Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030383a3a2f34362d3436203d3e20323636343337.roa
File:                     323830343a333764303a373030383a3a2f34362d3436203d3e20323636343337.roa (raw, json)
Hash identifier:          KgjVRd2qwhjBx6hmVVsVwL9PkqTowFimMWAZRPttdw4=
Subject key identifier:   FC:B7:10:20:E5:BF:79:4A:E1:9E:62:17:1A:51:53:78:D8:25:36:B5
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       75D05BAD1D2F89517878B9CBD657C5E19E2D0ECF
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030383a3a2f34362d3436203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:58 +0000
ROA not before:           Mon 29 Jan 2024 15:01:58 +0000
ROA not after:            Mon 27 Jan 2025 15:06:58 +0000
asID:                     266437
IP address blocks:        2804:37d0:7008::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d0:5b:ad:1d:2f:89:51:78:78:b9:cb:d6:57:c5:e1:9e:2d:0e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:58 2024 GMT
            Not After : Jan 27 15:06:58 2025 GMT
        Subject: CN=FCB71020E5BF794AE19E62171A515378D82536B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d2:dc:e7:e3:2b:13:3a:7c:bc:52:01:9d:7a:
                    ea:27:3d:ab:8f:77:39:1b:4f:d7:3a:21:4b:b0:2a:
                    10:e8:77:bf:82:dc:b6:90:63:3c:a5:ae:3d:7d:bc:
                    c3:56:09:65:d1:6e:63:2e:41:54:4d:f8:a4:7a:c1:
                    29:a9:57:f1:b4:27:f1:97:3d:40:f3:99:76:cc:a9:
                    0b:df:03:75:4d:16:71:a1:9b:1c:1d:d1:60:10:29:
                    6f:4b:73:cf:b3:3d:ab:34:7b:8f:07:e9:b2:1a:0e:
                    ae:a6:78:c5:0d:53:eb:09:05:ee:71:2e:93:17:a5:
                    d8:c9:93:1b:75:43:d0:e7:d5:2f:16:a6:fe:80:2c:
                    da:2b:a6:b6:b0:5c:0f:38:50:8b:40:3c:db:5d:69:
                    8a:ba:e3:ee:80:d6:64:c9:2a:49:98:c1:b9:ec:55:
                    6a:70:58:42:f9:9c:34:57:3a:d3:c1:36:c7:d8:c2:
                    a4:21:57:a2:dc:e8:d8:be:4a:ad:49:8a:fa:d9:d4:
                    65:9e:ab:b1:f3:ab:4b:95:a8:a6:76:bf:c2:bf:50:
                    d8:65:35:90:b7:50:2d:26:22:c2:a9:9d:42:43:6d:
                    75:3a:2b:50:4a:9d:96:00:a6:33:45:c1:f0:f3:09:
                    25:de:57:47:68:c8:9d:8f:6e:27:fe:80:01:06:37:
                    a3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B7:10:20:E5:BF:79:4A:E1:9E:62:17:1A:51:53:78:D8:25:36:B5
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030383a3a2f34362d3436203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:7008::/46

    Signature Algorithm: sha256WithRSAEncryption
         74:94:16:e3:88:31:71:ce:69:3a:e2:be:0c:6e:c6:14:49:8b:
         f0:11:a8:41:a1:20:89:ee:54:49:84:9c:c4:dc:9f:e3:bb:fb:
         c8:61:b2:98:02:b7:22:dc:6e:a2:e8:e2:36:c7:4d:bb:61:f8:
         06:ef:02:93:4b:b7:66:72:75:e6:15:b6:73:8b:e0:ca:01:9f:
         27:26:13:67:9c:41:fe:3f:e4:cf:7d:c8:9b:ee:8f:99:d3:36:
         45:a0:b1:9f:45:f6:64:e9:65:32:56:90:2b:f4:44:d3:d6:1b:
         5b:1c:b2:0f:66:bd:27:74:af:44:9c:ff:66:60:c9:22:35:38:
         d1:fa:e9:8e:cb:66:d9:42:20:1f:12:93:d4:55:98:d7:58:7b:
         e7:8a:b2:5f:37:b3:9f:51:40:90:ba:2b:55:65:ef:e4:60:e8:
         b9:ed:b5:1c:cd:5d:ff:c9:12:54:c2:4c:6d:bc:57:6c:56:06:
         c8:fa:ca:c1:3c:d0:64:37:ad:bb:a3:ed:14:c0:ca:1b:01:39:
         0f:f7:fe:74:83:d5:9b:20:f3:c6:43:d8:4e:d5:3b:b1:da:8d:
         b1:fc:74:6c:06:fa:33:59:e8:f8:15:a8:61:de:28:8e:ce:e9:
         41:c6:2c:d9:77:ae:f1:4f:85:3f:1e:90:a9:3a:4a:a0:bd:2e:
         d7:c7:8a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----