Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3133383a3a2f34352d3435203d3e20323638353638.roa
File:                     323830343a353332633a3133383a3a2f34352d3435203d3e20323638353638.roa (raw, json)
Hash identifier:          tAp0SdwPl1rzTtUjgKJ1CDSmRUrfaCkRQKusdQ0tbfs=
Subject key identifier:   8D:50:AA:AD:0C:71:49:86:99:E1:22:8F:0A:25:5B:0E:D0:06:CA:D0
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       396827520642E87A1F4B900F5C86D9038FF5CABE
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3133383a3a2f34352d3435203d3e20323638353638.roa
Signing time:             Wed 03 Jan 2024 03:10:00 +0000
ROA not before:           Wed 03 Jan 2024 03:05:00 +0000
ROA not after:            Wed 01 Jan 2025 03:10:00 +0000
asID:                     268568
IP address blocks:        2804:532c:138::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:68:27:52:06:42:e8:7a:1f:4b:90:0f:5c:86:d9:03:8f:f5:ca:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Jan  3 03:05:00 2024 GMT
            Not After : Jan  1 03:10:00 2025 GMT
        Subject: CN=3082010A0282010100CF2BDFA2EE83AE244AF104C3F84BF292E11465751B21BF4918C215032556A1A4CC77DDAB1602F1041DA2319197D2E4DC9A2BC4187AD2D6A00E3B9C11AC089027BA6832D48B789F435D00F12DE578B435EDA363CBBF15093C37E293EC06B16879EFF9F3A3A0A773F0DC55381D578BE5C7C711EC4E65AEE68CFF4D7834353045ACBD38E64D25446993E932EF4FB1BD92F28BD5A6CCC5885F4C11AD0D02B3EBE8BD4B20D6BDC3E3DE85D069AB862765CF0A432C9C701628A7ED656A5EC294DCC0F1424C984BC9BC6AB945BADE7E8EE247B3678C19CF73C87586D941BD37AFBC74C9A1E7889D30847CFC565C215261941C39B16E2BDF709077259D71D05686F1EF590203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2b:df:a2:ee:83:ae:24:4a:f1:04:c3:f8:4b:
                    f2:92:e1:14:65:75:1b:21:bf:49:18:c2:15:03:25:
                    56:a1:a4:cc:77:dd:ab:16:02:f1:04:1d:a2:31:91:
                    97:d2:e4:dc:9a:2b:c4:18:7a:d2:d6:a0:0e:3b:9c:
                    11:ac:08:90:27:ba:68:32:d4:8b:78:9f:43:5d:00:
                    f1:2d:e5:78:b4:35:ed:a3:63:cb:bf:15:09:3c:37:
                    e2:93:ec:06:b1:68:79:ef:f9:f3:a3:a0:a7:73:f0:
                    dc:55:38:1d:57:8b:e5:c7:c7:11:ec:4e:65:ae:e6:
                    8c:ff:4d:78:34:35:30:45:ac:bd:38:e6:4d:25:44:
                    69:93:e9:32:ef:4f:b1:bd:92:f2:8b:d5:a6:cc:c5:
                    88:5f:4c:11:ad:0d:02:b3:eb:e8:bd:4b:20:d6:bd:
                    c3:e3:de:85:d0:69:ab:86:27:65:cf:0a:43:2c:9c:
                    70:16:28:a7:ed:65:6a:5e:c2:94:dc:c0:f1:42:4c:
                    98:4b:c9:bc:6a:b9:45:ba:de:7e:8e:e2:47:b3:67:
                    8c:19:cf:73:c8:75:86:d9:41:bd:37:af:bc:74:c9:
                    a1:e7:88:9d:30:84:7c:fc:56:5c:21:52:61:94:1c:
                    39:b1:6e:2b:df:70:90:77:25:9d:71:d0:56:86:f1:
                    ef:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:50:AA:AD:0C:71:49:86:99:E1:22:8F:0A:25:5B:0E:D0:06:CA:D0
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3133383a3a2f34352d3435203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c:138::/45

    Signature Algorithm: sha256WithRSAEncryption
         8a:2a:fb:be:82:5c:3d:da:c1:9e:e6:7e:24:2a:fd:4e:d1:c9:
         5f:a8:d5:b4:b8:9e:44:f8:67:45:94:a0:5e:de:28:7c:37:17:
         58:31:15:11:a6:47:7c:14:16:b4:f5:a3:fc:eb:f7:67:b0:2f:
         18:48:40:8a:2d:76:a1:83:99:60:4f:00:72:b6:e1:7e:85:f4:
         4e:1c:f5:66:76:d5:57:ee:ea:32:92:fd:ed:ca:a9:ae:8f:b0:
         c4:93:4e:ff:c4:11:88:5f:7d:b6:ac:94:20:46:87:72:5b:0d:
         72:cc:70:87:29:bc:23:e2:56:f4:ae:7c:12:fb:b9:2f:08:23:
         75:8f:73:bd:90:4d:7e:a4:65:35:01:6b:6a:4b:41:a5:f8:91:
         64:54:cb:91:c2:29:60:89:59:77:6d:76:2e:8e:92:1e:08:79:
         a9:9f:39:1e:56:4f:89:4c:3d:61:37:e9:d6:88:bd:64:5c:e3:
         e8:61:fc:b9:32:23:4c:5e:91:ec:ed:ea:82:ca:8b:83:44:e8:
         9f:15:41:fb:67:66:46:1c:28:7c:96:9b:0f:f2:27:3d:ca:4f:
         05:17:a7:65:db:36:a5:01:e8:b8:71:16:47:f5:7f:ca:46:8a:
         7d:7c:5d:5a:ab:8b:65:81:2e:49:ba:1b:c8:50:93:e3:8f:b2:
         d6:19:14:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----