Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/323830343a353765303a3a2f33322d3332203d3e20323638303932.roa
File:                     323830343a353765303a3a2f33322d3332203d3e20323638303932.roa (raw, json)
Hash identifier:          FJcmgg5hgtqXVcA3kE3nRgrEIB5NTt21CRrDGVIJkU4=
Subject key identifier:   F2:73:91:48:C3:F7:AE:B9:48:5C:85:52:2C:D7:33:E2:EC:A5:4C:31
Certificate issuer:       /CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
Certificate serial:       029A2C444C85CB71C39A70E8A1C883A0A0146662
Authority key identifier: D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/323830343a353765303a3a2f33322d3332203d3e20323638303932.roa
Signing time:             Fri 10 Nov 2023 19:00:00 +0000
ROA not before:           Fri 10 Nov 2023 18:55:00 +0000
ROA not after:            Fri 08 Nov 2024 19:00:00 +0000
asID:                     268092
IP address blocks:        2804:57e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9a:2c:44:4c:85:cb:71:c3:9a:70:e8:a1:c8:83:a0:a0:14:66:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
        Validity
            Not Before: Nov 10 18:55:00 2023 GMT
            Not After : Nov  8 19:00:00 2024 GMT
        Subject: CN=F2739148C3F7AEB9485C85522CD733E2ECA54C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:09:e8:46:07:2c:24:da:e6:81:2d:4b:b7:8e:
                    22:13:40:35:bd:3e:f3:c7:b0:61:67:0c:e1:9c:b0:
                    09:46:89:3d:f4:8a:0f:b6:6c:7f:bc:aa:56:b3:de:
                    dc:0b:24:1e:21:c5:56:70:50:5f:85:b5:5e:bf:b1:
                    06:bb:b2:51:2b:3d:9c:e7:84:a3:40:92:1c:96:8e:
                    69:1a:87:be:8f:6d:1f:2d:63:02:1a:8a:6e:80:f8:
                    18:d2:e4:88:ad:e5:8e:f3:d5:65:1a:b9:c4:9e:75:
                    20:62:6c:5c:79:ca:ed:ed:fa:a6:9d:2b:32:2e:bf:
                    c9:3a:c5:e9:9a:23:3b:7e:88:46:74:94:c4:0b:e8:
                    c9:51:67:65:fd:eb:0d:b1:33:4b:bd:6e:8c:a1:b1:
                    dd:6d:49:39:64:53:2c:8b:6b:8f:0e:35:88:c8:95:
                    34:2d:18:8a:29:23:5d:a6:e9:dd:5d:46:1d:30:52:
                    65:10:90:0a:14:bd:f6:42:60:85:02:ae:81:90:74:
                    f4:da:13:b7:9c:2d:d2:73:c4:a4:af:8a:ff:06:7b:
                    50:9b:b4:47:b9:16:ac:82:f7:e4:0c:50:1a:8f:53:
                    77:64:f1:5e:93:11:87:27:ad:d8:5f:a8:62:7a:82:
                    db:ed:45:e9:1f:30:f7:2a:80:2d:67:78:07:ed:37:
                    cf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:73:91:48:C3:F7:AE:B9:48:5C:85:52:2C:D7:33:E2:EC:A5:4C:31
            X509v3 Authority Key Identifier:
                keyid:D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/323830343a353765303a3a2f33322d3332203d3e20323638303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:0a:3e:d3:cb:30:06:61:1c:2f:55:6b:d7:01:90:b5:ca:98:
         39:a8:c1:cb:58:c9:f5:9a:89:94:95:ff:72:64:7b:58:1a:0d:
         79:8e:fe:e6:69:e4:4f:48:48:de:74:06:6a:49:57:4b:1c:64:
         a9:b9:81:e0:90:53:be:26:34:eb:d9:63:f3:db:e9:d9:f7:53:
         b0:25:b7:8d:97:5a:a7:27:39:91:5a:5d:6c:47:b8:2a:fd:64:
         e4:ac:4f:dd:29:3c:8c:22:e8:f1:aa:dc:2a:38:6c:e6:bd:82:
         be:89:2d:d9:4f:b2:44:89:28:cd:08:66:db:2d:3d:d4:27:77:
         4c:5b:71:83:32:10:42:b3:63:30:1f:ba:bd:23:c0:ac:51:32:
         a6:70:35:86:77:3b:af:4f:69:a6:2d:a4:8d:0b:4f:e2:f3:a0:
         56:1f:fe:b0:0c:6e:f2:6b:db:f7:67:cd:1b:dd:26:9c:6f:0f:
         60:99:5f:89:c9:19:6c:ba:db:24:d5:e2:9e:75:5a:fd:70:81:
         56:af:69:3e:35:ca:ba:f8:5e:29:e6:a9:a2:56:ae:85:ff:20:
         f8:dd:4f:7c:2c:87:67:ee:da:1c:c8:05:77:af:6a:12:f7:88:
         5d:e8:87:c1:30:b1:34:cb:0f:79:2b:96:ee:d1:27:1e:cb:3e:
         77:1b:2d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----