Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3133303a3a2f34362d3436203d3e20323638353638.roa
File:                     323830343a353332633a3133303a3a2f34362d3436203d3e20323638353638.roa (raw, json)
Hash identifier:          BuCYe6n5GL8EMHnwrO4veOr68ZzcGeMppZTvkrLhaaw=
Subject key identifier:   71:51:16:E6:46:BB:0A:16:9F:E6:9C:5C:6A:8A:1C:CA:6F:49:FF:37
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       35C66DD7C26EF4796426C5707A659D5A36A36654
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3133303a3a2f34362d3436203d3e20323638353638.roa
Signing time:             Wed 17 Jan 2024 18:00:01 +0000
ROA not before:           Wed 17 Jan 2024 17:55:01 +0000
ROA not after:            Wed 15 Jan 2025 18:00:01 +0000
asID:                     268568
IP address blocks:        2804:532c:130::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c6:6d:d7:c2:6e:f4:79:64:26:c5:70:7a:65:9d:5a:36:a3:66:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Jan 17 17:55:01 2024 GMT
            Not After : Jan 15 18:00:01 2025 GMT
        Subject: CN=3082010A0282010100C75B6E8E5B5CEEBCFE9CABE2F6184B9E41AFAAA077BD882B7A2425CB79247A9A830F6CA0AD3BC366B407F2CF1F14DC87D8DCC85CEFFB8F5FCEF3510437CB49FFB10B2AECE9C202A371D0096B9F49438BD955B634535017461C9824FC32524AF91B80DF26900AC0CB34E7384E6DC89D334819045B3C4DDC07CE97F44844E9BFE79CAA643B268F73780E9536CCAF96F6E3498B6721EF04C1DE5541474911FA9809B6996B6CC0BC8A3329872B5A2B96C0FBA5383925061D465B93A30FB174210FAD74F9675DCB3CBB37F6BADAE7B33A30868B82CB727AD083637F637E3A5E8011C27CA6217A6A8F2F41F2C148D70D86A98EDDFA4E23931BFF8A802F19EFCA11EA2B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:6e:8e:5b:5c:ee:bc:fe:9c:ab:e2:f6:18:
                    4b:9e:41:af:aa:a0:77:bd:88:2b:7a:24:25:cb:79:
                    24:7a:9a:83:0f:6c:a0:ad:3b:c3:66:b4:07:f2:cf:
                    1f:14:dc:87:d8:dc:c8:5c:ef:fb:8f:5f:ce:f3:51:
                    04:37:cb:49:ff:b1:0b:2a:ec:e9:c2:02:a3:71:d0:
                    09:6b:9f:49:43:8b:d9:55:b6:34:53:50:17:46:1c:
                    98:24:fc:32:52:4a:f9:1b:80:df:26:90:0a:c0:cb:
                    34:e7:38:4e:6d:c8:9d:33:48:19:04:5b:3c:4d:dc:
                    07:ce:97:f4:48:44:e9:bf:e7:9c:aa:64:3b:26:8f:
                    73:78:0e:95:36:cc:af:96:f6:e3:49:8b:67:21:ef:
                    04:c1:de:55:41:47:49:11:fa:98:09:b6:99:6b:6c:
                    c0:bc:8a:33:29:87:2b:5a:2b:96:c0:fb:a5:38:39:
                    25:06:1d:46:5b:93:a3:0f:b1:74:21:0f:ad:74:f9:
                    67:5d:cb:3c:bb:37:f6:ba:da:e7:b3:3a:30:86:8b:
                    82:cb:72:7a:d0:83:63:7f:63:7e:3a:5e:80:11:c2:
                    7c:a6:21:7a:6a:8f:2f:41:f2:c1:48:d7:0d:86:a9:
                    8e:dd:fa:4e:23:93:1b:ff:8a:80:2f:19:ef:ca:11:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:16:E6:46:BB:0A:16:9F:E6:9C:5C:6A:8A:1C:CA:6F:49:FF:37
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3133303a3a2f34362d3436203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c:130::/46

    Signature Algorithm: sha256WithRSAEncryption
         4b:5d:53:72:53:ac:8a:7d:ec:5f:e5:e0:4f:0c:0a:07:ce:66:
         56:73:3d:c8:7f:b9:8f:77:29:49:d0:52:27:65:bb:43:23:0f:
         5b:01:5b:bb:f4:cb:16:73:19:76:aa:b0:fd:ac:29:6c:f8:6f:
         bc:a3:f6:81:5e:4b:86:48:52:af:dc:1a:7d:21:fd:ba:e2:48:
         01:2e:97:4e:55:f3:f9:1c:31:b5:f7:a5:ee:18:8c:30:a3:58:
         c7:3a:63:04:f9:1d:8e:5a:2e:af:0c:1c:da:a3:26:a4:f3:b0:
         64:3c:38:9f:ce:94:51:52:75:7e:f5:21:2a:56:19:a4:19:f4:
         bf:28:31:9e:6f:82:c3:e7:43:47:08:d4:e5:67:aa:23:4b:d4:
         b2:5c:1a:8f:a1:56:49:98:8d:7f:15:5f:59:8f:5f:5b:ce:b7:
         80:10:22:2a:2e:f5:ce:5f:34:2d:62:a6:80:d4:66:5c:e9:b2:
         0f:bb:37:5c:68:ce:4d:8f:33:ea:cc:0f:e2:36:a2:f9:cc:72:
         8e:30:41:76:11:12:a4:1a:ee:f1:10:c5:14:5e:3a:0c:42:59:
         5c:64:91:00:81:80:db:73:76:b6:4f:cd:9f:66:82:49:9a:b2:
         ce:f7:31:a1:8a:ff:43:91:13:86:49:62:5a:51:a5:4c:d9:8e:
         a4:09:14:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----