Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030343a3a2f34362d3436203d3e20323636343337.roa
File:                     323830343a333764303a373030343a3a2f34362d3436203d3e20323636343337.roa (raw, json)
Hash identifier:          G7mT+GGYGP219bcXmTnMObYgiYIBlGJkcnTiedNzlUQ=
Subject key identifier:   63:AD:31:7C:66:74:A0:9F:F5:76:C7:A4:B5:37:21:9D:CA:6C:F4:6A
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       35D4AB5F80CC5F18F65C09AFF3174C258626C4D1
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030343a3a2f34362d3436203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:57 +0000
ROA not before:           Mon 29 Jan 2024 15:01:57 +0000
ROA not after:            Mon 27 Jan 2025 15:06:57 +0000
asID:                     266437
IP address blocks:        2804:37d0:7004::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d4:ab:5f:80:cc:5f:18:f6:5c:09:af:f3:17:4c:25:86:26:c4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:57 2024 GMT
            Not After : Jan 27 15:06:57 2025 GMT
        Subject: CN=63AD317C6674A09FF576C7A4B537219DCA6CF46A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:01:8d:7a:fa:0c:9c:af:c5:79:eb:1c:19:
                    2e:63:92:e9:26:30:44:24:1f:44:88:81:e7:1f:7f:
                    49:55:62:21:66:77:2b:67:df:43:99:45:98:9f:3e:
                    27:a9:64:da:f6:97:87:b7:3a:10:07:78:e7:ad:80:
                    6c:ea:a9:c5:d0:82:bb:6d:38:3b:2f:ac:a0:f6:b0:
                    64:0c:72:f5:18:8b:37:40:05:a6:2a:27:94:c4:bc:
                    87:b0:67:d1:f1:40:3f:dc:f0:fa:b0:3a:fc:16:22:
                    87:79:f1:88:e9:a5:46:6b:5b:dc:70:a4:e2:ac:d1:
                    ec:22:b0:f3:75:f1:79:ae:08:1e:b5:06:67:f7:99:
                    79:9b:b4:e3:fa:0d:d2:91:9b:6d:19:53:55:5f:13:
                    80:67:52:0a:4e:13:45:ba:ce:2d:a0:00:0e:9d:bc:
                    fc:f5:f0:d6:c3:7c:d9:4c:0b:9e:d6:4f:38:de:2b:
                    9a:e0:6a:cf:cd:54:c7:66:8a:f0:69:00:1a:a0:0c:
                    e1:1c:3c:67:33:3d:ad:9a:50:d7:ee:62:72:33:f2:
                    a7:84:13:09:53:d1:f1:51:c9:a9:89:2c:4f:be:f2:
                    08:62:3e:ee:5e:c5:f6:0a:b4:0a:56:0f:06:33:4b:
                    7d:3c:3f:82:71:73:b9:91:85:33:a8:3d:0e:af:9c:
                    f9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AD:31:7C:66:74:A0:9F:F5:76:C7:A4:B5:37:21:9D:CA:6C:F4:6A
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030343a3a2f34362d3436203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:7004::/46

    Signature Algorithm: sha256WithRSAEncryption
         43:83:7d:d8:cb:e2:12:de:7a:8b:99:ab:79:bf:a2:79:ec:0c:
         c4:05:72:77:52:a6:ba:26:20:7a:1a:c6:aa:c2:e8:cb:d2:75:
         17:64:1a:17:09:e5:c2:09:22:4a:13:bd:7e:4d:36:fc:3f:78:
         21:b5:3d:e2:a3:1e:ff:ff:8a:1a:00:d0:52:23:e0:a2:76:82:
         68:05:da:3a:19:e3:ee:4f:40:2c:05:e7:21:7a:6f:24:dd:1e:
         28:26:33:02:1f:d7:8f:74:11:d3:80:86:2c:70:13:97:6a:6e:
         43:7b:11:91:84:ac:2e:b5:9d:49:5c:cc:72:4e:e7:9f:b1:86:
         07:6f:84:78:3e:64:2c:19:d5:41:b2:7a:1c:c9:88:66:42:41:
         10:20:39:ed:45:6a:97:94:f3:4f:8c:e6:49:fd:14:46:77:2c:
         12:5c:f8:65:e5:c3:1d:1c:8b:f6:f8:2a:a6:1f:3d:6f:4d:b9:
         55:cd:92:a4:f7:13:af:3e:ca:d7:aa:8d:c4:4a:26:c3:fc:e9:
         bb:ad:c6:52:49:04:c2:f0:b6:34:bc:60:a6:b6:b6:25:1f:b7:
         d5:87:7c:77:7c:c2:00:63:99:34:ac:68:0f:32:4a:18:dc:04:
         21:5a:08:67:ee:77:5e:52:5a:cf:e9:cc:79:a7:0a:e6:07:1f:
         2e:4a:77:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----