Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/0/323830343a363938633a3a2f33322d3334203d3e20323730323737.roa
File:                     323830343a363938633a3a2f33322d3334203d3e20323730323737.roa (raw, json)
Hash identifier:          Ky16y0CXSH6xgXEPQWHocXLJ98mAY6JAb+yqFwv4qFU=
Subject key identifier:   48:2C:E6:9D:5D:77:99:0F:54:E9:D4:E8:E1:74:DE:08:EB:11:7E:59
Certificate issuer:       /CN=7E55EF13F77A3906E8A88DF41C70EB08719397A2
Certificate serial:       73477319EBD222714271DB3679F95B70DD592303
Authority key identifier: 7E:55:EF:13:F7:7A:39:06:E8:A8:8D:F4:1C:70:EB:08:71:93:97:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E55EF13F77A3906E8A88DF41C70EB08719397A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/0/323830343a363938633a3a2f33322d3334203d3e20323730323737.roa
Signing time:             Thu 09 Nov 2023 15:47:50 +0000
ROA not before:           Thu 09 Nov 2023 15:42:50 +0000
ROA not after:            Thu 07 Nov 2024 15:47:50 +0000
asID:                     270277
IP address blocks:        2804:698c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:47:73:19:eb:d2:22:71:42:71:db:36:79:f9:5b:70:dd:59:23:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E55EF13F77A3906E8A88DF41C70EB08719397A2
        Validity
            Not Before: Nov  9 15:42:50 2023 GMT
            Not After : Nov  7 15:47:50 2024 GMT
        Subject: CN=482CE69D5D77990F54E9D4E8E174DE08EB117E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:7d:e8:79:c2:2d:32:5d:50:7b:74:82:f3:
                    85:65:89:e6:73:00:ef:7a:9c:d9:8a:74:7a:54:3e:
                    01:57:87:f4:50:f8:29:13:45:77:63:15:d3:4f:d5:
                    e5:3a:c5:d6:8d:c8:03:3d:de:7f:64:dd:26:2c:42:
                    ba:83:f9:98:e0:bb:25:07:86:c3:e9:90:09:aa:50:
                    f9:e9:45:fa:a4:37:e6:18:22:75:8e:07:96:63:87:
                    fb:cd:a5:40:4f:a6:b3:f3:8d:2f:17:87:eb:03:6c:
                    d6:31:e5:86:31:2b:13:d4:08:f0:42:f0:6f:59:f3:
                    40:21:2a:4d:b2:7e:a0:a7:c3:0c:09:a1:f0:78:9e:
                    bc:21:f5:02:ab:fb:b8:cf:94:48:50:ae:a1:45:21:
                    dd:83:25:03:17:0c:49:51:f7:13:8a:6d:d2:1e:ec:
                    fb:95:f8:f2:f6:1d:d4:ee:60:7d:ec:a4:7f:df:93:
                    4e:52:8c:95:74:fa:70:48:09:66:64:89:ba:d2:0f:
                    aa:1f:66:00:15:8b:b7:f3:57:2d:50:e2:75:06:87:
                    91:fe:80:37:ce:da:a3:19:d5:84:7d:1a:4f:77:a9:
                    14:3b:e9:1f:37:05:ca:b5:7b:29:8e:92:36:26:3c:
                    e7:73:34:51:4c:70:fa:14:86:e0:be:11:cf:1f:63:
                    9e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2C:E6:9D:5D:77:99:0F:54:E9:D4:E8:E1:74:DE:08:EB:11:7E:59
            X509v3 Authority Key Identifier:
                keyid:7E:55:EF:13:F7:7A:39:06:E8:A8:8D:F4:1C:70:EB:08:71:93:97:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/0/7E55EF13F77A3906E8A88DF41C70EB08719397A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E55EF13F77A3906E8A88DF41C70EB08719397A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/0/323830343a363938633a3a2f33322d3334203d3e20323730323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:698c::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:2c:22:8f:d1:94:95:a3:b2:de:8e:e4:50:f9:5d:b1:46:29:
         20:0e:16:fb:fc:65:f3:82:85:40:d4:2a:9e:a4:6b:37:da:28:
         59:d0:c6:6e:05:d9:b3:d8:63:90:60:e8:c9:fb:15:c4:77:9c:
         ae:65:db:1d:41:9d:50:1e:f0:71:da:5a:51:88:4b:e8:81:da:
         92:73:58:75:a3:13:30:95:98:c2:e1:91:4d:d3:34:48:a0:f7:
         d4:dc:e9:00:f2:a9:4f:dc:50:99:db:63:ab:5d:56:29:00:3e:
         14:47:78:35:66:5f:f0:2f:e6:e5:34:24:d9:4a:33:f3:7f:ee:
         e4:eb:eb:56:b8:df:e5:da:0c:dd:55:98:0a:fc:32:1d:97:c9:
         9b:37:8a:02:51:03:68:0b:cb:7b:c3:fa:6f:8c:35:66:56:05:
         79:bc:1c:de:5b:3c:6d:b3:8b:28:e0:0e:81:95:9e:dd:c4:17:
         ec:0b:52:57:aa:75:f3:c0:b8:04:dd:79:cd:1c:4a:18:54:4e:
         70:5b:15:69:56:cb:d1:9c:9e:c1:ff:63:eb:66:5d:fd:b3:7f:
         65:4d:7c:36:c9:70:63:19:e5:64:a9:29:82:3a:36:91:c5:df:
         85:c4:3b:72:b4:f2:e4:bb:44:b0:ef:e6:f5:98:ee:b2:81:90:
         29:e3:27:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----