Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/323830343a313861383a3a2f33322d3438203d3e20323632353032.roa
File:                     323830343a313861383a3a2f33322d3438203d3e20323632353032.roa (raw, json)
Hash identifier:          RLdYs8tENm8TLH+TIWWawXZBQtyl76RaopOSTDDqZXA=
Subject key identifier:   3A:4B:85:2C:9C:A6:40:D5:13:80:67:2C:90:FF:6A:FA:26:74:B5:45
Certificate issuer:       /CN=BF977F78777D6EE714F2CC1F0A8242EB6809E7C0
Certificate serial:       449DF0E462D25A79D26D7D0D4F7660442EE10B
Authority key identifier: BF:97:7F:78:77:7D:6E:E7:14:F2:CC:1F:0A:82:42:EB:68:09:E7:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/323830343a313861383a3a2f33322d3438203d3e20323632353032.roa
Signing time:             Fri 17 Nov 2023 19:15:05 +0000
ROA not before:           Fri 17 Nov 2023 19:10:05 +0000
ROA not after:            Fri 15 Nov 2024 19:15:05 +0000
asID:                     262502
IP address blocks:        2804:18a8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9d:f0:e4:62:d2:5a:79:d2:6d:7d:0d:4f:76:60:44:2e:e1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF977F78777D6EE714F2CC1F0A8242EB6809E7C0
        Validity
            Not Before: Nov 17 19:10:05 2023 GMT
            Not After : Nov 15 19:15:05 2024 GMT
        Subject: CN=3A4B852C9CA640D51380672C90FF6AFA2674B545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:3b:3c:e2:a6:48:6d:93:c2:ca:bd:30:7f:
                    75:f7:91:77:9d:14:1c:dc:ea:52:f0:33:be:cb:96:
                    4d:a3:46:8d:52:2e:cd:70:00:cf:32:5a:53:a9:08:
                    98:8d:89:24:32:76:89:de:aa:11:da:bb:d1:d6:5d:
                    82:28:60:29:f9:3f:b8:8e:d3:bd:eb:5f:a0:01:cc:
                    f0:a8:b3:1a:15:e3:2a:ee:d4:7e:6e:1a:b8:80:52:
                    f2:c3:08:0a:a6:83:79:a2:6a:d4:d6:e1:54:07:f4:
                    78:b6:8a:ea:8b:27:72:6c:0d:30:91:65:e7:b9:88:
                    2d:44:4a:d6:63:be:f2:17:c7:b8:bd:f8:b1:9a:24:
                    a1:3d:4a:b9:e0:ec:65:f3:41:d4:2c:5d:49:86:fb:
                    a5:f3:eb:9e:77:7c:55:fd:ef:39:99:b4:65:f9:bf:
                    21:63:89:ad:e0:16:a4:b5:9f:5f:40:f5:2d:46:5a:
                    a5:70:8f:4b:a6:c3:ea:02:e5:32:27:54:db:63:91:
                    6a:a5:eb:66:97:ff:29:3e:e0:36:b4:ba:cb:90:69:
                    ad:ad:11:c8:36:d4:04:0e:cb:f4:99:6b:e0:e5:f0:
                    db:cf:eb:97:31:3d:33:55:7e:b9:43:fa:de:f6:47:
                    11:30:74:c1:f7:fa:82:fd:03:05:1a:97:0d:44:20:
                    55:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4B:85:2C:9C:A6:40:D5:13:80:67:2C:90:FF:6A:FA:26:74:B5:45
            X509v3 Authority Key Identifier:
                keyid:BF:97:7F:78:77:7D:6E:E7:14:F2:CC:1F:0A:82:42:EB:68:09:E7:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/323830343a313861383a3a2f33322d3438203d3e20323632353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:69:11:ae:b4:49:a1:ba:00:a9:5e:33:5f:df:95:7f:2a:d5:
         94:e7:ff:ee:19:2d:5c:b2:8f:68:fd:fe:2b:2e:ae:04:c3:55:
         43:9c:2f:9e:6c:ee:55:2f:e4:f5:93:ee:bb:58:95:52:1d:49:
         5c:19:bb:20:59:43:14:bf:96:41:22:2d:11:b0:9d:1c:d9:a8:
         d0:46:b3:5e:a7:28:a4:ea:77:17:76:08:f0:52:e4:b3:3c:75:
         20:f7:28:ef:9d:6c:dc:62:6b:28:76:a9:eb:ec:9f:be:15:07:
         f2:28:79:3f:bf:98:2b:b0:16:9c:d4:9a:1d:2a:87:5d:5b:86:
         97:6c:67:45:1c:de:d8:53:87:69:2f:6d:b8:c2:d9:26:24:4d:
         bf:b2:5b:d6:ea:f7:a3:e3:00:b6:4c:d6:3a:ed:de:60:5d:16:
         cc:1e:d2:2f:2f:46:86:a8:f8:b5:42:14:1d:f8:9f:ce:f0:bb:
         d5:f1:1e:6c:50:04:9a:26:ef:c8:47:79:e2:8e:e1:bd:f5:ae:
         e0:96:0c:44:f6:e8:cd:30:8b:00:9d:5e:9e:17:13:a7:62:e7:
         49:98:81:d1:e0:1c:96:50:f4:b3:8a:45:53:38:a1:44:63:cf:
         fa:5e:0a:7f:fd:22:cd:b4:18:18:e8:51:30:a1:24:99:b7:8d:
         12:ce:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----