Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030313a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a373030313a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          pu0wqLKCZmizMVnHVqe4KN8RHd+nnvqa/XLxolx8dl8=
Subject key identifier:   16:C2:C6:6D:1D:2F:1D:D0:ED:A0:EE:24:EA:66:77:CA:3B:D5:00:A0
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       245F2E6D12AEDC6E285C083CCAD12F4A793BEEBB
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030313a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:56 +0000
ROA not before:           Mon 29 Jan 2024 15:01:56 +0000
ROA not after:            Mon 27 Jan 2025 15:06:56 +0000
asID:                     266437
IP address blocks:        2804:37d0:7001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5f:2e:6d:12:ae:dc:6e:28:5c:08:3c:ca:d1:2f:4a:79:3b:ee:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:56 2024 GMT
            Not After : Jan 27 15:06:56 2025 GMT
        Subject: CN=16C2C66D1D2F1DD0EDA0EE24EA6677CA3BD500A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:48:b8:96:06:35:68:f8:6a:4f:14:3e:b3:7a:
                    ce:8b:9e:63:bc:7b:e6:c1:59:24:f6:7d:39:cb:86:
                    ce:35:1b:3c:1d:08:4c:0b:a9:fa:96:af:ab:1e:1e:
                    8a:6f:fb:1e:70:2f:6e:f9:52:a6:c3:63:b7:91:95:
                    d7:b5:54:8d:c2:19:9a:13:a5:28:4f:e9:f2:82:bf:
                    a7:df:03:91:84:75:91:18:d2:95:4b:eb:69:f7:dd:
                    9b:74:84:00:a1:51:96:38:74:ee:21:0c:7e:98:a4:
                    a5:53:48:a7:da:8d:fe:f6:6d:ec:95:80:7b:02:d9:
                    41:bb:e7:9d:82:75:6f:2f:56:7f:d5:32:b9:b1:42:
                    ea:33:08:03:0c:df:8f:bc:23:25:b7:86:10:8f:73:
                    16:d8:75:76:16:56:ea:2d:e8:69:9f:89:89:bf:87:
                    0c:fb:fd:b4:ea:36:01:8e:ed:4d:d9:e0:d0:9b:c7:
                    fb:02:20:88:aa:d3:b2:d7:bc:6a:17:52:2d:94:d2:
                    6a:7c:b3:7c:57:48:f7:a3:c2:aa:7d:2c:cd:99:62:
                    b5:ec:ca:65:1c:4c:32:3c:f1:be:62:55:21:6e:1a:
                    83:0f:81:31:38:f4:90:f3:31:23:64:71:49:01:cd:
                    ce:07:25:ee:10:55:ad:a1:20:61:a4:67:5f:23:f1:
                    c9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C2:C6:6D:1D:2F:1D:D0:ED:A0:EE:24:EA:66:77:CA:3B:D5:00:A0
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030313a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:7001::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:86:d3:56:c4:6d:11:02:45:a5:81:72:8a:d8:9b:c8:cf:5a:
         78:2b:f8:29:20:11:6b:20:a1:27:05:61:9d:32:9f:d5:26:d8:
         3e:26:15:37:a5:15:a5:c3:be:21:0b:ac:11:6c:df:f2:ba:69:
         41:dd:12:93:95:8c:77:57:ce:7a:b6:1e:a8:0a:bc:c9:4b:e1:
         c2:e0:d1:07:53:af:a0:a8:9b:c3:ff:49:24:54:23:2b:0b:50:
         21:03:76:77:cb:9e:cc:72:96:68:5d:45:7d:96:98:5f:cd:97:
         ea:ac:d6:6d:36:dc:f0:bb:e9:03:f8:c1:78:54:60:a2:93:41:
         a8:ec:b3:47:68:42:1c:c1:8b:8c:79:da:6d:f0:62:db:88:3c:
         22:b2:61:40:f9:ff:a1:8d:fc:46:41:3e:8d:a9:56:70:fc:31:
         1c:b2:17:42:e9:53:3d:72:eb:20:43:26:5a:97:ee:03:93:a8:
         0a:0c:f4:2d:72:0a:a1:f7:d1:fc:bf:d8:1e:0c:26:95:12:e0:
         ec:91:2f:0a:17:2d:45:00:69:e0:80:9b:db:38:f2:bc:11:92:
         b2:bb:00:f8:a1:58:3e:c5:5b:54:b5:fe:bc:9d:b8:1a:8c:5f:
         ed:03:9f:d4:ef:01:26:f3:cd:f6:66:53:94:af:f9:3d:9b:ae:
         80:23:ff:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----