Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3438203d3e20323731373631.roa
File:                     323830343a383039383a3a2f33322d3438203d3e20323731373631.roa (raw, json)
Hash identifier:          bz3APfecP2gmpOZsoCTU5g3MqCl8XrL4jCl6MDFHKNM=
Subject key identifier:   A6:0F:D0:34:D8:D2:5A:C3:4F:7A:82:3C:6D:65:7D:51:FA:55:B0:F3
Certificate issuer:       /CN=BB9365DEF2F89561A2197EE7A90A22E2FE9D724D
Certificate serial:       08D3638EA2D9290108DC26555621D228AE1B8171
Authority key identifier: BB:93:65:DE:F2:F8:95:61:A2:19:7E:E7:A9:0A:22:E2:FE:9D:72:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB9365DEF2F89561A2197EE7A90A22E2FE9D724D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3438203d3e20323731373631.roa
Signing time:             Tue 27 Jun 2023 21:25:50 +0000
ROA not before:           Tue 27 Jun 2023 21:20:50 +0000
ROA not after:            Tue 25 Jun 2024 21:25:50 +0000
asID:                     271761
IP address blocks:        2804:8098::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d3:63:8e:a2:d9:29:01:08:dc:26:55:56:21:d2:28:ae:1b:81:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB9365DEF2F89561A2197EE7A90A22E2FE9D724D
        Validity
            Not Before: Jun 27 21:20:50 2023 GMT
            Not After : Jun 25 21:25:50 2024 GMT
        Subject: CN=A60FD034D8D25AC34F7A823C6D657D51FA55B0F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:94:92:a4:36:74:34:a7:69:ea:ee:11:16:
                    ae:46:12:53:ba:ef:f4:47:87:a2:83:f9:69:fb:e7:
                    8a:eb:79:e3:d0:8c:40:df:e3:cb:ca:f9:d1:3e:57:
                    8e:5b:6f:29:58:52:78:24:e2:4b:5a:9e:57:8c:f3:
                    ac:b9:86:e4:df:3a:a2:30:98:3b:cc:62:f6:94:66:
                    69:3a:7f:cd:2e:f5:78:4d:69:c4:c6:fe:b5:df:52:
                    a2:86:7c:57:7e:c7:aa:f9:14:41:fa:08:6f:99:56:
                    08:40:f7:fe:b1:42:71:25:28:7a:d3:c3:c5:52:ad:
                    47:e0:6a:74:ad:fa:b3:49:b3:91:dc:93:76:43:54:
                    f7:d5:c8:3d:c1:40:fe:f9:e7:b1:fe:3d:b1:b0:6c:
                    4b:e2:b0:84:84:54:18:20:c0:b7:60:21:4e:31:38:
                    38:9c:c3:c3:35:9d:36:d6:c0:7c:72:6c:5c:71:25:
                    61:ae:76:20:ac:b1:20:89:45:a4:38:f3:13:87:3c:
                    5f:40:a5:8f:8d:cf:10:f0:9d:71:54:84:31:0b:c6:
                    d6:bf:02:a1:8b:c1:de:96:e0:98:c3:0c:f5:76:a5:
                    cd:b8:c0:74:84:da:d5:43:c9:68:58:99:7f:5f:13:
                    2d:d7:f7:14:5c:ab:e2:78:a4:c3:4a:c9:b5:9b:0b:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0F:D0:34:D8:D2:5A:C3:4F:7A:82:3C:6D:65:7D:51:FA:55:B0:F3
            X509v3 Authority Key Identifier:
                keyid:BB:93:65:DE:F2:F8:95:61:A2:19:7E:E7:A9:0A:22:E2:FE:9D:72:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/BB9365DEF2F89561A2197EE7A90A22E2FE9D724D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB9365DEF2F89561A2197EE7A90A22E2FE9D724D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3438203d3e20323731373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8098::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:f2:09:f8:12:5c:cf:ea:4a:73:b6:03:ca:56:7e:8e:c1:4f:
         0b:6f:9c:d6:40:e8:ae:f2:89:de:2c:75:29:f9:09:30:09:8a:
         59:54:d2:e3:ce:ff:b7:aa:28:b4:da:4b:a4:11:70:90:8b:32:
         2e:ad:e1:c8:30:42:fe:83:9e:eb:4b:0f:8b:a9:da:28:46:da:
         6b:dd:02:40:21:e4:4e:c1:ba:3a:25:d3:1a:eb:f2:f6:c6:71:
         7d:c6:0e:4b:27:9c:42:ce:8d:d6:47:07:d2:c6:c0:66:78:8b:
         3f:d8:bc:1e:9d:2d:fe:ca:ad:55:b9:4c:db:3a:0c:f9:98:33:
         b7:14:c5:8b:56:67:d6:40:56:25:f0:93:56:5b:7b:57:3d:77:
         3e:93:69:16:e6:c6:9f:c9:57:b1:df:74:f8:20:c9:35:3e:52:
         a1:e4:b0:e6:fa:25:fa:b7:30:e6:1e:93:a4:35:25:ad:ac:61:
         d7:1c:29:62:93:4f:d2:c2:f7:f8:ca:63:fc:0b:ee:8f:8e:b5:
         3e:9e:3a:f8:f1:5e:14:b4:52:20:84:f9:8d:32:cb:2e:5c:b2:
         43:f4:8c:80:9b:4e:30:12:6c:59:19:44:3c:e6:a6:8a:d1:86:
         40:77:c4:5e:1f:24:5c:23:12:62:2e:2f:c8:a6:83:d1:da:05:
         87:3e:22:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----