Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a633030303a3a2f33342d3334203d3e20323730393335.roa
File:                     323830343a373363303a633030303a3a2f33342d3334203d3e20323730393335.roa (raw, json)
Hash identifier:          gfBxjy3NHGsVTIYRuwzM1T/udoMegcXKl1JP9u8ljWY=
Subject key identifier:   BF:91:16:75:92:9F:0F:10:8E:83:7F:2B:AE:6A:2A:5D:14:7C:28:9D
Certificate issuer:       /CN=F2CB4D8C555C5C75560EAC12733A3547001E9332
Certificate serial:       73522DF11280632C45CF51BD3EE033A863DF6D0A
Authority key identifier: F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a633030303a3a2f33342d3334203d3e20323730393335.roa
Signing time:             Fri 02 Jun 2023 14:54:08 +0000
ROA not before:           Fri 02 Jun 2023 14:49:08 +0000
ROA not after:            Fri 31 May 2024 14:54:08 +0000
asID:                     270935
IP address blocks:        2804:73c0:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:52:2d:f1:12:80:63:2c:45:cf:51:bd:3e:e0:33:a8:63:df:6d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CB4D8C555C5C75560EAC12733A3547001E9332
        Validity
            Not Before: Jun  2 14:49:08 2023 GMT
            Not After : May 31 14:54:08 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:09:82:b1:09:97:5e:37:2a:24:01:ff:72:2f:
                    28:6b:b8:ea:79:da:04:45:63:f9:86:ec:48:77:f1:
                    bd:56:f2:02:7a:6b:df:de:cc:64:3b:71:3d:47:bc:
                    7e:f1:73:23:ce:ab:74:54:e8:5f:08:44:e3:ad:55:
                    75:5c:45:b0:15:0b:3b:c7:6d:0c:18:09:59:18:f3:
                    69:a4:af:c6:cf:81:5a:15:7e:4d:5d:5d:b9:06:d7:
                    96:f7:8f:d9:e1:3d:88:e7:b7:92:c2:c9:29:a7:49:
                    61:a2:ea:ba:26:59:ba:76:3f:ff:f3:60:38:9c:fb:
                    1d:ea:c6:d6:e5:3d:9a:dd:19:0b:3e:19:80:f5:9e:
                    4a:34:03:b8:ed:45:12:7d:e1:b9:d2:84:7e:a4:4c:
                    0e:f4:f5:bb:d9:2f:e3:06:f7:ea:36:d5:42:af:97:
                    18:02:69:ef:dd:b5:d2:d6:f3:30:7e:fa:8b:40:c3:
                    d2:38:09:62:12:37:c9:01:df:b7:b5:0a:2e:b8:a3:
                    51:a1:68:64:f7:35:7e:96:04:91:78:61:86:fd:d8:
                    3d:be:c3:b3:e9:35:11:54:21:4e:a5:52:ca:7e:60:
                    b8:59:54:27:23:7d:4d:7a:64:e7:90:a4:e2:bd:ed:
                    40:b3:d3:21:c7:2a:b2:63:b5:80:45:57:d3:dd:90:
                    51:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:91:16:75:92:9F:0F:10:8E:83:7F:2B:AE:6A:2A:5D:14:7C:28:9D
            X509v3 Authority Key Identifier:
                keyid:F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a633030303a3a2f33342d3334203d3e20323730393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73c0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         cd:87:a3:f8:2f:89:44:be:c3:f5:0f:45:64:b4:28:cf:3d:97:
         58:15:1b:ba:d4:ee:2c:30:e9:fa:6a:2b:09:6b:5f:38:f5:ef:
         5b:c2:8d:5e:a2:73:c1:78:cf:d8:56:e0:da:88:03:1e:f4:c0:
         4d:b2:2c:bc:f0:af:1b:bb:4b:27:e1:fa:22:61:65:62:6a:c1:
         2f:fd:f1:cd:09:e0:66:47:f8:77:ba:22:f8:f4:c2:f8:df:9b:
         61:42:b5:a6:1b:e9:3b:a4:8f:c8:ba:a6:ef:ce:ea:2d:5b:40:
         a5:67:78:c8:fe:ad:7f:b4:01:ad:44:24:f3:eb:6c:fd:b2:37:
         6d:9e:52:4d:af:ae:69:ed:3f:a3:b9:7c:69:c8:05:83:a7:d5:
         96:7f:eb:4a:e8:d2:3a:ff:63:de:b0:a9:0c:b2:d7:a2:08:9d:
         7d:41:d8:42:ed:71:7f:fc:7d:45:b9:a5:7d:f1:c7:91:74:08:
         06:51:5e:13:dc:62:fd:97:ba:dc:64:ed:22:42:be:39:d2:d3:
         c6:1c:26:ce:f3:e7:c2:b0:8d:89:59:fd:ed:9b:d0:35:25:17:
         f9:bf:80:a5:6f:b7:ab:a6:23:57:b5:17:c9:80:a4:a0:d3:d5:
         bd:31:57:48:b3:ee:2e:dd:95:ef:f2:1a:23:65:70:f8:39:fc:
         0f:4a:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----