Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/323830343a313064633a3a2f33322d3332203d3e20323633363532.roa
File:                     323830343a313064633a3a2f33322d3332203d3e20323633363532.roa (raw, json)
Hash identifier:          HIQCmuK4XVOR+/85g27/QwXFs1lRp/5uqQ4Ce0l40mU=
Subject key identifier:   4D:53:47:E8:88:0F:BC:76:13:B2:6D:16:AD:33:4C:79:37:31:27:59
Certificate issuer:       /CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
Certificate serial:       4FDF1EA8B01EECE43AF0150D1303B91CF49B7785
Authority key identifier: 10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/323830343a313064633a3a2f33322d3332203d3e20323633363532.roa
Signing time:             Thu 16 Nov 2023 15:28:55 +0000
ROA not before:           Thu 16 Nov 2023 15:23:55 +0000
ROA not after:            Thu 14 Nov 2024 15:28:55 +0000
asID:                     263652
IP address blocks:        2804:10dc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:df:1e:a8:b0:1e:ec:e4:3a:f0:15:0d:13:03:b9:1c:f4:9b:77:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
        Validity
            Not Before: Nov 16 15:23:55 2023 GMT
            Not After : Nov 14 15:28:55 2024 GMT
        Subject: CN=4D5347E8880FBC7613B26D16AD334C7937312759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:a2:85:12:cb:5c:00:71:5f:8c:21:4d:f1:
                    d6:ae:77:67:0d:6b:a5:13:c8:a4:88:ec:5b:2a:b4:
                    c3:7d:d3:93:17:e9:1d:6e:0d:0b:1e:21:a6:7b:62:
                    38:c4:1a:ce:f3:c4:5d:eb:9b:b1:5e:39:f6:08:ed:
                    a2:d2:46:10:0f:0e:0f:54:ea:95:72:04:dd:32:43:
                    d0:11:91:3b:d5:b0:eb:51:d3:6a:8d:02:0c:e1:8f:
                    7f:3d:ee:b8:d5:85:34:43:df:d2:6b:70:61:c7:93:
                    61:01:c4:35:06:1e:15:a8:49:91:39:40:69:a8:d0:
                    22:3b:dd:4f:a6:0a:6c:a4:16:56:cb:b0:66:ce:ed:
                    66:ac:fb:2a:84:3e:09:db:ca:a4:17:70:1b:93:59:
                    ad:18:bb:db:e0:56:c0:4e:5b:dd:7c:f2:93:48:2d:
                    a9:75:a8:ca:ed:8e:d7:c0:40:3e:25:1b:a8:0d:4d:
                    d9:6d:ed:67:1b:5b:79:85:21:19:19:d1:b2:e8:e6:
                    a2:61:55:f9:7f:5f:0b:27:30:63:67:08:7f:47:0d:
                    d5:6a:55:40:13:51:46:63:79:84:3c:e5:ec:a0:16:
                    7e:77:1e:22:2e:34:a3:eb:b9:9d:13:ca:8b:e9:47:
                    ba:7d:c4:64:76:99:1f:33:fb:0c:b2:3e:07:57:e8:
                    c6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:53:47:E8:88:0F:BC:76:13:B2:6D:16:AD:33:4C:79:37:31:27:59
            X509v3 Authority Key Identifier:
                keyid:10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/1072FB38BE0FF40EC17295B16352C4184106EFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/323830343a313064633a3a2f33322d3332203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:96:38:dc:cf:10:e7:ed:94:a6:a1:ee:03:65:f6:13:25:94:
         8e:9e:16:97:c0:f3:49:f1:6b:bb:36:94:c4:0c:f9:be:d1:93:
         f2:d5:59:eb:19:39:f6:43:81:a1:45:f9:46:32:25:da:3d:16:
         84:d3:69:fb:67:21:f8:0f:01:3b:bd:40:5e:bb:05:5b:8a:0e:
         ea:ed:21:a1:65:4a:e0:8b:d6:10:ed:6c:dd:36:c1:04:50:fe:
         c9:6c:e4:81:d9:80:29:d3:c6:ba:f0:10:29:cd:2c:ad:ea:c2:
         2d:9e:88:ab:f1:3f:20:78:3d:1e:c3:cf:66:60:4c:bb:a5:69:
         3d:13:c4:fe:51:c4:2a:3f:b0:1f:f5:40:e0:51:ab:f0:f9:15:
         29:70:df:4d:df:bd:f5:36:0b:1e:1b:59:ea:8d:ec:01:e8:a2:
         ee:3b:f8:bd:df:97:7c:70:43:7a:f3:ad:9f:4f:3d:f8:c4:5d:
         f7:b3:35:56:82:02:58:31:c5:53:a4:95:63:6d:78:bb:4c:da:
         34:da:d3:07:64:21:ce:c5:61:60:6f:c4:2b:d0:53:58:97:aa:
         ce:09:5d:f7:93:ea:f9:75:00:a7:0b:77:80:a6:8e:dd:85:8c:
         55:7e:cc:b0:7e:ef:88:b7:78:62:6d:30:f1:54:3d:64:e7:6d:
         0d:9a:6f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----