9eX3TFTLeagFXnsanwpmdDMiPc=
Subject key identifier:   E2:E6:FF:79:80:52:A5:BB:ED:7E:B6:97:39:75:6B:59:1E:55:D2:5C
Certificate issuer:       /CN=187B3B176F0808984D1B5075CAF3CA9D636EBBD6
Certificate serial:       3A77C2AE3C6CDC21A2E744348BF812E8B42D918E
Authority key identifier: 18:7B:3B:17:6F:08:08:98:4D:1B:50:75:CA:F3:CA:9D:63:6E:BB:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a343034323a3a2f34382d3438203d3e20323633323736.roa
Signing time:             Wed 25 Oct 2023 16:13:29 +0000
ROA not before:           Wed 25 Oct 2023 16:08:29 +0000
ROA not after:            Wed 23 Oct 2024 16:13:29 +0000
asID:                     263276
IP address blocks:        2804:1638:4042::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:77:c2:ae:3c:6c:dc:21:a2:e7:44:34:8b:f8:12:e8:b4:2d:91:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=187B3B176F0808984D1B5075CAF3CA9D636EBBD6
        Validity
            Not Before: Oct 25 16:08:29 2023 GMT
            Not After : Oct 23 16:13:29 2024 GMT
        Subject: CN=E2E6FF798052A5BBED7EB69739756B591E55D25C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0c:92:31:78:39:b9:4f:05:68:2e:1f:6f:a9:
                    dc:17:82:6a:da:14:67:ac:14:0f:99:25:50:5c:2c:
                    32:61:77:92:d8:2b:a1:c5:a5:48:98:7b:67:23:03:
                    4c:be:12:04:fd:a1:28:fc:32:0c:f3:36:30:52:1c:
                    89:f5:95:64:dd:35:c5:44:67:49:6d:c7:6a:24:ba:
                    3a:dc:0a:bb:55:3b:7b:18:eb:ce:dc:7e:20:78:1c:
                    5f:c7:b3:2f:3f:02:89:1e:a1:d9:f6:19:e4:e1:6c:
                    a1:1e:13:40:ff:78:de:d1:cb:cc:d1:de:38:7e:fb:
                    e7:ba:a8:04:8f:d0:97:bd:9e:6d:48:52:4c:33:9e:
                    82:42:84:56:6c:4a:68:63:30:ce:6c:23:f0:82:01:
                    a5:7b:3c:3d:d3:94:b3:91:96:ee:81:0c:43:37:7c:
                    c0:71:d5:ed:3f:4f:33:52:e9:56:ff:36:ca:09:84:
                    47:3e:45:30:60:94:a0:ae:33:e1:a8:41:04:b0:e9:
                    8b:90:89:c9:42:b6:e9:a5:1e:17:ca:b4:e5:6c:12:
                    2e:66:81:09:3c:92:7a:b6:6c:63:29:67:63:bb:c3:
                    93:9c:bb:3d:86:04:d4:83:ed:cd:8c:a1:6f:c5:f6:
                    fa:84:20:42:60:c4:0b:a5:d6:94:a8:9e:f9:a7:4d:
                    88:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E6:FF:79:80:52:A5:BB:ED:7E:B6:97:39:75:6B:59:1E:55:D2:5C
            X509v3 Authority Key Identifier:
                keyid:18:7B:3B:17:6F:08:08:98:4D:1B:50:75:CA:F3:CA:9D:63:6E:BB:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a343034323a3a2f34382d3438203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1638:4042::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:b2:98:fd:9a:50:25:a4:5d:bd:45:67:94:be:b7:87:8f:d6:
         f1:b1:e3:7d:3a:ca:36:ca:fd:da:6c:77:01:2e:f3:d5:0e:68:
         ce:f2:58:70:d9:00:29:37:9a:17:6c:0f:10:46:91:e3:83:71:
         39:05:b5:20:46:23:a2:71:b4:fe:77:c0:57:3f:b9:f5:41:0a:
         01:0c:3f:ca:47:c2:84:15:9b:35:60:63:c9:cc:db:99:2d:bc:
         fb:e3:1b:6c:6a:e0:d8:66:6c:79:ca:40:b3:c4:d5:30:c7:ba:
         0f:ba:09:71:eb:b0:b3:bd:36:ac:6d:05:47:c0:b3:62:6e:b2:
         f6:fa:bc:8d:f5:27:d8:ce:fa:db:5f:39:f9:4c:fb:22:a0:3a:
         f3:33:d9:51:ae:41:5e:2c:94:99:b4:be:b3:3a:e9:be:77:ae:
         39:0c:0a:c7:36:36:4b:87:db:e6:4c:1e:85:21:66:ab:e6:dc:
         8e:2f:f8:11:af:c9:31:cb:7e:8d:94:8d:a8:61:60:be:1c:a7:
         81:63:f6:79:c2:1a:97:3b:e6:ad:f0:d8:c8:2f:e7:4e:3d:d1:
         82:21:3c:c7:b2:96:89:c5:e5:52:62:33:5d:d1:b4:e4:0f:7b:
         cd:38:f7:5f:b5:54:f3:0c:ff:fa:50:16:22:c7:a0:d2:d3:59:
         f5:93:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----