Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a3a2f33322d3332203d3e20323635343936.roa
File:                     323830343a333530383a3a2f33322d3332203d3e20323635343936.roa (raw, json)
Hash identifier:          NNfIgVhgyA/OvYuFN59KO87SmXyHAbdnOVTcdzI7yJw=
Subject key identifier:   BD:A3:6E:D4:CA:46:28:2C:C0:7F:6A:87:B6:6C:DB:66:4D:FF:D9:ED
Certificate issuer:       /CN=096AB770FD2CDF22E8B9A25408FA6F765E01CFAF
Certificate serial:       3F6C9B7E5764A0121C6D89F669D368FF294C92D3
Authority key identifier: 09:6A:B7:70:FD:2C:DF:22:E8:B9:A2:54:08:FA:6F:76:5E:01:CF:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a3a2f33322d3332203d3e20323635343936.roa
Signing time:             Sun 12 Nov 2023 15:36:13 +0000
ROA not before:           Sun 12 Nov 2023 15:31:13 +0000
ROA not after:            Sun 10 Nov 2024 15:36:13 +0000
asID:                     265496
IP address blocks:        2804:3508::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6c:9b:7e:57:64:a0:12:1c:6d:89:f6:69:d3:68:ff:29:4c:92:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096AB770FD2CDF22E8B9A25408FA6F765E01CFAF
        Validity
            Not Before: Nov 12 15:31:13 2023 GMT
            Not After : Nov 10 15:36:13 2024 GMT
        Subject: CN=BDA36ED4CA46282CC07F6A87B66CDB664DFFD9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:70:c3:9f:83:7a:07:6e:1e:49:25:43:cc:c1:
                    67:90:99:4f:f9:13:70:23:a8:a2:a8:cb:a3:2f:cd:
                    d3:e3:83:6f:7b:24:76:e0:56:77:6b:27:fd:92:c9:
                    73:0f:cb:9b:5d:c7:13:6b:72:ab:e1:d2:63:a0:53:
                    4b:42:5d:e5:14:ad:7b:5d:ea:a0:2b:53:f2:1d:d2:
                    7a:29:bd:10:2f:67:f4:74:e2:29:3a:05:41:46:50:
                    5b:56:70:41:ee:4b:5b:bf:52:28:4d:96:a6:d5:71:
                    62:41:3b:f2:38:c4:8a:95:27:a2:e6:78:b8:eb:bc:
                    aa:04:13:de:79:de:28:a4:c8:1e:cb:08:39:95:a0:
                    29:7a:a5:3f:f8:ae:fc:06:21:2f:02:27:04:5e:59:
                    ec:ac:1d:98:db:0e:24:b9:c5:20:48:87:c9:b6:eb:
                    16:29:4d:56:5e:fd:3d:9a:ef:30:c7:fd:92:89:2f:
                    94:1f:13:1c:fa:31:19:3b:5e:80:a0:25:47:64:e3:
                    4e:f7:b3:e4:b6:8b:50:18:5f:02:87:9e:5d:f0:84:
                    9d:93:b0:79:4e:00:e3:89:c4:3a:96:0e:74:c2:96:
                    45:e2:0d:f8:3a:34:7b:8f:82:3f:3a:30:ca:78:13:
                    f5:0e:56:c6:9d:e9:68:4f:76:f8:f2:bc:df:07:e9:
                    ec:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A3:6E:D4:CA:46:28:2C:C0:7F:6A:87:B6:6C:DB:66:4D:FF:D9:ED
            X509v3 Authority Key Identifier:
                keyid:09:6A:B7:70:FD:2C:DF:22:E8:B9:A2:54:08:FA:6F:76:5E:01:CF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a3a2f33322d3332203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:66:ba:ff:71:38:81:a4:fb:bf:d2:d8:b7:d0:bc:25:4b:ce:
         04:ec:15:2a:ab:0d:a6:ce:42:93:40:bc:08:8b:be:59:4b:94:
         d2:f1:10:cf:f5:a5:e9:cd:15:f3:cc:da:c1:e7:11:81:26:f3:
         ea:03:a7:8f:d9:d8:a2:f9:af:92:78:57:f0:58:68:4d:1e:b4:
         73:75:0c:5d:20:2c:63:be:ab:e6:88:bb:51:82:ef:e0:63:94:
         d3:82:5d:cf:c8:87:a0:9e:a2:e1:fa:05:9c:53:2a:51:1e:a7:
         0a:bf:83:60:89:54:85:28:77:96:18:6b:0b:96:1d:22:1a:cb:
         aa:62:83:49:80:16:43:24:77:aa:de:46:c2:63:7c:62:77:09:
         5a:14:7a:a3:9a:5d:12:d0:9d:94:ff:42:e5:44:08:6e:93:89:
         89:d1:b9:83:2c:25:cf:13:ec:6e:81:ca:5b:4e:9f:7f:12:f5:
         c6:0e:a6:2b:d4:a5:14:3e:cc:91:a9:c4:42:c5:1c:ca:3f:5f:
         d6:25:f0:2d:f7:86:5f:3c:d0:01:38:1d:ab:2a:67:6b:b9:e9:
         9f:9b:2a:f4:5f:c4:0c:4f:9e:07:48:81:70:c0:dd:b2:10:98:
         87:2e:40:0f:0f:01:08:b6:f0:42:71:05:dc:4b:56:1f:c3:c1:
         29:97:59:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----