Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a353030313a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a353030313a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          GbpFGz7pJuE8Ro14s+XpgF3bYDRCjeG/KlWBMNB1zcA=
Subject key identifier:   75:E5:98:85:E0:4C:8A:36:CD:45:E7:43:75:CE:F0:98:50:30:CF:74
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       4262BA503E3C1EC6B1FCE0D6FF643F0CA0773BD4
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a353030313a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:57 +0000
ROA not before:           Mon 29 Jan 2024 15:01:57 +0000
ROA not after:            Mon 27 Jan 2025 15:06:57 +0000
asID:                     266437
IP address blocks:        2804:37d0:5001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:62:ba:50:3e:3c:1e:c6:b1:fc:e0:d6:ff:64:3f:0c:a0:77:3b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:57 2024 GMT
            Not After : Jan 27 15:06:57 2025 GMT
        Subject: CN=75E59885E04C8A36CD45E74375CEF0985030CF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:82:e0:57:c4:52:f5:9b:29:73:f4:32:8e:
                    2f:dc:00:40:ec:06:05:6a:b6:13:ce:fc:50:38:35:
                    c8:3c:08:06:6a:dd:6d:80:c4:44:ca:e2:c8:0f:ca:
                    f8:89:74:9c:54:89:2a:4c:76:64:83:1c:e0:cf:ff:
                    e0:56:3f:8c:97:76:4f:79:c7:6b:9f:97:2a:f9:5a:
                    d3:82:99:9f:b3:00:ae:a2:cd:e2:16:a3:03:df:13:
                    a9:3b:b7:af:24:22:55:85:af:ea:ed:02:fa:3c:fe:
                    a0:b9:b9:d0:02:38:e2:94:40:35:09:0b:3e:59:19:
                    5a:5c:20:c2:be:ee:a3:46:5c:9e:c5:7e:f6:d5:f3:
                    06:89:38:9c:ec:b8:18:a3:8d:c4:a4:41:32:c2:80:
                    ec:d8:1a:11:e8:43:a4:af:20:3f:cb:06:31:80:2d:
                    56:7b:11:53:81:79:b8:0c:10:7a:4b:e8:b3:39:03:
                    6a:8a:12:dc:10:7a:ac:f6:96:d1:fa:a9:eb:f9:46:
                    bf:dd:3b:d8:cb:31:9e:a0:02:aa:80:96:6f:fd:b2:
                    54:67:4c:4f:bd:a1:fc:af:08:b4:cb:75:5c:f8:26:
                    9e:c6:cd:57:5b:33:44:87:7e:07:5c:39:80:8b:8a:
                    d5:ad:bc:c7:e8:dc:e5:01:f8:bb:1c:d5:a3:18:c4:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E5:98:85:E0:4C:8A:36:CD:45:E7:43:75:CE:F0:98:50:30:CF:74
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a353030313a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:5001::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:c3:d2:83:93:3d:f6:7f:03:48:56:b8:e3:7e:11:9a:7e:7d:
         a0:66:b7:f5:f5:64:3a:ce:8d:7e:88:46:f0:15:ef:18:92:0e:
         d3:65:74:b9:57:38:ad:7e:a9:81:ac:67:87:57:93:aa:d5:1f:
         3c:b1:b6:2c:f6:dc:b9:71:34:30:5c:c8:62:f1:f8:18:ea:79:
         70:4d:3c:f0:16:e5:d2:59:fe:da:2a:ee:21:6c:ce:fa:0a:95:
         d6:a1:84:cf:e1:83:54:0c:98:a8:4e:9a:b5:c3:d2:e8:54:f4:
         31:e7:bd:4b:a5:3a:c5:c5:8a:ec:4b:e2:66:ab:0f:3b:7f:d2:
         be:f2:e6:4d:d4:56:e8:36:d5:61:6b:a7:4f:10:b2:7c:f4:af:
         3b:2e:b0:77:39:b0:7e:e0:93:25:76:4e:24:ef:f0:ba:2c:e3:
         2b:b1:c8:dc:7e:7e:16:25:c3:ad:cc:84:d1:bc:13:ec:cb:3e:
         b2:3a:bf:91:c6:c4:cd:b7:0a:5c:d2:0c:6c:2e:07:32:92:58:
         a0:cc:af:b1:29:f3:f0:d0:0d:7b:5f:9c:2f:14:52:66:0f:22:
         a1:86:48:41:df:3a:18:54:69:97:a5:0b:26:38:44:14:56:2d:
         17:37:d0:ea:dd:92:70:7d:ae:af:52:13:b4:40:73:32:df:a5:
         59:17:42:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----