Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a333a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a333a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          4EpPm33d1VVjcQGX9AT7QCrGXTzPfkge0d+gGoWrunE=
Subject key identifier:   DD:33:51:AE:53:A0:0B:16:A5:F4:34:28:35:A4:31:E3:26:AF:BC:44
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       0718B0B3DF5D90B0CB1347FACD2C1C29991ED962
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a333a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:59 +0000
ROA not before:           Mon 29 Jan 2024 15:01:59 +0000
ROA not after:            Mon 27 Jan 2025 15:06:59 +0000
asID:                     266437
IP address blocks:        2804:37d0:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:18:b0:b3:df:5d:90:b0:cb:13:47:fa:cd:2c:1c:29:99:1e:d9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:59 2024 GMT
            Not After : Jan 27 15:06:59 2025 GMT
        Subject: CN=DD3351AE53A00B16A5F4342835A431E326AFBC44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:7b:f9:b7:f1:fc:5e:f5:12:2f:24:63:34:
                    92:c8:c4:ee:a8:15:7e:9c:b1:83:ad:ed:8b:21:14:
                    4a:4d:61:b2:6b:76:e9:94:5c:29:26:c5:36:66:e9:
                    19:ad:45:38:0b:55:d8:8a:12:68:c3:db:1b:ae:09:
                    63:b8:07:ef:ce:2d:1f:89:a0:95:12:37:f1:d3:24:
                    48:6a:e1:6a:21:9b:01:54:ec:49:10:82:f4:fc:3f:
                    a6:65:95:14:63:4b:38:6a:25:d5:fb:e7:a9:a0:ba:
                    fc:ae:46:12:c4:95:25:39:ca:48:7e:e2:4b:15:cd:
                    c9:1c:b0:14:57:24:63:72:28:87:0d:2d:f7:fe:65:
                    e2:6f:17:41:a0:00:a7:1a:41:28:80:28:06:a7:ff:
                    06:1b:5b:a9:c6:85:e8:8a:f0:35:fe:ff:54:00:ac:
                    57:5f:c9:6d:8d:3d:a6:4d:27:84:81:d0:e1:17:c1:
                    31:ec:58:1d:f8:11:53:43:51:2d:ba:2d:1c:18:79:
                    5c:e9:2a:42:88:4a:09:56:e1:2c:c2:86:55:fa:0f:
                    42:de:34:5b:bb:c1:6d:8d:17:5f:c4:80:b2:c0:93:
                    04:8c:75:a2:8f:06:52:e2:2c:84:d3:f5:98:0b:dd:
                    bf:7a:05:80:41:84:0a:dc:28:3f:3e:60:77:31:df:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:33:51:AE:53:A0:0B:16:A5:F4:34:28:35:A4:31:E3:26:AF:BC:44
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a333a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:40:99:16:cf:4d:40:e2:bb:73:c1:e7:fe:66:b7:35:6a:32:
         11:a0:b0:b2:30:6c:82:c2:1f:bf:ca:73:e3:51:88:0f:43:cf:
         00:96:3f:f1:60:c2:3f:a2:00:05:23:89:1d:5b:99:79:be:9b:
         50:22:33:bb:94:44:5a:e4:f1:18:8b:27:49:81:15:75:ef:41:
         97:f5:6f:a4:c5:76:1c:23:e8:5d:82:28:1d:aa:ef:53:62:df:
         c1:ad:5d:22:bb:3d:29:e4:21:c8:09:6e:58:9e:f8:8b:87:52:
         69:6a:1c:57:8b:2b:84:57:d9:96:93:51:d7:1a:4a:20:6d:0a:
         5a:3f:b7:6d:bf:d5:eb:63:a5:16:c0:41:f9:6b:70:49:a6:bd:
         14:a6:63:98:a8:be:77:8a:2a:7f:33:5d:3d:74:d6:46:7a:45:
         5e:2d:c8:35:2b:37:7b:df:d5:69:c4:d8:22:65:62:8e:3c:f1:
         74:a6:d5:be:68:e2:36:10:a1:d3:59:b3:80:d0:87:7f:52:30:
         f6:40:4a:be:ab:3d:76:9a:c3:c4:a3:29:ec:77:dd:0e:52:cd:
         ac:c3:69:8c:46:bc:49:c6:94:93:ba:83:38:ab:17:79:cb:2f:
         00:c3:2e:52:9c:e3:99:9a:de:0c:e5:1c:0c:c6:1a:81:f6:be:
         ab:b5:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----