Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/323830343a363264303a633030303a3a2f33342d3334203d3e20323639333230.roa
File:                     323830343a363264303a633030303a3a2f33342d3334203d3e20323639333230.roa (raw, json)
Hash identifier:          m+pLXRefZ2NMmDoRmQlGGcYXnPriH/t7P73SQd2VI1w=
Subject key identifier:   5F:41:4C:17:8D:02:30:3F:83:C4:80:77:54:FA:1E:B2:0D:33:FF:CE
Certificate issuer:       /CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
Certificate serial:       3D41C64914F5687968F19C73C3B47B1F88C28925
Authority key identifier: 1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/323830343a363264303a633030303a3a2f33342d3334203d3e20323639333230.roa
Signing time:             Thu 09 Nov 2023 14:30:52 +0000
ROA not before:           Thu 09 Nov 2023 14:25:52 +0000
ROA not after:            Thu 07 Nov 2024 14:30:52 +0000
asID:                     269320
IP address blocks:        2804:62d0:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:41:c6:49:14:f5:68:79:68:f1:9c:73:c3:b4:7b:1f:88:c2:89:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
        Validity
            Not Before: Nov  9 14:25:52 2023 GMT
            Not After : Nov  7 14:30:52 2024 GMT
        Subject: CN=5F414C178D02303F83C4807754FA1EB20D33FFCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:87:a9:e6:9b:de:42:4b:68:0a:23:a1:33:
                    58:9e:4f:18:a7:a0:15:bd:85:0d:1e:5b:a3:59:d2:
                    56:0b:e0:9a:10:e3:de:f1:65:04:34:93:29:c0:da:
                    b6:c8:94:2b:8c:d8:9e:f8:7d:e3:12:eb:f2:16:f6:
                    41:d0:14:1b:0f:0f:af:42:27:6c:47:76:79:4b:86:
                    b4:17:14:2b:51:57:fb:82:03:ac:5f:c6:2f:93:c7:
                    c2:9f:f4:1a:72:32:64:66:d7:f9:3b:4a:f1:8d:05:
                    67:4b:48:f1:03:47:7b:db:2f:5e:ba:44:43:71:a5:
                    b5:56:7e:5c:45:ca:03:61:9e:c8:84:9f:5e:d8:f7:
                    56:d5:1f:05:80:15:91:88:af:c7:01:2e:d3:36:cf:
                    35:30:1e:10:d5:3e:90:c0:3c:d5:69:2c:f4:f9:bb:
                    e0:91:bd:45:e3:5d:02:e3:6f:07:e5:26:d3:19:d0:
                    73:5b:45:fb:f1:0c:7c:b3:8d:05:bc:f7:a8:39:77:
                    32:36:af:b0:c4:21:17:bd:17:d2:be:ff:41:99:b6:
                    58:c5:bf:b8:a7:f4:c2:90:05:32:bb:f4:0d:07:11:
                    88:d0:c9:cb:dd:17:ae:4a:6a:ff:2a:7f:6b:fd:d2:
                    87:1e:0e:c9:04:0a:2f:5c:15:ae:78:3b:81:bb:d7:
                    23:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:41:4C:17:8D:02:30:3F:83:C4:80:77:54:FA:1E:B2:0D:33:FF:CE
            X509v3 Authority Key Identifier:
                keyid:1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/323830343a363264303a633030303a3a2f33342d3334203d3e20323639333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62d0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8a:13:7d:19:c5:83:25:62:41:96:e8:4d:a8:d2:c0:c2:23:23:
         ac:1e:2b:56:53:f1:c3:8e:94:4e:9a:1f:00:6a:0e:34:ce:b6:
         5b:89:fa:c9:73:ad:2a:68:ca:99:02:d2:0c:82:af:64:89:6c:
         09:67:b1:e4:a8:89:70:80:7f:d6:1b:92:48:fc:18:26:44:6f:
         9a:91:82:99:60:12:df:8c:c1:11:4f:3c:7e:5d:d7:50:51:66:
         69:46:71:1d:8b:44:83:1b:a2:a6:ac:e9:e1:fb:1d:8c:99:8b:
         53:1f:5b:3f:4c:d1:7e:0d:dc:62:d6:dc:31:53:fe:61:e9:1d:
         6e:b5:5e:dd:83:da:0b:f5:2b:f9:64:2a:91:3f:4d:27:cc:48:
         12:cd:0f:5a:a6:64:06:31:7c:6e:ff:68:6d:c4:bd:a3:5c:b8:
         a9:c7:9d:fc:9b:b6:ba:84:31:83:00:a3:63:7f:30:e8:22:df:
         9c:bd:39:2e:3b:a4:0c:72:54:01:ea:f0:4e:e3:6a:a2:fb:87:
         d0:c9:8f:de:62:29:94:7d:aa:61:38:c0:de:11:3d:34:97:02:
         86:ea:51:56:21:69:b5:2a:cd:06:c1:3a:fd:40:6a:96:c7:15:
         93:2e:4c:eb:f0:ed:57:6d:8f:6f:1e:e8:39:74:fc:9f:d5:5c:
         78:c0:4e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----