Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6K5UpRJxKf5phKeQUA41Q7bszYM1HTgmt9ULWaSQXE7/0/323830343a383335343a3a2f33322d3332203d3e20323732313931.roa
File:                     323830343a383335343a3a2f33322d3332203d3e20323732313931.roa (raw, json)
Hash identifier:          qTuPT6KDG28MD+6p+wY+MZZmMnHZLeWis3jJxeTaZhM=
Subject key identifier:   43:22:19:15:E4:63:53:D2:AA:49:FD:5C:AA:36:BF:C1:22:BE:31:F2
Certificate issuer:       /CN=C9C7036178B718210B92F136408EFD6CD2942D3F
Certificate serial:       0DE7834FCEA65B6B97B4493B03633E71425900A3
Authority key identifier: C9:C7:03:61:78:B7:18:21:0B:92:F1:36:40:8E:FD:6C:D2:94:2D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9C7036178B718210B92F136408EFD6CD2942D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6K5UpRJxKf5phKeQUA41Q7bszYM1HTgmt9ULWaSQXE7/0/323830343a383335343a3a2f33322d3332203d3e20323732313931.roa
Signing time:             Mon 18 Dec 2023 15:00:00 +0000
ROA not before:           Mon 18 Dec 2023 14:55:00 +0000
ROA not after:            Mon 16 Dec 2024 15:00:00 +0000
asID:                     272191
IP address blocks:        2804:8354::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e7:83:4f:ce:a6:5b:6b:97:b4:49:3b:03:63:3e:71:42:59:00:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9C7036178B718210B92F136408EFD6CD2942D3F
        Validity
            Not Before: Dec 18 14:55:00 2023 GMT
            Not After : Dec 16 15:00:00 2024 GMT
        Subject: CN=43221915E46353D2AA49FD5CAA36BFC122BE31F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ff:4a:01:6a:f9:e3:04:1d:40:87:1f:15:e8:
                    1d:0e:b1:f1:c6:8f:5a:47:89:95:f2:b2:ca:e6:84:
                    f5:ec:a2:98:5f:b7:17:a0:e8:c9:b6:54:ec:e1:bd:
                    69:a6:f1:88:fc:a4:20:f3:b3:0d:cc:4a:c5:3d:7c:
                    38:a3:16:4a:89:d0:0e:f2:08:b2:00:5a:7b:ae:1d:
                    7d:fe:95:44:0f:34:32:5a:37:f5:fb:e3:41:ff:d6:
                    6c:05:00:a8:f6:46:c4:0d:23:91:ba:44:8f:ed:36:
                    bd:34:e9:3c:75:dc:b1:8e:3c:65:f9:b1:f7:76:a2:
                    ac:0f:e9:81:2a:47:e7:cb:fb:8e:53:2b:69:08:fd:
                    48:66:67:06:c0:13:d8:ea:e6:33:08:98:20:6d:a5:
                    cb:1a:d5:fe:1c:0b:98:dd:82:69:4a:97:be:eb:62:
                    3e:96:b3:7e:fd:fa:1a:6b:10:b6:ac:11:d2:66:fc:
                    28:88:60:e8:31:40:37:02:64:c1:7c:6d:a1:98:7b:
                    14:bf:0a:74:48:9a:46:62:f8:3b:2d:85:b5:ce:ec:
                    29:a9:9d:b8:24:03:6b:64:64:20:c9:c5:a2:70:4c:
                    9e:0d:a8:6b:25:e3:7b:55:42:93:87:1f:d5:b6:b3:
                    4c:cf:7a:11:36:b3:cd:e5:cd:c6:d1:54:94:62:c4:
                    43:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:22:19:15:E4:63:53:D2:AA:49:FD:5C:AA:36:BF:C1:22:BE:31:F2
            X509v3 Authority Key Identifier:
                keyid:C9:C7:03:61:78:B7:18:21:0B:92:F1:36:40:8E:FD:6C:D2:94:2D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6K5UpRJxKf5phKeQUA41Q7bszYM1HTgmt9ULWaSQXE7/0/C9C7036178B718210B92F136408EFD6CD2942D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9C7036178B718210B92F136408EFD6CD2942D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6K5UpRJxKf5phKeQUA41Q7bszYM1HTgmt9ULWaSQXE7/0/323830343a383335343a3a2f33322d3332203d3e20323732313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8354::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:2d:48:dd:c9:49:fd:a8:5a:0d:f7:1a:e4:c7:a0:25:e3:f5:
         b8:b5:9c:bb:5c:6d:99:b1:4c:0c:a8:0c:68:9b:2a:08:00:df:
         41:86:31:e7:1e:b6:6c:10:61:0e:d1:24:61:c4:04:c2:1f:8d:
         10:a4:93:60:65:fd:1b:3c:62:87:4b:7a:41:5a:52:59:94:8a:
         ca:df:9d:d9:30:bb:9d:ae:64:13:17:ca:9e:66:bb:81:85:b7:
         3a:2a:ad:8f:dc:7e:5e:cf:3d:5e:78:7c:43:2d:ae:57:33:97:
         97:16:20:39:85:cb:58:a4:5e:66:1e:20:87:6a:a7:96:0a:0c:
         fe:6c:98:b9:74:5c:5c:60:67:17:7f:65:28:7e:e5:d2:6a:7a:
         94:a6:dc:7e:ed:c3:a1:96:d0:b0:48:ee:45:f2:31:09:4d:35:
         b3:d4:d0:b8:01:3d:61:87:1f:c8:7e:92:f3:d3:cd:d7:9f:21:
         5f:67:ae:04:e9:83:ed:5f:69:47:92:1b:4f:eb:46:dd:93:aa:
         e6:3f:a7:ee:bf:a0:2a:b8:60:f2:6d:a1:e3:fc:77:a7:03:a5:
         6e:9b:d7:fe:22:f7:b1:fd:80:2d:88:87:71:d7:3f:22:e9:71:
         63:16:43:dd:2e:59:8c:a1:8b:dc:89:e4:de:c0:0b:21:13:75:
         1a:91:57:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----