Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/323830343a3761383a3a2f33322d3332203d3e20323632333039.roa
File:                     323830343a3761383a3a2f33322d3332203d3e20323632333039.roa (raw, json)
Hash identifier:          qkrfILv3XofxVnkLgFAP249nxQx4xy3uryonHwHd7og=
Subject key identifier:   93:E3:AD:3F:7A:45:DF:03:21:0C:99:95:ED:BF:59:EC:0E:D9:89:8D
Certificate issuer:       /CN=07501325F0AA30B8DCFF069CB118104776E788A8
Certificate serial:       66719F38F5E2BC953D74BE61CA983F6F7EECB3C2
Authority key identifier: 07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/323830343a3761383a3a2f33322d3332203d3e20323632333039.roa
Signing time:             Fri 12 Jan 2024 14:20:00 +0000
ROA not before:           Fri 12 Jan 2024 14:15:00 +0000
ROA not after:            Fri 10 Jan 2025 14:20:00 +0000
asID:                     262309
IP address blocks:        2804:7a8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:71:9f:38:f5:e2:bc:95:3d:74:be:61:ca:98:3f:6f:7e:ec:b3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07501325F0AA30B8DCFF069CB118104776E788A8
        Validity
            Not Before: Jan 12 14:15:00 2024 GMT
            Not After : Jan 10 14:20:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:d3:14:e5:4c:b2:29:5c:3c:aa:61:0f:15:
                    50:d1:5a:41:09:ba:65:80:66:ff:8e:bf:4f:65:1e:
                    ff:8a:22:ed:bf:86:82:73:e7:0b:72:d7:20:00:ee:
                    b7:46:7b:7d:85:c6:e3:4f:81:9f:91:eb:9c:e5:f9:
                    00:9e:ff:ce:94:2a:06:8e:03:ba:fb:42:cb:35:b9:
                    65:18:32:32:5e:a5:85:5f:da:9a:b0:6e:20:4d:c9:
                    40:7d:38:c6:16:b5:8f:73:1b:a7:a3:ca:51:3f:0f:
                    f9:ed:e5:07:69:aa:cb:13:6e:e2:df:b5:3d:6e:51:
                    ac:52:9f:4f:a9:9c:ce:1b:f4:3b:0f:43:b2:5f:c1:
                    6c:11:ed:dd:92:ea:77:fe:e9:05:33:5b:fc:13:0e:
                    57:9f:b1:e9:a8:4a:ad:89:10:2c:8b:97:4d:d7:da:
                    fc:6e:f4:d2:f8:06:e5:c3:95:5d:10:eb:50:2f:73:
                    a0:2d:11:67:f2:96:eb:a0:40:1d:52:d4:52:c1:e5:
                    2f:df:05:3b:ba:4b:23:3c:29:62:91:3d:95:68:cc:
                    9e:b1:ca:3d:2e:ec:1c:00:42:34:3c:a9:9b:43:f7:
                    ac:d0:b3:4f:d6:0b:14:15:31:b9:00:52:c5:b9:04:
                    98:bd:a5:d0:51:d8:b7:b9:bc:fd:79:6e:b9:e6:b0:
                    6c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E3:AD:3F:7A:45:DF:03:21:0C:99:95:ED:BF:59:EC:0E:D9:89:8D
            X509v3 Authority Key Identifier:
                keyid:07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/07501325F0AA30B8DCFF069CB118104776E788A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/323830343a3761383a3a2f33322d3332203d3e20323632333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:3c:e7:69:9a:23:37:88:30:66:f7:8b:19:f3:d3:24:bd:1a:
         ad:0e:2f:8d:9b:ba:dc:a4:57:ae:05:51:73:e4:27:ed:a9:eb:
         e0:14:00:f0:2c:a9:84:5b:40:bc:b3:e2:de:0c:cd:e1:63:54:
         98:be:6b:22:33:41:d1:33:11:fd:9e:03:87:1d:e0:64:f8:c0:
         96:ee:4a:1a:82:b8:ad:97:8b:cf:2c:a3:e1:4f:7e:79:85:f6:
         21:e4:0d:84:9a:a4:4b:4f:82:7b:2a:65:99:dc:44:84:4c:a9:
         9e:d2:cc:b1:ac:c8:dc:80:67:9f:a6:ab:73:bd:ae:e3:9b:7b:
         5e:1c:f4:5b:ca:ad:a2:fa:fa:49:c2:77:df:18:23:0c:8a:15:
         16:db:b1:86:77:6e:4e:55:32:02:00:2a:69:bc:cd:f2:ca:ad:
         28:14:3e:a8:17:c1:b3:97:86:fd:e4:92:4d:08:68:7a:20:6f:
         d9:fd:36:54:49:6d:c9:dc:92:03:af:39:85:8a:00:31:3f:38:
         4e:ef:0f:15:90:c6:75:18:0f:eb:84:58:41:0f:7e:3e:be:59:
         5b:9a:8e:63:c1:8a:cf:dc:2d:97:ff:27:ab:7e:58:99:f3:18:
         76:ec:b2:1d:dd:72:ef:20:84:d3:82:16:29:3c:f7:65:a1:32:
         3a:99:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----