Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/323830343a326563343a3a2f33322d3332203d3e20323635333635.roa
File:                     323830343a326563343a3a2f33322d3332203d3e20323635333635.roa (raw, json)
Hash identifier:          jyfHJ4Pfqmfp3ugLhLVomZQswIaN26zg0s2dzP1JcDc=
Subject key identifier:   1A:58:7A:37:EB:30:06:E4:CE:82:D9:4F:FE:25:D0:C5:6E:D8:44:3A
Certificate issuer:       /CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
Certificate serial:       0B58510FF5930DCDEF2D84E413557B9E03227905
Authority key identifier: 47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/323830343a326563343a3a2f33322d3332203d3e20323635333635.roa
Signing time:             Sun 14 Jan 2024 12:00:00 +0000
ROA not before:           Sun 14 Jan 2024 11:55:00 +0000
ROA not after:            Sun 12 Jan 2025 12:00:00 +0000
asID:                     265365
IP address blocks:        2804:2ec4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:58:51:0f:f5:93:0d:cd:ef:2d:84:e4:13:55:7b:9e:03:22:79:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
        Validity
            Not Before: Jan 14 11:55:00 2024 GMT
            Not After : Jan 12 12:00:00 2025 GMT
        Subject: CN=1A587A37EB3006E4CE82D94FFE25D0C56ED8443A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:1f:0f:f5:12:7e:59:34:9b:2d:5c:0b:75:
                    f4:fd:60:ca:be:65:45:26:93:21:df:29:16:a4:73:
                    96:84:5a:b5:ed:ff:36:8d:6d:ae:5a:03:8b:3e:5e:
                    7b:02:8d:29:d7:85:77:71:3a:c8:9b:cc:7b:90:50:
                    c5:72:55:26:cd:8a:a1:a3:f5:2b:e3:8e:86:d5:06:
                    9f:c3:26:99:fd:d2:eb:ce:6e:fb:72:5c:1b:91:8d:
                    05:94:fb:73:8c:5e:33:a6:6c:73:d2:18:92:af:f2:
                    76:97:d9:ee:50:83:10:cc:e1:af:61:ae:12:d8:21:
                    c2:e2:ec:b2:e2:a8:b4:43:8f:02:e6:38:de:4d:07:
                    b9:57:c7:30:ec:e0:38:57:f2:34:50:47:75:38:8b:
                    b0:19:4c:c0:8a:df:4d:85:5b:17:16:30:9a:f6:43:
                    3e:12:52:f2:77:13:0e:16:cf:28:0f:d2:18:5c:33:
                    13:1f:42:57:f7:0b:0f:f7:a8:94:f8:f2:d3:8c:62:
                    46:9c:b8:7d:ec:71:25:47:60:77:e3:f6:e3:3d:b3:
                    27:8e:fc:59:5e:2a:a7:eb:00:af:4d:ad:9e:c0:70:
                    ef:50:c0:3c:59:25:b0:a2:b2:b3:44:5f:00:e7:77:
                    38:7c:a7:ac:9e:24:c0:a0:07:0f:8a:e6:ff:76:f3:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:58:7A:37:EB:30:06:E4:CE:82:D9:4F:FE:25:D0:C5:6E:D8:44:3A
            X509v3 Authority Key Identifier:
                keyid:47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/323830343a326563343a3a2f33322d3332203d3e20323635333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ec4::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:10:c6:41:ac:f3:eb:0b:8f:ce:d1:08:bb:85:1c:53:af:8d:
         3d:e7:8a:df:ce:97:a2:e8:64:17:c1:43:d1:94:e9:6a:ff:ad:
         b0:64:ca:8a:f7:40:56:97:bd:e6:e9:4f:f8:54:e8:ea:b4:df:
         cd:f0:c6:18:51:01:d0:35:d9:d9:46:15:bd:1b:4c:f4:38:7f:
         9e:4d:bf:e4:72:76:21:1b:95:ef:95:d6:3f:55:cd:b9:0d:72:
         99:48:72:86:52:43:00:7e:82:4c:7c:5c:f2:3a:22:19:61:0e:
         5b:08:aa:c8:94:3c:c0:68:07:e8:91:de:e4:4b:eb:a6:7a:7c:
         9f:3b:b4:cd:7b:2c:c8:b0:3e:c5:93:9d:a7:fb:7c:b4:c2:33:
         d6:68:ec:dc:46:d3:fe:97:ab:78:c2:ef:fe:cb:49:8b:35:2c:
         3f:85:32:db:86:a6:20:22:57:b8:c0:22:18:16:2b:f8:0d:b4:
         78:cc:59:96:1c:e9:33:3c:7c:8e:63:e9:7a:bf:78:fb:d8:91:
         f9:62:f2:ea:6d:bc:07:8a:85:e8:22:bc:5f:4a:87:65:23:3e:
         b3:4e:33:15:de:37:76:58:80:d0:83:ea:02:7c:68:ff:11:a8:
         18:48:9d:53:59:77:36:37:23:21:b6:52:b1:24:68:61:43:ca:
         91:94:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----