Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a343030303a3a2f33342d3334203d3e20323338333230.roa
File:                     323830343a346635343a343030303a3a2f33342d3334203d3e20323338333230.roa (raw, json)
Hash identifier:          tD1VDxXYFoN1RvIuDAEeODU6Vy3XzoLUjo7PVtBuv7U=
Subject key identifier:   97:73:0A:13:07:41:43:EC:E3:63:6F:AF:90:FD:A3:F9:7B:CC:57:62
Certificate issuer:       /CN=7E870936463A4C49A47872CB9BDBE77E9EF1EE14
Certificate serial:       340454F9AB3F81E1CB3F28BFDBBA621E9186E6F8
Authority key identifier: 7E:87:09:36:46:3A:4C:49:A4:78:72:CB:9B:DB:E7:7E:9E:F1:EE:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E870936463A4C49A47872CB9BDBE77E9EF1EE14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a343030303a3a2f33342d3334203d3e20323338333230.roa
Signing time:             Wed 02 Aug 2023 14:09:37 +0000
ROA not before:           Wed 02 Aug 2023 14:04:37 +0000
ROA not after:            Wed 31 Jul 2024 14:09:37 +0000
asID:                     238320
IP address blocks:        2804:4f54:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:04:54:f9:ab:3f:81:e1:cb:3f:28:bf:db:ba:62:1e:91:86:e6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E870936463A4C49A47872CB9BDBE77E9EF1EE14
        Validity
            Not Before: Aug  2 14:04:37 2023 GMT
            Not After : Jul 31 14:09:37 2024 GMT
        Subject: CN=97730A13074143ECE3636FAF90FDA3F97BCC5762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:72:2e:36:83:87:b9:f3:6b:4d:3a:e1:6d:b9:
                    a8:8f:f5:13:9a:8c:cf:c6:16:80:29:4d:a2:e5:ea:
                    60:6e:11:96:f8:95:3f:42:93:aa:fa:4c:36:88:cf:
                    d2:25:ad:3a:64:1e:2d:ea:cb:0b:b1:8f:cc:fc:40:
                    db:29:b9:85:80:c2:93:35:7b:e5:da:00:1f:da:80:
                    9a:d3:34:45:76:4d:1f:b4:c8:ce:3d:30:05:43:b9:
                    0e:71:58:03:f0:e0:2d:82:6c:ad:2d:02:66:71:20:
                    4f:67:5d:c1:f4:7a:f1:e5:d2:bc:e5:5f:c3:1f:c5:
                    10:97:d2:d8:6d:a3:93:58:4f:06:2d:44:00:0f:18:
                    96:44:0a:b3:86:f9:36:73:64:a2:dd:a9:d2:bd:6b:
                    f5:78:6c:a9:ac:3c:59:8d:fc:52:b4:1d:95:93:25:
                    df:f5:87:3d:67:69:f9:24:4c:ed:1e:9f:99:20:8c:
                    6b:0b:8b:6f:e5:3a:8f:3a:6c:c0:81:35:74:c5:b2:
                    0c:e0:63:f5:c5:47:64:eb:66:61:22:03:14:04:22:
                    8a:ea:14:bf:b1:80:f2:1e:c7:81:5c:1d:a3:8f:83:
                    62:3a:43:18:b7:f9:af:ee:4e:6a:f7:30:43:45:14:
                    58:8d:27:f0:ef:d2:21:f1:01:a5:9f:77:b5:a6:69:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:73:0A:13:07:41:43:EC:E3:63:6F:AF:90:FD:A3:F9:7B:CC:57:62
            X509v3 Authority Key Identifier:
                keyid:7E:87:09:36:46:3A:4C:49:A4:78:72:CB:9B:DB:E7:7E:9E:F1:EE:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/7E870936463A4C49A47872CB9BDBE77E9EF1EE14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E870936463A4C49A47872CB9BDBE77E9EF1EE14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a343030303a3a2f33342d3334203d3e20323338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f54:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         87:26:e1:db:b5:05:86:17:97:50:60:07:b3:cf:48:b9:bd:97:
         78:e1:29:f9:67:2c:35:db:2d:a0:6f:05:62:e1:95:57:4d:b8:
         60:c8:a7:2a:82:62:79:7f:fe:2e:e1:de:73:9d:63:0e:52:c9:
         ed:87:11:59:29:9a:8c:3e:03:63:65:bb:94:48:2f:5d:fa:b5:
         5f:ea:20:90:85:2f:5f:04:81:13:bc:89:bc:a2:b1:b4:96:6e:
         c0:bd:e8:ed:23:e4:bf:83:84:46:3c:a5:81:95:3e:a0:40:58:
         b4:66:94:cc:19:bb:c5:14:0b:22:8b:71:6b:18:7e:8f:3f:8a:
         2a:b5:7c:53:15:7d:fd:6b:dc:e5:58:70:f6:f6:2d:cf:4c:12:
         32:51:c9:af:96:93:5b:58:1b:f2:9b:e5:97:09:eb:b7:53:86:
         d3:f6:76:0f:f2:97:ea:66:62:49:74:2b:0f:09:4f:4d:89:4b:
         f2:85:49:d7:23:21:1e:e7:6c:f4:fb:9d:0c:f7:ca:e9:22:23:
         61:e0:60:c7:f7:ff:7f:b9:2e:cf:62:ed:67:09:40:14:c8:88:
         06:93:41:78:cb:60:8e:07:fe:67:1d:d7:5f:c9:18:a7:01:5b:
         19:fe:c8:06:cc:28:4b:18:72:99:2d:52:a3:8f:06:17:e9:d4:
         1d:5b:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----