Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/323830343a313133343a3a2f33322d3332203d3e20323633363635.roa
File:                     323830343a313133343a3a2f33322d3332203d3e20323633363635.roa (raw, json)
Hash identifier:          M5/SgD9F6MYV7zmxiun1tE3P3JzR4TpFMi4aFy1SN9o=
Subject key identifier:   2A:EC:20:4A:7A:DE:75:B2:19:61:74:C5:78:33:6A:D9:A6:19:A6:C9
Certificate issuer:       /CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
Certificate serial:       4A4CD971900E7768FC529B7ECE2DF69F0BAA76F7
Authority key identifier: 9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/323830343a313133343a3a2f33322d3332203d3e20323633363635.roa
Signing time:             Mon 08 Apr 2024 20:11:31 +0000
ROA not before:           Mon 08 Apr 2024 20:06:31 +0000
ROA not after:            Mon 07 Apr 2025 20:11:31 +0000
asID:                     263665
IP address blocks:        2804:1134::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4c:d9:71:90:0e:77:68:fc:52:9b:7e:ce:2d:f6:9f:0b:aa:76:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
        Validity
            Not Before: Apr  8 20:06:31 2024 GMT
            Not After : Apr  7 20:11:31 2025 GMT
        Subject: CN=2AEC204A7ADE75B2196174C578336AD9A619A6C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:a4:d1:ae:2c:11:3b:42:73:56:e7:02:cd:
                    5b:db:5c:3e:b9:88:b2:40:22:14:f4:7e:15:dd:81:
                    a1:6a:a4:44:3e:2c:a5:c2:9e:c3:ca:6d:95:08:a3:
                    f8:26:ab:29:06:ce:4d:71:87:79:c0:57:3a:62:06:
                    2b:76:3c:9e:8b:fe:61:60:2c:c5:5a:30:20:8d:0b:
                    64:57:4a:5b:71:c5:a5:59:cb:3c:3b:d7:bf:09:5f:
                    1f:16:3b:0f:b3:b0:11:06:84:a7:dc:64:4b:11:96:
                    b8:45:5f:58:8a:f5:67:56:fc:3b:64:1e:b8:b8:ea:
                    1c:41:83:7b:0c:36:88:6b:c4:2e:ac:f8:be:1f:9a:
                    d2:e9:2e:1e:c0:56:12:31:85:90:81:4e:e8:20:82:
                    e2:00:a8:34:a0:2f:3e:23:ac:b5:f0:a0:82:80:73:
                    2e:56:e1:8e:12:38:85:74:28:96:6b:c1:fe:d0:c6:
                    56:1f:28:7a:56:45:ae:64:be:be:3b:f7:b9:0c:ca:
                    55:11:90:a9:16:dd:50:f2:12:1c:c2:60:4b:9c:04:
                    a3:e3:90:0c:a8:02:ff:a6:89:f0:7a:78:3b:a6:8c:
                    3b:73:a7:7e:7f:33:e2:01:e4:06:8b:e5:8f:59:44:
                    87:20:48:76:ed:5d:93:66:e1:3b:fd:7e:91:51:97:
                    98:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EC:20:4A:7A:DE:75:B2:19:61:74:C5:78:33:6A:D9:A6:19:A6:C9
            X509v3 Authority Key Identifier:
                keyid:9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/9EF83D76B3DC326DCCE8463508DDB005DC545896.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/323830343a313133343a3a2f33322d3332203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1134::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:59:fe:ae:9d:78:4d:b3:a9:ac:53:d9:02:b5:a4:82:c2:98:
         36:bf:a4:92:47:98:f6:0e:ae:99:98:ef:1c:50:d2:e2:6a:f5:
         e6:4c:38:17:f5:e8:40:75:16:4a:6d:63:93:87:a1:1f:74:98:
         ff:9d:7b:51:cc:05:2e:ce:cb:1a:79:d8:97:2f:f0:81:87:32:
         0c:f3:27:de:1b:41:5c:19:94:7a:64:16:5d:a5:cd:a0:a2:48:
         58:ae:01:02:93:a9:cf:63:34:44:48:99:d4:ae:03:c1:ee:6d:
         d0:79:db:91:a9:51:6a:45:89:1f:96:34:89:9d:b0:7c:7a:a9:
         be:e3:30:74:e5:ab:55:94:eb:d2:c4:a7:ea:6f:b2:e9:d0:2e:
         87:7d:66:d7:52:cf:1c:c3:47:b9:01:07:07:f2:5c:39:94:26:
         c4:a1:2e:cd:56:78:75:49:f4:ae:b1:28:1a:d5:b1:7a:73:b5:
         f8:74:a3:c3:df:c1:14:2e:09:fc:6e:86:84:3e:36:d1:d7:30:
         b3:6a:b8:17:60:5c:ed:84:30:77:db:35:5c:c3:c8:8a:ca:49:
         f0:85:1d:3c:57:64:ce:f2:de:ae:bc:7c:c6:2a:b9:b1:60:ac:
         17:42:49:79:f0:d5:ed:0f:e8:3c:f1:2a:d7:db:4a:ec:a5:d5:
         eb:23:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----