Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa
File:                     323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (raw, json)
Hash identifier:          /OCfo9Cu3byAQepvE2VTRdrGr6VgE3J9bjP9MLKc35A=
Subject key identifier:   31:2E:67:9B:CF:53:2D:E5:A0:BB:80:D2:58:CF:9E:04:CA:B3:EC:C9
Certificate issuer:       /CN=DB3CA746E597EE92E31AA5AF597CA07291DFB128
Certificate serial:       0CFC51855ECD018A0CA4892A1991DBA2A465159F
Authority key identifier: DB:3C:A7:46:E5:97:EE:92:E3:1A:A5:AF:59:7C:A0:72:91:DF:B1:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3CA746E597EE92E31AA5AF597CA07291DFB128.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa
Signing time:             Thu 14 Dec 2023 13:24:27 +0000
ROA not before:           Thu 14 Dec 2023 13:19:27 +0000
ROA not after:            Thu 12 Dec 2024 13:24:27 +0000
asID:                     269145
IP address blocks:        2804:6018:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fc:51:85:5e:cd:01:8a:0c:a4:89:2a:19:91:db:a2:a4:65:15:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3CA746E597EE92E31AA5AF597CA07291DFB128
        Validity
            Not Before: Dec 14 13:19:27 2023 GMT
            Not After : Dec 12 13:24:27 2024 GMT
        Subject: CN=312E679BCF532DE5A0BB80D258CF9E04CAB3ECC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:7e:27:05:e6:ed:8e:b6:eb:7b:fa:40:07:
                    a0:52:7d:b5:fd:d0:bd:21:44:82:34:c3:3e:f0:e7:
                    bf:a1:6d:9b:06:ac:e4:e4:81:af:5f:c5:a1:c2:b4:
                    1f:23:19:68:26:d2:20:c0:ff:23:b9:14:2b:90:1b:
                    84:e2:06:df:2a:a0:5a:03:84:71:5b:9b:a8:14:74:
                    1d:2c:54:79:f7:3d:69:76:48:dd:40:b7:19:09:1a:
                    ba:68:d7:2e:0a:31:55:6a:06:c3:30:1c:0b:8a:0e:
                    dd:16:a6:67:15:1d:13:73:e3:a7:6b:50:f8:9c:6b:
                    f2:40:a0:5b:7f:5f:bb:1e:87:30:9c:57:19:9b:b2:
                    5c:3e:ec:d4:45:9d:b8:53:58:78:e0:6b:fe:25:7e:
                    79:bc:b5:68:15:38:88:03:d7:7b:f5:dd:b7:f3:b9:
                    ee:03:10:5d:7b:fa:e0:34:d8:49:41:6e:7d:51:48:
                    7b:3d:32:ea:86:71:ba:bc:4e:b5:f5:74:c8:52:59:
                    39:f9:6b:31:a3:a4:6a:bf:73:f9:82:67:6b:b4:64:
                    6c:48:4e:f5:06:71:0b:9f:b6:d6:fc:33:5b:e4:f2:
                    24:10:df:9d:bf:8d:7c:fb:fb:9a:47:d1:bc:93:18:
                    a4:8f:14:69:3e:08:a6:1a:71:34:f8:66:47:35:02:
                    c9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2E:67:9B:CF:53:2D:E5:A0:BB:80:D2:58:CF:9E:04:CA:B3:EC:C9
            X509v3 Authority Key Identifier:
                keyid:DB:3C:A7:46:E5:97:EE:92:E3:1A:A5:AF:59:7C:A0:72:91:DF:B1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/DB3CA746E597EE92E31AA5AF597CA07291DFB128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3CA746E597EE92E31AA5AF597CA07291DFB128.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6018:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         40:4f:14:30:ed:6a:cf:8a:de:55:10:7d:ce:18:71:49:a7:f5:
         6f:03:f8:35:7c:9e:9d:16:0b:41:0c:72:bc:cb:cd:74:65:72:
         1a:42:fe:af:57:bd:62:15:40:9e:6b:d6:15:3a:3a:ea:4f:94:
         be:86:55:3c:be:4b:60:6d:b6:3f:fe:9e:a4:d0:cb:cc:54:e3:
         97:6b:27:6c:56:c3:b8:24:06:c4:4b:05:24:60:ee:78:62:cd:
         6a:0b:7e:85:b3:6a:92:50:6d:3d:3b:22:21:fc:a4:92:96:a1:
         4a:e1:c5:4b:65:30:7e:e5:69:5d:44:8d:fe:42:e0:06:90:51:
         41:10:af:77:56:35:a7:db:65:0a:c5:1c:24:74:c3:b9:af:b2:
         21:f2:4c:eb:ba:4a:95:72:61:9f:88:ab:78:1d:59:69:fa:e5:
         50:65:ee:27:03:6f:a2:c5:36:e0:fb:73:d9:75:9d:08:29:7c:
         e4:0b:08:90:5b:e7:15:6f:88:f3:d5:71:a5:0d:dc:d8:15:d5:
         b4:14:6d:8d:ea:e8:3c:99:3f:48:83:aa:fa:e3:81:1c:8b:73:
         ee:17:df:ec:45:49:2d:b6:a3:8b:43:4f:36:52:b0:58:9c:5d:
         1b:2d:ae:ac:26:4e:c6:49:16:50:6e:9a:8d:f8:18:5a:25:69:
         75:a1:40:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----