Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3133303a3a2f34352d3435203d3e20323638313434.roa
File:                     323830343a353862303a3133303a3a2f34352d3435203d3e20323638313434.roa (raw, json)
Hash identifier:          JfYE9+9qUTjnx1NBYlR/nipJ1CrnoBlIGUh6mx/xzKg=
Subject key identifier:   16:5B:72:69:71:FF:1D:69:41:77:7B:A1:03:81:65:7E:EF:7A:17:11
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       4BA1D0BB85A7AFD843C58E47162A507A249B899C
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3133303a3a2f34352d3435203d3e20323638313434.roa
Signing time:             Fri 15 Sep 2023 16:56:00 +0000
ROA not before:           Fri 15 Sep 2023 16:51:00 +0000
ROA not after:            Fri 13 Sep 2024 16:56:00 +0000
asID:                     268144
IP address blocks:        2804:58b0:130::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a1:d0:bb:85:a7:af:d8:43:c5:8e:47:16:2a:50:7a:24:9b:89:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Sep 15 16:51:00 2023 GMT
            Not After : Sep 13 16:56:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c3:04:0f:4c:17:ab:e1:e5:2d:e4:b7:5c:39:
                    8d:80:54:52:11:06:ff:41:75:0a:d1:51:5e:d1:b3:
                    a4:0d:b6:9a:67:2d:bc:32:e8:4c:e7:e9:e8:2e:5f:
                    58:c9:58:54:d7:8f:55:3b:83:2f:e8:f5:38:71:3f:
                    6d:fb:8a:31:b6:29:80:4d:c1:a6:d1:9e:ef:b1:fa:
                    66:39:4c:35:fb:f3:2e:98:a6:b7:fa:cb:83:d4:f6:
                    d1:61:4a:2e:61:48:7f:9d:87:a2:ea:f7:7c:25:e9:
                    c9:c0:78:7e:be:5c:f2:70:31:ea:e8:65:3b:21:38:
                    67:50:9b:b5:fa:51:99:85:82:9d:40:fe:a3:08:30:
                    62:2a:dc:3f:88:11:40:40:c1:9f:bd:a2:b9:ff:08:
                    7c:71:d6:ff:38:c6:9e:0e:ae:e5:43:16:cb:89:2d:
                    0e:f0:6d:79:fb:a9:da:b5:27:b9:34:fa:7a:51:0c:
                    5c:13:07:64:75:08:eb:73:a1:be:cd:c3:dd:fc:55:
                    3d:97:55:34:b7:0e:9d:d9:f5:da:92:72:d2:9e:5d:
                    25:b7:75:1b:a7:f8:31:2c:e0:6d:df:70:78:38:83:
                    71:17:67:6f:a3:a5:95:54:5d:ac:40:7a:4b:0a:50:
                    a6:76:5a:58:0c:78:a5:88:78:35:68:3d:20:39:cf:
                    f2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5B:72:69:71:FF:1D:69:41:77:7B:A1:03:81:65:7E:EF:7A:17:11
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3133303a3a2f34352d3435203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:130::/45

    Signature Algorithm: sha256WithRSAEncryption
         a6:39:66:79:e0:9c:8a:47:bc:fb:89:fa:8f:84:bd:ca:43:6e:
         da:87:38:e3:df:3a:35:e8:40:b6:43:47:00:d0:61:bc:40:dd:
         66:bd:18:66:8a:45:57:4b:84:71:b5:a9:f3:20:67:f3:e7:d5:
         73:77:3b:6c:70:86:3e:8e:14:d6:5e:fc:ad:d0:33:40:21:94:
         0a:dd:ef:91:7d:36:66:51:80:97:15:98:f9:ad:3e:d2:6a:e3:
         e5:0b:70:b3:a1:63:4d:84:bb:88:50:1d:5d:29:e9:1d:b2:46:
         a5:4c:44:07:7a:af:19:85:9f:83:34:c6:c1:a9:aa:fd:11:3c:
         a8:61:ff:a5:44:bf:1e:47:5b:58:55:b7:31:15:34:86:bd:fe:
         19:23:bf:ce:9b:4e:c0:74:27:c7:5a:b2:42:ce:78:92:dc:fe:
         a0:bb:da:d4:b4:f8:10:32:39:47:42:34:2a:c8:b8:b9:6e:39:
         17:30:29:66:98:73:07:6a:80:d6:40:63:cb:68:09:80:d9:bc:
         37:82:34:4d:d0:88:a8:5d:25:d4:cb:6c:64:46:b0:be:22:68:
         e7:80:fe:59:a3:28:af:8f:75:2b:d4:00:2e:25:9a:e9:d8:08:
         ad:c0:93:eb:5f:24:96:4f:2f:0d:a3:28:a0:62:67:28:ab:6f:
         9b:87:d1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----