Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/0/323830343a386136303a3a2f33322d3332203d3e20323733363635.roa
File:                     323830343a386136303a3a2f33322d3332203d3e20323733363635.roa (raw, json)
Hash identifier:          T+0Sz2OZLjbg5Qnn1DN7d+A14khjdoUleew0eiiATxc=
Subject key identifier:   46:8D:46:23:7F:72:F2:93:29:92:6E:3C:16:2B:37:0F:37:15:07:8D
Certificate issuer:       /CN=AF4A80D2E21E0C8F26EB0964E0DBA1FF31C638C0
Certificate serial:       7CB9D089D1C434573B688E8EC176A179433ECF32
Authority key identifier: AF:4A:80:D2:E2:1E:0C:8F:26:EB:09:64:E0:DB:A1:FF:31:C6:38:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4A80D2E21E0C8F26EB0964E0DBA1FF31C638C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/0/323830343a386136303a3a2f33322d3332203d3e20323733363635.roa
Signing time:             Wed 31 Jan 2024 14:50:46 +0000
ROA not before:           Wed 31 Jan 2024 14:45:46 +0000
ROA not after:            Wed 29 Jan 2025 14:50:46 +0000
asID:                     273665
IP address blocks:        2804:8a60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b9:d0:89:d1:c4:34:57:3b:68:8e:8e:c1:76:a1:79:43:3e:cf:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4A80D2E21E0C8F26EB0964E0DBA1FF31C638C0
        Validity
            Not Before: Jan 31 14:45:46 2024 GMT
            Not After : Jan 29 14:50:46 2025 GMT
        Subject: CN=468D46237F72F29329926E3C162B370F3715078D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:9f:3c:d4:6a:37:10:22:1c:8c:1c:de:d1:
                    14:56:c1:e0:54:f1:3c:c1:10:82:be:57:3b:dc:21:
                    89:d7:49:f5:0e:a1:91:52:83:2c:1e:f6:76:c8:2f:
                    f2:a7:be:bf:1d:53:02:77:a2:29:c4:97:5f:e9:0e:
                    e6:5f:3a:98:a3:7d:83:27:8e:43:9e:d8:ae:04:4e:
                    9b:61:6d:bd:54:d4:e2:92:47:76:0e:c5:bd:cc:70:
                    60:84:9d:bd:1c:e5:b3:e7:c5:52:fd:30:87:32:03:
                    19:48:0d:ed:57:b4:60:0f:80:64:ae:63:90:57:cb:
                    21:2d:79:1f:da:87:a1:27:73:89:f4:70:22:61:47:
                    15:5f:7e:43:e0:4a:54:a1:87:99:37:77:c7:5e:a4:
                    c4:b8:c4:74:32:32:d2:b1:3c:e1:0d:41:0d:92:37:
                    8a:14:ca:54:00:8b:3b:dc:4a:b7:fa:91:52:a7:8c:
                    5e:c2:a1:70:4c:45:c6:48:b0:b3:cc:c8:20:66:94:
                    da:fb:a9:5b:3a:d5:25:32:47:a7:a5:35:5d:04:be:
                    76:59:a0:75:d9:5d:4e:22:59:03:44:9b:0b:ee:23:
                    75:21:db:11:8b:53:e6:d6:2e:c5:e2:9f:99:67:2c:
                    6a:45:1b:22:5c:39:2f:00:4b:5f:47:44:61:7d:62:
                    af:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8D:46:23:7F:72:F2:93:29:92:6E:3C:16:2B:37:0F:37:15:07:8D
            X509v3 Authority Key Identifier:
                keyid:AF:4A:80:D2:E2:1E:0C:8F:26:EB:09:64:E0:DB:A1:FF:31:C6:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/0/AF4A80D2E21E0C8F26EB0964E0DBA1FF31C638C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4A80D2E21E0C8F26EB0964E0DBA1FF31C638C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/0/323830343a386136303a3a2f33322d3332203d3e20323733363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:8d:68:2a:e8:a9:a1:15:e6:6a:78:76:06:1a:ac:57:59:47:
         e5:c0:60:03:b7:2c:0c:9e:5d:85:71:db:7c:e5:f4:c3:4f:0b:
         ea:28:cd:bf:78:ae:5e:a3:0c:88:64:2c:47:fa:2d:e4:ad:29:
         71:ae:3a:2c:87:58:33:a7:4f:7f:dd:ef:b1:65:8f:e4:89:23:
         7a:68:6a:e0:d1:c2:d6:2a:da:72:77:e4:5e:7f:47:cc:f3:af:
         43:07:3b:58:8e:1e:5d:f4:1f:7c:1f:6e:b1:d8:43:78:99:37:
         62:fb:65:03:31:f3:a8:86:99:d9:d3:37:94:ea:38:6a:97:1a:
         13:dd:d4:78:82:07:e3:44:7a:3a:d0:0f:2f:24:3e:a3:15:8d:
         6c:d2:0e:fa:94:a1:70:47:5b:67:96:e2:3f:78:ae:ed:57:83:
         29:cb:88:aa:b3:d3:b9:1c:4c:6f:f7:66:80:99:d8:9e:c4:fe:
         7a:95:39:f5:88:d6:b1:c6:ec:ba:77:dc:8b:12:a7:cf:95:98:
         32:3d:66:7d:cb:77:2b:61:36:d0:78:4e:9d:35:b2:8d:d3:f2:
         17:39:f1:73:18:cd:ad:b1:01:13:6a:d9:5f:ca:39:a1:1a:b5:
         d3:7e:bc:db:5e:e4:6c:8e:57:0d:ac:55:0e:df:9f:da:21:e7:
         c0:5a:3c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----