Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/323830343a373937303a3a2f33322d3438203d3e20323731333035.roa
File:                     323830343a373937303a3a2f33322d3438203d3e20323731333035.roa (raw, json)
Hash identifier:          npHIDmgPpNB9GT8tb5cHB8W0OmhX2VX1QYf9MF0C7H8=
Subject key identifier:   5B:A3:93:57:C8:F9:74:B1:BD:53:7C:DD:CD:16:E3:4C:D8:40:E0:DD
Certificate issuer:       /CN=9F6A40DC353716AE0302F76B938D0911F63E3B06
Certificate serial:       44B19AC1FB7F358C85FAD5A1B33EDAE9623E4CFA
Authority key identifier: 9F:6A:40:DC:35:37:16:AE:03:02:F7:6B:93:8D:09:11:F6:3E:3B:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F6A40DC353716AE0302F76B938D0911F63E3B06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/323830343a373937303a3a2f33322d3438203d3e20323731333035.roa
Signing time:             Thu 15 Feb 2024 15:54:18 +0000
ROA not before:           Thu 15 Feb 2024 15:49:18 +0000
ROA not after:            Thu 13 Feb 2025 15:54:18 +0000
asID:                     271305
IP address blocks:        2804:7970::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b1:9a:c1:fb:7f:35:8c:85:fa:d5:a1:b3:3e:da:e9:62:3e:4c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6A40DC353716AE0302F76B938D0911F63E3B06
        Validity
            Not Before: Feb 15 15:49:18 2024 GMT
            Not After : Feb 13 15:54:18 2025 GMT
        Subject: CN=5BA39357C8F974B1BD537CDDCD16E34CD840E0DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f9:eb:0e:c5:13:b5:5b:bb:d8:05:08:38:ea:
                    66:c1:b7:05:cf:6b:bd:d8:89:62:a0:d2:17:dd:fe:
                    98:e1:b5:cb:bf:fe:de:ad:44:21:7c:30:66:d8:38:
                    8f:52:5d:de:ba:bd:93:6c:9e:77:83:69:0b:cd:16:
                    13:9b:6b:33:0b:1b:4c:ba:ae:2b:12:7e:c0:aa:73:
                    c9:80:93:28:d0:0e:da:24:4b:fe:bf:22:fb:fe:17:
                    90:5c:f8:7f:67:46:cc:d2:54:50:59:01:60:46:d9:
                    b2:10:32:fd:24:2e:85:e5:a9:cc:8d:8a:6b:00:4a:
                    a3:60:d5:00:5c:93:8e:7f:2c:08:71:69:1d:e6:61:
                    1b:3a:b8:fa:dc:bd:10:29:31:96:f9:e8:cf:8c:b0:
                    b4:95:0a:7b:73:a0:8d:42:c7:1b:fe:d0:dd:43:ad:
                    32:5d:ba:16:43:1c:10:c4:cc:d7:e5:f9:68:82:c4:
                    bf:d8:12:3d:0d:8b:2d:37:30:aa:e2:af:a8:44:df:
                    5a:5f:99:d8:65:fc:cc:5e:ed:ac:35:18:27:ad:f5:
                    55:55:68:5b:43:42:6a:83:ba:ee:91:11:20:7d:1f:
                    ee:2e:e0:91:a3:27:af:72:30:81:d4:a9:71:d9:5b:
                    dc:2f:50:9f:0a:8b:99:90:7d:8c:84:e9:ed:84:82:
                    85:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A3:93:57:C8:F9:74:B1:BD:53:7C:DD:CD:16:E3:4C:D8:40:E0:DD
            X509v3 Authority Key Identifier:
                keyid:9F:6A:40:DC:35:37:16:AE:03:02:F7:6B:93:8D:09:11:F6:3E:3B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/9F6A40DC353716AE0302F76B938D0911F63E3B06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F6A40DC353716AE0302F76B938D0911F63E3B06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/323830343a373937303a3a2f33322d3438203d3e20323731333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7970::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:11:5f:79:ad:ad:9f:21:39:c7:8f:62:48:5d:12:b7:0e:09:
         95:27:b8:3a:b1:be:9c:e9:07:7c:82:1f:ea:d5:36:7b:f2:e3:
         28:59:8a:f0:64:c3:c3:51:af:bb:c5:59:92:94:28:4f:8a:a1:
         40:3c:56:39:f8:c0:58:81:d4:74:53:af:dc:65:8e:ab:aa:4e:
         81:55:f2:dc:2f:a1:58:81:9f:55:36:09:42:0b:c5:aa:7f:30:
         e4:3a:5c:8f:1c:02:38:32:e9:4a:9c:7f:d0:fb:2f:25:98:78:
         89:cd:05:d7:49:ff:b0:0e:6a:2f:b4:5b:c1:2d:69:6d:13:f6:
         a1:cc:1f:63:7a:66:95:72:04:da:84:b4:cd:2e:45:2f:a6:fc:
         a8:bd:6b:96:9c:1a:c5:3f:9d:be:7f:ed:9d:a1:7a:9f:40:05:
         fc:12:dd:07:9b:42:0e:d0:cf:f6:f7:37:91:f3:eb:16:41:48:
         e5:d5:b9:e4:88:76:0a:79:ee:f6:a7:72:08:06:52:08:67:55:
         73:1c:66:35:9a:0c:70:26:62:d3:00:a8:39:2e:ce:90:af:f8:
         7d:19:8d:38:ed:41:70:f1:a4:a0:2f:ab:c4:50:8f:27:17:d9:
         ea:50:ee:05:67:e8:96:43:49:81:7e:8c:78:5b:26:b9:5a:bc:
         7b:5c:c4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----