Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a3a2f3334203d3e20323636303230.roa
File:                     323830343a333933633a3a2f3334203d3e20323636303230.roa (raw, json)
Hash identifier:          fJ17c3zRkQabnEXSH266HP7d2e04+eO80l/4olnbTMM=
Subject key identifier:   91:0B:B6:DE:09:D4:9D:13:0C:25:E4:7B:DC:BB:C9:BC:A7:CE:95:66
Certificate issuer:       /CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
Certificate serial:       2EA7A6C6389B4E1E9BD0B4FB6EB257834B617180
Authority key identifier: 9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a3a2f3334203d3e20323636303230.roa
Signing time:             Wed 17 Jan 2024 15:00:01 +0000
ROA not before:           Wed 17 Jan 2024 14:55:01 +0000
ROA not after:            Fri 17 Jan 2025 15:00:01 +0000
asID:                     266020
IP address blocks:        2804:393c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a7:a6:c6:38:9b:4e:1e:9b:d0:b4:fb:6e:b2:57:83:4b:61:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
        Validity
            Not Before: Jan 17 14:55:01 2024 GMT
            Not After : Jan 17 15:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:db:e3:d8:48:47:ed:ba:2d:6e:11:11:c4:cd:
                    f7:0a:1d:79:0e:20:29:7c:7c:6b:f3:ae:fe:3c:be:
                    53:e2:7b:cd:06:fc:4e:a2:8a:22:36:19:0b:c0:aa:
                    00:04:c7:69:bf:6d:21:1a:de:9b:1d:37:16:2b:86:
                    28:22:ea:d1:d0:ee:8c:c9:89:a3:82:dd:5c:b8:ac:
                    37:f0:a3:8e:54:62:55:68:22:c7:71:14:02:cf:bc:
                    a6:15:14:94:03:60:50:e9:6c:46:ad:e1:3a:2e:f7:
                    84:8d:f2:83:ed:d8:0f:02:a2:04:40:bf:f5:62:95:
                    6b:3c:a1:1a:b8:25:a2:6b:bc:09:17:48:6c:61:f5:
                    ee:ed:c0:17:fb:53:ec:64:65:8f:49:9d:a3:3f:c2:
                    c8:ed:9d:60:88:34:25:f8:1c:a5:e4:c9:41:89:33:
                    04:12:e1:d0:e1:e1:61:b8:a5:94:67:4d:c0:44:d2:
                    55:ff:4f:38:1f:d6:42:92:68:58:05:37:d8:1f:20:
                    84:ef:0b:12:43:a2:fa:09:3d:fd:1b:cf:fb:44:e2:
                    46:6c:fb:cc:87:ec:6c:77:4e:37:2c:04:13:a4:a5:
                    70:e1:7f:27:89:21:04:92:b2:cb:66:3b:17:0f:64:
                    9a:ec:2a:2c:51:56:6c:c1:6e:be:1f:d7:af:6a:eb:
                    5d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0B:B6:DE:09:D4:9D:13:0C:25:E4:7B:DC:BB:C9:BC:A7:CE:95:66
            X509v3 Authority Key Identifier:
                keyid:9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a3a2f3334203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c::/34

    Signature Algorithm: sha256WithRSAEncryption
         3c:1b:0e:d5:4b:fd:5f:9f:bb:b1:c3:9b:9e:90:03:3a:62:e6:
         9e:09:2c:16:b7:96:ff:4a:e4:a8:0e:67:45:8f:c0:4e:c3:48:
         a7:e0:a9:10:8f:35:bd:44:25:b8:54:6a:89:9e:11:6f:2a:c8:
         63:39:aa:ee:10:cf:46:ff:8b:a2:c0:5d:93:26:b1:73:4d:d3:
         37:8d:e4:00:ac:3d:00:18:e7:9e:74:4a:b4:a0:3f:2f:96:98:
         0a:bd:26:d7:7b:3c:72:de:90:b6:f0:94:7d:c8:3c:4f:1c:83:
         3b:48:1b:15:63:69:29:01:1d:6e:dc:12:d5:67:24:c9:01:50:
         a1:23:71:aa:4c:3a:d3:82:85:bd:40:1b:b4:78:bf:8f:c2:16:
         8d:fb:1b:b8:20:de:91:bb:02:3e:a1:8f:4a:f5:a9:1a:68:c6:
         c1:96:5b:f9:e3:aa:ab:dc:c0:c3:90:3a:b5:b1:2f:35:e6:5a:
         61:cd:ec:b9:8a:90:14:3a:df:c7:54:1d:96:5b:46:30:fa:b4:
         c8:d1:33:35:6b:56:67:db:8b:e7:7d:3f:23:57:37:42:ee:ab:
         d9:75:89:c6:be:63:b2:c8:33:b6:e3:2f:73:76:fe:92:99:29:
         e8:56:52:a0:2d:ff:b6:65:2b:d0:19:b4:4a:3c:cd:99:e5:e8:
         ab:fc:c2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----