Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/323830343a336539383a3a2f33322d3332203d3e20323636363038.roa
File:                     323830343a336539383a3a2f33322d3332203d3e20323636363038.roa (raw, json)
Hash identifier:          O6RwJNlgG1/ST7BSQ18fwgD90Pq6c3Ot1Nr+Qfa5ZMk=
Subject key identifier:   A4:8C:F5:B8:C4:55:51:C0:46:33:A1:60:4B:BD:CC:FC:7D:27:25:7E
Certificate issuer:       /CN=CF178172195A182C594FB724DD7B684E9210DA90
Certificate serial:       60775B18EF5B9094F31D79BBD086539882345A5A
Authority key identifier: CF:17:81:72:19:5A:18:2C:59:4F:B7:24:DD:7B:68:4E:92:10:DA:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF178172195A182C594FB724DD7B684E9210DA90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/323830343a336539383a3a2f33322d3332203d3e20323636363038.roa
Signing time:             Fri 27 Oct 2023 21:15:18 +0000
ROA not before:           Fri 27 Oct 2023 21:10:18 +0000
ROA not after:            Fri 25 Oct 2024 21:15:18 +0000
asID:                     266608
IP address blocks:        2804:3e98::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:77:5b:18:ef:5b:90:94:f3:1d:79:bb:d0:86:53:98:82:34:5a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF178172195A182C594FB724DD7B684E9210DA90
        Validity
            Not Before: Oct 27 21:10:18 2023 GMT
            Not After : Oct 25 21:15:18 2024 GMT
        Subject: CN=A48CF5B8C45551C04633A1604BBDCCFC7D27257E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:df:eb:29:ba:33:75:90:a8:cd:01:22:04:
                    90:b2:80:dd:73:a3:d2:c0:ec:81:e9:49:81:fd:b7:
                    4f:1a:58:0e:93:3a:4c:fc:91:e4:e3:33:5b:f7:07:
                    33:ab:93:e3:82:82:3b:9f:73:53:a1:72:2c:8f:2a:
                    d8:49:4a:95:64:b4:73:cc:c2:d0:d2:4d:1d:80:cc:
                    81:36:0e:7d:47:a7:43:45:4b:31:d6:84:1c:ec:b1:
                    7a:d0:ce:0e:69:a7:89:09:72:99:7a:33:64:d6:cf:
                    03:1c:9d:0c:b8:0a:ff:cc:1d:28:50:3c:f7:36:8b:
                    09:2b:88:e1:f3:e4:36:3e:58:c1:5c:da:24:d4:73:
                    e2:53:27:51:e1:c2:59:72:14:48:7f:33:bb:24:b6:
                    c2:71:1f:a4:2e:9f:b3:0f:c8:c7:c9:b3:3f:4c:90:
                    36:1c:50:0b:65:18:cd:fb:60:82:2a:4b:95:4f:82:
                    a4:11:1d:ba:d1:84:28:0e:3a:f7:77:55:cd:f8:6f:
                    9b:0c:4e:b5:bb:fe:b6:8f:66:78:5f:79:3c:94:21:
                    b3:0c:51:a7:49:f7:58:94:ea:b9:cf:3a:df:2d:07:
                    c6:fd:ef:60:16:54:99:85:a5:f0:ed:37:09:82:84:
                    87:58:2b:aa:31:52:68:fd:b0:36:67:96:21:26:ac:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8C:F5:B8:C4:55:51:C0:46:33:A1:60:4B:BD:CC:FC:7D:27:25:7E
            X509v3 Authority Key Identifier:
                keyid:CF:17:81:72:19:5A:18:2C:59:4F:B7:24:DD:7B:68:4E:92:10:DA:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/CF178172195A182C594FB724DD7B684E9210DA90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF178172195A182C594FB724DD7B684E9210DA90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/323830343a336539383a3a2f33322d3332203d3e20323636363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e98::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:ec:4b:ad:d6:34:79:89:2c:c1:bb:bb:e0:60:a3:c2:23:75:
         de:3f:bd:0a:0d:75:3b:23:ab:d6:00:ae:c8:ed:fc:e4:71:0a:
         81:0b:97:da:62:79:a8:b1:02:20:51:9d:13:7b:e7:20:0e:19:
         76:0a:e2:f9:0d:dd:d7:a3:0c:eb:f8:fc:ef:cd:12:05:56:86:
         89:f5:7c:3f:c2:32:8b:54:a8:53:a1:96:57:c7:a9:c8:87:01:
         f3:7c:e3:c0:4d:e4:8a:24:1d:a0:08:95:f6:4b:ae:e9:92:df:
         97:80:c7:b5:88:4d:99:a5:0b:d8:f2:65:4c:1c:98:93:05:73:
         56:28:bb:2c:91:d8:d1:95:ee:d5:f0:f4:1a:60:6a:47:56:37:
         aa:c6:8d:c4:e7:26:c9:06:30:16:87:07:aa:eb:ea:41:9f:10:
         bf:fe:1d:df:2b:12:7f:46:88:19:73:39:55:b3:20:6d:ce:7e:
         b7:6d:b7:4e:d9:11:1c:d9:58:32:90:37:c4:74:97:4a:0c:fb:
         b3:e6:9d:b1:48:f3:da:3f:76:cd:25:08:fc:86:f1:8a:dc:31:
         c0:5a:d7:fd:e8:9b:8e:d9:31:ba:e9:ac:c5:41:1d:eb:59:ff:
         4f:e7:e4:a2:29:b8:26:7b:04:67:a3:a3:8a:c7:33:31:48:65:
         1a:54:9a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----