Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3133303a3a2f34352d3435203d3e20323638353638.roa
File:                     323830343a353332633a3133303a3a2f34352d3435203d3e20323638353638.roa (raw, json)
Hash identifier:          FIi7jbMs19mpseCALkFbhEdbGwaf1OKizQLG4sFCzg8=
Subject key identifier:   D5:D3:FB:A7:F2:88:A2:9B:8B:3E:FB:2D:DA:CC:E9:81:7B:06:B4:8E
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       611A1D792C8F02F504F6FB108A5D84FF48BBB799
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3133303a3a2f34352d3435203d3e20323638353638.roa
Signing time:             Wed 03 Jan 2024 03:10:01 +0000
ROA not before:           Wed 03 Jan 2024 03:05:01 +0000
ROA not after:            Wed 01 Jan 2025 03:10:01 +0000
asID:                     268568
IP address blocks:        2804:532c:130::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1a:1d:79:2c:8f:02:f5:04:f6:fb:10:8a:5d:84:ff:48:bb:b7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Jan  3 03:05:01 2024 GMT
            Not After : Jan  1 03:10:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:6d:38:37:fd:a7:29:b0:9a:fe:e7:58:1d:
                    6a:78:43:d7:fa:fe:ba:a5:68:e0:71:b1:c6:2c:19:
                    25:d4:3c:e0:0c:f4:53:b5:a0:29:0c:a1:b5:2b:90:
                    8f:9d:1f:9b:5f:db:f7:83:7c:72:9b:a7:41:e6:ee:
                    a6:d1:42:89:b3:8d:25:b6:a3:f3:4b:3f:ae:ef:50:
                    34:cb:ea:9b:01:fa:ee:c9:d3:ac:d5:f7:58:4d:77:
                    51:d5:11:fa:85:18:82:45:5c:14:5c:62:2f:db:c3:
                    da:ab:44:d3:63:51:7b:f7:d9:77:e7:13:d3:4e:fd:
                    60:d8:87:4c:9e:01:d6:c1:f2:98:9a:28:3e:12:b2:
                    62:9c:59:5a:26:23:29:a0:ec:2e:a1:f8:3f:76:47:
                    fa:22:3a:ba:ac:c6:e2:2a:03:9d:b4:a1:96:e2:83:
                    29:87:dc:96:68:81:de:49:9b:c4:fa:64:74:f7:e8:
                    5f:32:9d:64:e9:96:e3:f8:70:58:10:30:e4:39:a2:
                    0b:66:6c:a9:cb:50:84:33:9f:41:66:b4:61:a3:4f:
                    eb:0e:28:bc:f9:69:50:00:50:f9:97:3e:59:a0:2b:
                    2e:01:c6:d3:8d:fb:85:2e:93:72:fd:1b:90:f8:a9:
                    45:a0:cc:ee:16:fd:ee:75:8f:6a:2a:f0:8e:f1:73:
                    5b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D3:FB:A7:F2:88:A2:9B:8B:3E:FB:2D:DA:CC:E9:81:7B:06:B4:8E
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3133303a3a2f34352d3435203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c:130::/45

    Signature Algorithm: sha256WithRSAEncryption
         41:eb:98:61:e3:da:31:b3:56:31:ac:f4:ca:59:43:26:11:b1:
         be:3e:84:e4:0e:a7:48:e8:98:ec:f6:29:26:ac:07:17:2c:0c:
         6a:38:06:6b:36:bf:90:13:25:98:e1:5d:99:28:5d:6d:7a:3d:
         a5:6b:d9:ba:1a:a7:ea:47:cd:e8:1a:01:09:6b:ac:b3:de:dd:
         cf:4e:f5:65:d8:b5:64:67:68:85:ac:4d:05:69:dc:08:3c:af:
         b7:c4:dd:5e:2a:5f:7f:5a:e3:7a:d9:5e:72:2c:80:e3:6e:03:
         7f:dd:bd:ee:4b:3a:03:fb:8e:48:45:0a:36:f5:04:1b:cc:f8:
         76:bb:8b:30:d4:92:99:97:31:1d:7e:bc:e9:ed:e9:7a:9b:9c:
         e8:77:f0:b3:d0:bc:44:b8:95:f3:64:0c:f2:c8:dc:49:e1:81:
         c3:09:90:7c:ac:bc:bb:28:a1:a4:a9:36:44:a0:2f:a2:74:ff:
         4c:f7:d4:67:ff:9a:9f:5f:f8:48:fe:24:37:73:a6:c5:ea:7f:
         4b:b1:82:30:3d:79:a4:29:ef:b9:75:af:9b:90:07:3e:cf:77:
         7d:94:fd:b8:ba:74:90:6a:bb:54:23:2d:77:ea:74:32:14:ab:
         cf:1d:62:90:24:ae:f0:ac:9b:69:95:e4:e8:5e:1e:73:80:bd:
         d4:0c:d6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----