Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/323830343a363137633a3a2f33322d3332203d3e20323639323337.roa
File:                     323830343a363137633a3a2f33322d3332203d3e20323639323337.roa (raw, json)
Hash identifier:          t1rqVvlwckX0W8/Qvu1ZZ2QchkbDzETaWlpVAslX9EA=
Subject key identifier:   3E:57:4E:92:78:E0:28:F8:1D:9B:E6:02:6A:28:07:6C:87:82:8E:92
Certificate issuer:       /CN=246240EE97BDDD180E05F94C2857F823EA20229D
Certificate serial:       290351F65272528510B7ACEDF6C0AAAAE77D8648
Authority key identifier: 24:62:40:EE:97:BD:DD:18:0E:05:F9:4C:28:57:F8:23:EA:20:22:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246240EE97BDDD180E05F94C2857F823EA20229D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/323830343a363137633a3a2f33322d3332203d3e20323639323337.roa
Signing time:             Mon 25 Sep 2023 15:18:40 +0000
ROA not before:           Mon 25 Sep 2023 15:13:40 +0000
ROA not after:            Mon 23 Sep 2024 15:18:40 +0000
asID:                     269237
IP address blocks:        2804:617c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:03:51:f6:52:72:52:85:10:b7:ac:ed:f6:c0:aa:aa:e7:7d:86:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246240EE97BDDD180E05F94C2857F823EA20229D
        Validity
            Not Before: Sep 25 15:13:40 2023 GMT
            Not After : Sep 23 15:18:40 2024 GMT
        Subject: CN=3E574E9278E028F81D9BE6026A28076C87828E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ce:5d:78:4b:70:f1:56:69:ff:9c:fc:ef:42:
                    ac:fa:bb:34:da:08:03:1d:d7:7a:ec:30:05:f1:c8:
                    8d:ac:c0:40:88:e5:e3:5f:e1:42:3e:1d:38:87:e7:
                    d1:5f:af:42:73:82:d6:a6:15:ba:11:85:e3:65:b2:
                    93:24:88:42:30:d9:a2:bd:a5:4a:8b:95:fb:53:fe:
                    d5:75:19:74:48:7a:70:0e:58:89:3f:18:a5:0d:48:
                    a4:8a:cd:24:cc:f9:4a:47:5a:77:22:6b:f6:40:8f:
                    1b:75:09:14:f2:28:d4:6d:01:8d:77:2e:33:3e:20:
                    e3:81:4b:1c:1c:36:18:3b:aa:39:28:54:cd:5e:e7:
                    05:bf:79:60:ac:e9:7d:ef:ab:70:9d:86:8f:cd:cc:
                    35:5a:0b:c2:c4:53:9e:ac:19:6f:bf:97:90:c2:c2:
                    d6:11:63:43:fd:15:74:50:17:76:08:e3:aa:c7:55:
                    33:ee:db:e0:79:f6:7a:d5:03:64:7f:af:dd:0c:16:
                    35:1a:14:3b:79:4d:e5:27:d8:93:15:31:3a:94:d8:
                    a9:79:0d:3d:74:6b:05:b9:9b:5e:6c:b3:d5:56:b6:
                    55:34:bf:b5:59:6a:b5:28:61:13:01:42:57:c1:6b:
                    de:91:bc:bb:9b:56:ef:1b:41:85:68:d7:1b:cc:ff:
                    27:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:57:4E:92:78:E0:28:F8:1D:9B:E6:02:6A:28:07:6C:87:82:8E:92
            X509v3 Authority Key Identifier:
                keyid:24:62:40:EE:97:BD:DD:18:0E:05:F9:4C:28:57:F8:23:EA:20:22:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/246240EE97BDDD180E05F94C2857F823EA20229D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246240EE97BDDD180E05F94C2857F823EA20229D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/323830343a363137633a3a2f33322d3332203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:617c::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:4b:c5:ed:0f:c7:94:8f:d5:40:35:f7:f4:c8:44:a3:05:71:
         91:f9:82:26:a7:13:ef:a5:f5:3b:bc:75:d1:9b:52:c7:1e:e0:
         9d:0d:65:35:b2:3f:13:99:8c:65:fc:0f:ec:16:24:56:60:7e:
         ec:e4:57:01:8f:13:9f:99:78:0f:e8:73:80:57:2b:00:7e:d4:
         9e:a9:c3:a1:ed:9b:db:54:d8:7e:8e:bf:81:01:ad:70:c5:79:
         fb:9a:ce:39:74:30:c1:ad:16:12:5a:7b:1f:6e:e4:e3:d2:65:
         4d:a8:01:eb:1b:53:d8:02:d9:70:9a:d1:50:9d:fa:4d:57:cb:
         03:92:c7:56:7d:4b:98:4b:11:f7:df:6b:59:cf:de:79:2e:83:
         c0:dc:74:3b:61:60:9c:6d:93:6a:13:6c:53:fb:6a:d4:5f:4d:
         24:20:23:17:e3:b5:fc:a6:73:d5:9f:94:0b:bd:82:22:13:3c:
         91:36:8e:ee:68:41:a9:7d:36:e5:89:af:f6:55:e5:ce:d0:66:
         4d:fc:e6:07:79:ba:15:24:20:65:f5:f7:14:04:e0:9e:2c:e0:
         09:98:59:05:00:78:e0:58:6d:01:bf:e7:9a:62:ac:78:dc:a2:
         1a:4c:ec:63:df:9b:20:bd:2a:28:6e:3e:72:79:77:fc:2b:20:
         2c:09:78:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----