Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3a2f33322d3332203d3e20323638353638.roa
File:                     323830343a353332633a3a2f33322d3332203d3e20323638353638.roa (raw, json)
Hash identifier:          4SpsfKy7rXxDt/jHVZ5hfk+aweWVNIyM0naoXMpneS8=
Subject key identifier:   CC:9C:7A:DE:7F:A1:AC:CF:ED:36:C5:D8:6F:08:1C:9C:51:66:BC:5D
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       615A138E796F9AE155B9D64FD2A756D44FC198B3
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3a2f33322d3332203d3e20323638353638.roa
Signing time:             Wed 17 Jan 2024 17:56:00 +0000
ROA not before:           Wed 17 Jan 2024 17:51:00 +0000
ROA not after:            Wed 15 Jan 2025 17:56:00 +0000
asID:                     268568
IP address blocks:        2804:532c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5a:13:8e:79:6f:9a:e1:55:b9:d6:4f:d2:a7:56:d4:4f:c1:98:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Jan 17 17:51:00 2024 GMT
            Not After : Jan 15 17:56:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:c8:01:5f:26:ba:d5:11:23:86:82:3c:81:
                    d0:de:a7:1c:43:94:ce:34:0f:5b:bb:79:73:e2:49:
                    f1:a7:60:8a:4b:95:e6:1f:bc:68:57:8e:b1:88:b5:
                    d0:fa:6c:90:11:03:58:95:9b:43:32:8e:09:df:9d:
                    61:cd:7a:85:95:fb:9a:ae:9f:92:b7:23:1e:75:8f:
                    6b:10:7c:32:db:c8:2b:74:ee:2a:5e:5a:27:ef:ea:
                    24:82:ff:4a:1a:40:7e:3d:ec:74:83:46:fa:59:8e:
                    c7:2a:dd:fa:95:f1:d6:c4:bf:70:25:0e:68:c3:42:
                    91:1e:81:76:64:e7:ff:13:4e:73:98:cd:e0:b9:e9:
                    d1:ff:b2:f8:6e:f5:c2:34:05:46:27:de:32:57:92:
                    ce:36:4f:32:47:71:7e:2b:37:f0:dc:3a:14:2b:8c:
                    10:ce:2d:cf:98:f5:e1:04:ad:ef:f0:1b:44:a4:33:
                    5b:ec:d2:fa:61:aa:64:3f:8b:e7:e8:f5:5f:ea:b7:
                    50:56:aa:e6:86:3f:9b:59:31:0c:ef:99:f3:71:5e:
                    e6:b2:e7:e1:ea:92:c7:8d:c8:f1:25:8b:45:3c:24:
                    91:04:0c:5a:7f:37:bc:5d:93:bc:fa:30:85:c5:5b:
                    e2:96:70:ce:d1:fb:15:ab:30:a7:16:e2:08:3b:69:
                    a6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9C:7A:DE:7F:A1:AC:CF:ED:36:C5:D8:6F:08:1C:9C:51:66:BC:5D
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3a2f33322d3332203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:43:83:40:23:f1:f4:bf:7e:2b:70:21:dd:d6:17:22:a2:a1:
         81:c0:c7:a4:b4:f8:1e:1d:92:92:b0:45:29:9c:74:f1:f7:49:
         22:40:9a:82:cb:c7:a3:41:da:78:b7:29:e1:7a:06:9f:58:d4:
         7f:a7:f0:d5:57:81:23:23:53:b3:ba:47:3b:c4:01:f2:e8:36:
         e8:2d:ed:02:7f:e4:76:0a:7d:1b:bc:7b:01:b5:da:3b:1c:a2:
         ac:49:b9:ec:7f:62:f6:ec:85:ef:bf:77:90:24:25:dc:62:26:
         12:c2:50:d3:9d:63:81:84:31:3b:94:e3:13:a5:a6:8c:92:ef:
         35:4e:f8:07:47:db:2b:67:f8:d8:12:dd:5b:22:70:5a:75:77:
         5e:24:b2:68:71:ff:fa:b5:1d:31:da:78:5b:e7:de:72:18:7d:
         17:de:fb:e7:36:73:b3:43:37:a5:eb:55:4a:ce:23:63:5e:5d:
         35:23:09:f7:bd:2d:a1:8e:5d:87:5a:0b:bd:f8:d9:ee:00:8f:
         35:35:78:7d:1e:9e:11:e0:49:3b:40:59:da:2e:0c:b2:3a:5c:
         bc:55:1f:42:48:55:b4:d7:2d:01:78:9c:50:c0:34:6b:69:2c:
         69:a2:fa:6f:66:bd:e8:2c:4a:29:c7:6b:fd:ba:cd:20:d4:c3:
         10:5a:65:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----