Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/323830343a363264303a3a2f33332d3333203d3e20323639333230.roa
File:                     323830343a363264303a3a2f33332d3333203d3e20323639333230.roa (raw, json)
Hash identifier:          YuAbZZMsfWNKVcxykPFUV35sCucQdx/kVA4yk8S5Mmw=
Subject key identifier:   C0:E9:EB:BB:0D:BF:DA:AE:E7:A4:A3:3C:DF:95:B8:97:C0:E6:54:9B
Certificate issuer:       /CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
Certificate serial:       67A65547E87386F67B22645EF0968DF87E3491BA
Authority key identifier: 1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/323830343a363264303a3a2f33332d3333203d3e20323639333230.roa
Signing time:             Thu 09 Nov 2023 14:30:53 +0000
ROA not before:           Thu 09 Nov 2023 14:25:53 +0000
ROA not after:            Thu 07 Nov 2024 14:30:53 +0000
asID:                     269320
IP address blocks:        2804:62d0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a6:55:47:e8:73:86:f6:7b:22:64:5e:f0:96:8d:f8:7e:34:91:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
        Validity
            Not Before: Nov  9 14:25:53 2023 GMT
            Not After : Nov  7 14:30:53 2024 GMT
        Subject: CN=C0E9EBBB0DBFDAAEE7A4A33CDF95B897C0E6549B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:fe:47:7d:53:7c:f0:aa:c9:74:27:ab:a6:
                    4a:23:03:6e:82:b3:d3:3c:8a:c5:03:4a:2a:43:36:
                    36:4d:37:a8:7d:5e:d3:55:db:1c:fe:e9:31:87:15:
                    14:b2:15:81:90:72:65:a7:30:9e:05:05:4d:cd:5f:
                    3d:9f:dc:1e:8c:82:4b:bb:a1:1f:c9:b6:de:97:82:
                    50:28:99:cd:f1:ee:8e:e5:8c:5e:9e:b2:69:fe:af:
                    f0:c1:fe:7f:51:a0:a6:55:37:f3:80:1c:0a:ef:06:
                    29:89:db:83:82:57:5b:ea:2f:8b:d2:b9:7a:32:19:
                    29:9e:b0:7a:f4:14:a4:45:76:64:51:85:b1:43:3d:
                    84:52:02:c2:e4:4d:0b:5f:fd:f8:8b:f5:98:ed:dd:
                    02:e2:4d:0d:3d:b2:98:22:f7:ef:3e:24:b9:20:b0:
                    0e:a2:36:c9:d2:c5:18:d9:ac:5f:59:be:75:12:f8:
                    e5:f3:12:99:eb:d8:92:17:68:b0:57:b0:da:04:d0:
                    51:6f:1b:bb:4a:7d:ec:ef:e5:0a:9d:d8:01:06:0c:
                    2f:ff:6f:56:46:d0:1d:0d:2d:a4:12:e9:a6:1c:b2:
                    29:ef:b6:01:f1:45:02:5d:aa:71:dd:45:4a:49:58:
                    2b:20:5b:b7:e0:fc:1b:dc:e7:34:cb:e8:71:e8:09:
                    1b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E9:EB:BB:0D:BF:DA:AE:E7:A4:A3:3C:DF:95:B8:97:C0:E6:54:9B
            X509v3 Authority Key Identifier:
                keyid:1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/323830343a363264303a3a2f33332d3333203d3e20323639333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62d0::/33

    Signature Algorithm: sha256WithRSAEncryption
         64:17:ba:0a:47:fb:0c:24:06:b1:75:cf:b9:a0:17:f7:d5:6c:
         2b:c4:32:4c:1f:1e:f4:89:a6:03:ba:c2:55:fe:20:22:55:fa:
         90:27:17:f3:9f:d5:ce:9f:aa:fa:05:f8:e4:46:db:34:f0:48:
         fa:22:cc:8a:a6:cc:ec:cc:1e:71:35:ea:d6:34:eb:1f:f8:82:
         fc:bc:95:03:9f:56:28:78:60:de:62:01:af:dc:6d:96:ca:3a:
         bb:7d:3b:9a:dc:6e:45:3d:68:09:3f:ff:dd:32:17:bf:b3:ab:
         98:98:65:bd:c6:29:b2:ac:b9:09:7f:54:3a:16:f4:6b:e8:41:
         75:ba:b3:14:2b:64:e4:b4:91:b5:cc:e2:74:52:43:ef:61:7d:
         71:46:bd:9d:18:6d:97:98:11:1a:e6:c1:2b:ec:34:4e:30:a7:
         d7:59:00:91:14:b0:48:40:a0:e9:60:35:b3:73:c7:f0:60:30:
         42:ce:12:2e:41:71:d0:f2:10:d1:2a:ce:11:67:4f:c5:62:62:
         27:9b:fc:52:d5:b6:d4:11:46:08:44:3c:3a:ae:a5:52:e8:d8:
         fb:60:80:70:99:c0:a8:0d:4b:90:62:88:b0:8e:1f:c5:45:93:
         77:17:41:bd:5d:e9:20:59:04:c5:a2:2f:c7:f2:b9:f8:b6:04:
         90:bc:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----