Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a313a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a313a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          1q3B8fFWjdkIQvPo307JcW155KxrabjEEY25YXW6bqM=
Subject key identifier:   4F:51:96:6D:50:D7:9B:4D:9F:BC:57:28:AC:BE:69:76:55:D7:6E:76
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       606415A5BCC7B1C5D74537893E5CD5807B916C29
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a313a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:56 +0000
ROA not before:           Mon 29 Jan 2024 15:01:56 +0000
ROA not after:            Mon 27 Jan 2025 15:06:56 +0000
asID:                     266437
IP address blocks:        2804:37d0:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:64:15:a5:bc:c7:b1:c5:d7:45:37:89:3e:5c:d5:80:7b:91:6c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:56 2024 GMT
            Not After : Jan 27 15:06:56 2025 GMT
        Subject: CN=4F51966D50D79B4D9FBC5728ACBE697655D76E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:66:7a:68:09:3a:94:2f:d0:43:f9:bd:a5:
                    40:97:ef:38:af:94:67:01:ed:4b:82:d5:9f:c6:0e:
                    83:d1:f8:d6:54:c5:0e:d4:7e:80:b8:37:90:92:aa:
                    38:6a:47:49:88:4a:c7:0f:00:66:ae:2e:d3:65:8a:
                    d3:7f:8c:02:68:ad:21:a5:34:14:7b:eb:c8:ea:2d:
                    c3:29:ce:fb:db:76:4d:5b:e0:90:fe:9b:4d:1a:af:
                    53:e0:c7:d4:73:6b:f8:db:33:ba:80:2a:4c:0a:2b:
                    e4:73:70:60:fe:ec:40:2e:a5:6e:2d:13:3f:89:97:
                    25:9d:46:cf:e9:7f:00:f4:04:9a:7a:f7:41:93:64:
                    63:d7:19:d3:24:11:db:5d:c6:6b:b6:53:af:59:f3:
                    9c:83:49:e1:b4:30:09:f4:c3:fe:29:c0:10:23:96:
                    db:93:7c:f1:72:22:af:0f:b2:ab:60:ff:29:04:93:
                    d4:a1:aa:24:e6:b6:f0:dd:60:5b:bf:f5:a0:db:30:
                    21:b4:68:75:c5:e0:50:b0:68:ec:a3:c0:75:b9:64:
                    43:c2:52:2d:30:93:a0:56:ab:95:d7:18:51:32:ca:
                    7e:fb:19:a3:65:d1:1f:bb:5a:98:85:83:3c:d8:93:
                    f9:af:7b:76:4b:0f:a3:94:c1:de:4d:ba:28:29:30:
                    a3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:51:96:6D:50:D7:9B:4D:9F:BC:57:28:AC:BE:69:76:55:D7:6E:76
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a313a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:40:25:7e:4a:24:a2:2f:a4:3c:1f:66:ec:3c:e4:2b:d6:7b:
         f9:03:fc:aa:8e:6e:2c:65:4a:22:92:42:77:61:7e:49:01:dc:
         ec:d3:b4:bd:d5:f0:75:06:f4:20:20:9d:cb:76:11:a7:c4:2a:
         7b:5e:c1:41:39:bc:9f:ca:6e:75:70:cb:61:1f:fe:aa:12:22:
         e5:c3:59:59:f2:0e:30:96:00:08:27:0a:c1:09:a4:07:0e:04:
         02:3d:88:9d:49:ad:f6:f4:c8:98:6d:da:53:ae:68:f1:df:76:
         42:01:d3:17:a4:ab:6f:f2:75:a3:33:0c:19:c9:08:c4:23:b3:
         48:24:fc:a8:f7:c1:00:81:e5:f1:3b:2a:41:94:d5:9a:3c:0f:
         fd:e4:3a:6c:47:bd:f2:5e:f3:fb:d1:5f:87:a0:05:58:c9:c0:
         6c:de:95:8a:cb:93:2b:5c:9a:b8:d2:32:3b:57:94:86:6e:08:
         10:09:26:6c:f3:f5:0e:ce:19:a0:aa:3b:64:49:ac:fa:2f:94:
         4b:c4:56:3b:c4:ab:1f:54:f7:5a:07:11:a1:c8:f2:3a:78:1d:
         cf:9a:88:4b:c6:4b:db:17:de:c5:c0:25:92:51:77:d4:87:6a:
         12:d2:fe:46:c2:7f:62:b8:af:3a:a3:02:1a:02:c7:85:e4:37:
         28:5f:8f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----