Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/323830343a346437633a3a2f33322d3333203d3e20323638313939.roa
File:                     323830343a346437633a3a2f33322d3333203d3e20323638313939.roa (raw, json)
Hash identifier:          QGlInNEz747b18Xza411sCTIOAEDbr3LNNJw9fH6uho=
Subject key identifier:   F3:64:EE:E6:6D:67:1A:BA:FC:3C:AB:1D:33:B7:89:7F:0E:DD:87:D4
Certificate issuer:       /CN=9361649E2A9CD6320D5D128742E2688A2D4E81F3
Certificate serial:       B387342B3FE8692EC7B74EE5B5C3DEDCB49B67
Authority key identifier: 93:61:64:9E:2A:9C:D6:32:0D:5D:12:87:42:E2:68:8A:2D:4E:81:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9361649E2A9CD6320D5D128742E2688A2D4E81F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/323830343a346437633a3a2f33322d3333203d3e20323638313939.roa
Signing time:             Fri 23 Feb 2024 02:32:35 +0000
ROA not before:           Fri 23 Feb 2024 02:27:35 +0000
ROA not after:            Fri 21 Feb 2025 02:32:35 +0000
asID:                     268199
IP address blocks:        2804:4d7c::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b3:87:34:2b:3f:e8:69:2e:c7:b7:4e:e5:b5:c3:de:dc:b4:9b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361649E2A9CD6320D5D128742E2688A2D4E81F3
        Validity
            Not Before: Feb 23 02:27:35 2024 GMT
            Not After : Feb 21 02:32:35 2025 GMT
        Subject: CN=F364EEE66D671ABAFC3CAB1D33B7897F0EDD87D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:e6:8f:d9:26:46:4a:fa:3f:f9:50:ff:5f:
                    69:83:bb:0f:72:a1:db:b4:3a:a9:5b:05:41:31:54:
                    33:29:24:93:73:d1:0b:2b:83:54:01:48:12:e9:90:
                    33:22:10:af:6a:8c:28:8c:36:df:e7:bb:67:87:bf:
                    15:ba:c9:4d:8d:f4:33:83:aa:1d:63:7e:fe:1c:21:
                    fc:0d:61:1e:59:4d:d8:8f:98:43:ed:43:84:bb:cf:
                    6f:63:1c:66:ef:44:1d:38:53:4c:71:22:22:78:08:
                    5f:a5:d5:80:ac:af:99:20:2b:27:aa:ec:ce:96:7b:
                    90:c2:6f:00:c5:a9:86:07:c9:ca:77:ac:41:aa:67:
                    d8:50:05:a7:d8:22:c7:82:29:43:4c:d1:e4:6f:72:
                    85:87:95:0c:02:37:4a:da:00:eb:0c:40:e4:10:2e:
                    07:2c:75:f7:6e:e7:c7:04:0f:2f:28:4b:f5:70:1e:
                    47:49:6d:20:1f:d0:bc:f6:12:49:1a:c4:19:f3:66:
                    77:d9:01:7f:ce:e0:e4:f7:d2:30:18:f0:b6:a9:0e:
                    a8:3a:5c:10:c1:eb:41:07:f2:66:6f:86:8e:e8:47:
                    ab:b3:6a:b3:42:88:f2:ab:82:06:5b:8b:ef:9c:b0:
                    4b:1b:1b:6b:4d:26:f9:2d:8a:b2:b2:53:ad:c9:63:
                    2f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:64:EE:E6:6D:67:1A:BA:FC:3C:AB:1D:33:B7:89:7F:0E:DD:87:D4
            X509v3 Authority Key Identifier:
                keyid:93:61:64:9E:2A:9C:D6:32:0D:5D:12:87:42:E2:68:8A:2D:4E:81:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/9361649E2A9CD6320D5D128742E2688A2D4E81F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9361649E2A9CD6320D5D128742E2688A2D4E81F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/323830343a346437633a3a2f33322d3333203d3e20323638313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:54:dd:9f:33:d6:59:58:63:69:f1:37:61:ae:b7:99:c4:50:
         44:b6:25:63:4a:e9:b1:3f:55:e9:e2:df:47:ff:ae:48:2e:22:
         25:89:05:05:61:4f:93:6d:d4:b6:70:4f:a7:c5:cf:fd:8d:03:
         db:68:10:fe:b5:fb:3f:ad:58:1c:45:32:71:8a:17:94:6f:02:
         bb:c2:37:19:f3:4d:5a:70:d5:e5:7b:d1:ff:f8:ac:9b:22:96:
         a2:9b:c1:d2:ad:43:6e:be:18:fe:ce:f7:a6:22:fb:b2:8f:b8:
         0d:8c:bc:50:22:90:3e:48:01:99:c5:37:8e:f3:4a:31:ec:72:
         e4:f8:17:ee:9a:b5:a0:3c:12:ff:2e:de:86:15:7b:a4:d5:46:
         a6:01:6c:9b:b4:ec:04:89:08:86:45:24:ea:de:d7:13:b2:2e:
         93:fc:24:71:a7:6c:2d:45:e8:ad:4e:46:de:ac:1c:67:d0:c9:
         02:a7:1c:4c:49:d3:f0:ad:5a:30:e3:2f:db:08:ec:a1:e7:44:
         c1:df:87:07:e7:ac:ca:a0:93:c5:36:2f:58:99:17:9d:e8:7b:
         d6:95:30:f8:45:b8:ab:23:ee:e1:69:cb:16:75:bc:dc:3b:a9:
         bf:6c:6b:03:06:c2:38:4d:b3:00:7b:3c:3a:04:2b:32:7a:c5:
         b9:61:1c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----