Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/2/323830343a323366303a3a2f33322d3332203d3e20323634313932.roa
File:                     323830343a323366303a3a2f33322d3332203d3e20323634313932.roa (raw, json)
Hash identifier:          5LntxXb8INVjGusUkavu4H2NhNASh0OZ5+XlJ7Bcw2Q=
Subject key identifier:   37:30:66:1A:AA:7C:DD:6D:36:9D:5F:16:5E:CE:7F:E6:EA:6F:7E:24
Certificate issuer:       /CN=91B7E6716A44D048F1370CFA1A1700037F360F29
Certificate serial:       41E4359160C4F08728785A1E655C3F7B3EBF34CC
Authority key identifier: 91:B7:E6:71:6A:44:D0:48:F1:37:0C:FA:1A:17:00:03:7F:36:0F:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91B7E6716A44D048F1370CFA1A1700037F360F29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/2/323830343a323366303a3a2f33322d3332203d3e20323634313932.roa
Signing time:             Thu 04 Apr 2024 12:38:13 +0000
ROA not before:           Thu 04 Apr 2024 12:33:13 +0000
ROA not after:            Thu 03 Apr 2025 12:38:13 +0000
asID:                     264192
IP address blocks:        2804:23f0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e4:35:91:60:c4:f0:87:28:78:5a:1e:65:5c:3f:7b:3e:bf:34:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91B7E6716A44D048F1370CFA1A1700037F360F29
        Validity
            Not Before: Apr  4 12:33:13 2024 GMT
            Not After : Apr  3 12:38:13 2025 GMT
        Subject: CN=3730661AAA7CDD6D369D5F165ECE7FE6EA6F7E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:64:65:58:b1:88:25:c3:a4:2b:00:68:e6:
                    8a:1b:6f:67:32:ff:28:cd:fe:ae:9a:71:02:06:ee:
                    61:4b:86:16:ae:73:32:f4:92:be:ac:8e:2c:46:fb:
                    4b:ef:a0:8e:c7:1c:91:6b:0a:2f:68:29:88:84:37:
                    52:fc:66:8c:3f:84:db:31:4a:e6:7f:4d:b7:f2:1b:
                    4c:f9:35:04:60:36:b2:b2:ca:18:5d:d7:d1:37:53:
                    76:e9:ac:50:87:5b:98:ae:34:0f:10:c6:ef:e5:8b:
                    c4:74:57:65:fb:b1:ec:ef:b7:ff:34:67:cb:49:96:
                    8e:f8:7d:5b:33:f3:52:c4:f4:d2:ad:20:1e:1b:1b:
                    f4:b9:a5:70:50:f0:10:e9:ed:c9:bc:7a:62:c4:65:
                    17:e2:1e:24:5e:3b:89:70:7c:f4:93:6a:ff:5d:6a:
                    69:ef:de:e2:3e:68:ed:4f:d5:9c:29:0e:ca:00:e0:
                    0f:11:f3:e5:05:a4:49:5a:58:fe:1e:e8:8d:cb:35:
                    a3:f2:e1:68:49:04:8c:c7:53:4b:53:d3:6c:9e:9f:
                    5a:d6:9c:03:ab:09:7a:fd:0b:2f:fb:9b:fa:ba:de:
                    72:76:a8:6e:17:f3:00:bc:a8:f8:30:3c:ab:84:da:
                    a1:02:26:76:95:12:95:9f:ac:c2:b8:b6:02:eb:ae:
                    07:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:30:66:1A:AA:7C:DD:6D:36:9D:5F:16:5E:CE:7F:E6:EA:6F:7E:24
            X509v3 Authority Key Identifier:
                keyid:91:B7:E6:71:6A:44:D0:48:F1:37:0C:FA:1A:17:00:03:7F:36:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/2/91B7E6716A44D048F1370CFA1A1700037F360F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91B7E6716A44D048F1370CFA1A1700037F360F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/2/323830343a323366303a3a2f33322d3332203d3e20323634313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:a0:11:e8:96:56:97:4e:37:43:4b:f4:b9:47:76:1e:d1:5e:
         d4:9e:a9:35:e6:70:76:a3:9c:f1:64:de:41:6f:f2:3e:5f:82:
         82:af:98:71:0d:73:c6:ad:27:62:9b:87:6e:a1:b6:34:10:d8:
         36:55:3d:d6:6e:b1:b3:7f:14:60:e3:07:83:38:70:4d:0f:39:
         bf:f1:c5:87:2f:5e:d7:60:4d:35:1c:5c:11:0d:a2:28:fe:4d:
         91:10:96:d2:61:72:63:48:a8:6e:d4:47:5e:57:41:7e:e8:30:
         a2:55:3d:71:11:88:79:d4:09:67:ad:bc:e9:3b:76:44:92:12:
         4b:45:34:1e:31:e1:44:b6:66:95:2e:00:61:d5:3f:e2:a0:7c:
         35:20:ed:c9:9a:23:f7:dc:89:a4:5f:ef:47:c0:8f:36:fe:9a:
         1a:c2:62:0b:45:e6:bf:a2:de:e6:ad:52:82:66:f7:ed:51:a1:
         a2:5d:d9:80:44:1e:6b:d8:03:97:46:e8:49:aa:f9:cf:f3:a0:
         c1:06:73:13:f6:03:a4:c0:15:be:44:93:ec:fb:ab:a9:40:16:
         75:f4:8d:45:4c:3a:39:b6:47:9b:45:82:43:3e:49:c3:a1:93:
         f9:67:19:cc:74:c9:9f:7f:f1:e2:0e:bc:60:e6:bd:35:fb:e0:
         47:92:b6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----