Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/323830343a316532633a3a2f33322d3438203d3e20323634343132.roa
File:                     323830343a316532633a3a2f33322d3438203d3e20323634343132.roa (raw, json)
Hash identifier:          huZJLgvOnid6ka+o6c0t1QQH23/AP/N0yxH7PHOhA10=
Subject key identifier:   D9:1D:62:9D:62:BA:D9:8A:5F:81:B9:A3:40:39:B7:4A:2B:06:B6:0C
Certificate issuer:       /CN=D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9
Certificate serial:       3E9997225009359C2106836BD803DD6999DA1F54
Authority key identifier: D6:C2:23:F2:35:2F:0D:FB:6A:59:72:27:5D:CA:2F:3C:94:71:A7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/323830343a316532633a3a2f33322d3438203d3e20323634343132.roa
Signing time:             Tue 21 Nov 2023 19:43:24 +0000
ROA not before:           Tue 21 Nov 2023 19:38:24 +0000
ROA not after:            Tue 19 Nov 2024 19:43:24 +0000
asID:                     264412
IP address blocks:        2804:1e2c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:99:97:22:50:09:35:9c:21:06:83:6b:d8:03:dd:69:99:da:1f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9
        Validity
            Not Before: Nov 21 19:38:24 2023 GMT
            Not After : Nov 19 19:43:24 2024 GMT
        Subject: CN=D91D629D62BAD98A5F81B9A34039B74A2B06B60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:34:cb:25:55:73:8d:02:0d:59:e9:67:58:
                    19:27:36:a8:ff:4a:b2:e4:94:0f:d9:65:a5:fa:ac:
                    f2:71:e1:01:1d:fb:66:c7:bd:77:7a:d5:b9:dd:5c:
                    a6:be:10:cb:14:7d:0b:93:1c:f4:6f:5c:a6:6e:ab:
                    5a:86:d3:45:82:4c:58:b5:3c:6f:88:b6:5f:df:d5:
                    9c:2e:9f:04:6b:5a:51:d3:eb:54:f4:77:39:07:47:
                    05:f9:b2:3c:24:19:d9:8f:1e:ea:d4:26:eb:21:c9:
                    c2:f1:bb:6f:eb:43:c6:d2:f9:af:dc:a6:4d:7c:69:
                    bb:55:6e:6c:2c:ed:14:cb:ca:71:5d:62:8a:13:fa:
                    0f:34:36:ab:5a:ec:56:de:96:2e:1a:7a:c9:fc:df:
                    01:88:c2:1d:08:a5:c8:c5:4c:c8:ba:0f:10:c9:1f:
                    38:25:42:8e:e0:30:0f:d8:ca:c8:7e:73:47:7e:ff:
                    37:55:bd:7d:4f:11:25:c3:b6:9e:4b:1e:70:57:2f:
                    31:b3:a5:66:70:b8:81:ff:7e:45:6c:6f:9f:7a:6b:
                    85:28:32:88:6a:8a:54:aa:55:4c:7b:8d:62:40:92:
                    89:29:81:ab:6e:da:e2:60:5b:2a:d7:b6:ad:03:64:
                    e3:40:88:87:08:4c:c8:42:c6:b8:58:38:24:f4:29:
                    e7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1D:62:9D:62:BA:D9:8A:5F:81:B9:A3:40:39:B7:4A:2B:06:B6:0C
            X509v3 Authority Key Identifier:
                keyid:D6:C2:23:F2:35:2F:0D:FB:6A:59:72:27:5D:CA:2F:3C:94:71:A7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/323830343a316532633a3a2f33322d3438203d3e20323634343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:48:f5:2b:32:48:99:80:18:27:3a:6c:3d:c5:a7:de:57:8a:
         2b:be:fc:4b:b2:a2:7d:3a:e3:13:ae:1f:9a:05:bb:bc:69:a1:
         72:b1:3f:e5:f6:c8:27:bc:8e:9e:6b:9f:df:e5:6d:ea:92:18:
         34:0a:af:f8:85:c0:11:4a:a7:2b:da:03:42:8b:87:1e:10:6c:
         a3:b9:9f:9f:c7:23:d2:89:88:ef:71:ef:75:77:62:14:da:80:
         57:ad:6c:01:52:3f:82:82:89:b1:82:b3:50:a3:6d:6b:1c:60:
         fb:30:26:b2:d1:ae:b5:62:54:b3:93:75:0b:6c:5a:48:28:b2:
         5f:4b:f5:5b:90:fe:b2:0c:45:47:14:a1:ed:db:71:64:81:48:
         47:da:ba:62:67:f6:ec:cb:c2:5e:49:70:26:13:9b:6e:fb:41:
         ff:84:64:60:36:97:d1:0a:6d:c4:48:c2:28:9f:09:3d:62:70:
         c5:cc:54:e8:af:99:77:bb:1b:09:e2:49:d4:95:e2:97:84:8c:
         80:02:ae:dd:72:7d:86:1a:10:b3:22:d4:b9:6b:fa:40:f7:7e:
         a5:5e:c9:9b:3a:8a:7a:ca:f9:79:56:20:fe:56:a0:04:de:3e:
         e5:7d:35:ee:43:b7:71:95:5e:72:76:74:03:44:9a:92:3d:6e:
         51:fb:f2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----