Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/0/323830343a363362343a3a2f33322d3438203d3e20323639333738.roa
File:                     323830343a363362343a3a2f33322d3438203d3e20323639333738.roa (raw, json)
Hash identifier:          10jS/Z2CqGFg5soXML7tHkZbsY/S4blFicLeNe5LrdU=
Subject key identifier:   80:3C:90:60:DF:5A:A6:CD:20:B3:76:BD:D4:B9:33:A1:D1:EA:B7:C6
Certificate issuer:       /CN=5A4B203CF6C5A4FD2D00BEB3AEA7A3E9EE167807
Certificate serial:       78BFB7BC1CD3C5297B76A7B902568BF922DC3554
Authority key identifier: 5A:4B:20:3C:F6:C5:A4:FD:2D:00:BE:B3:AE:A7:A3:E9:EE:16:78:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A4B203CF6C5A4FD2D00BEB3AEA7A3E9EE167807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/0/323830343a363362343a3a2f33322d3438203d3e20323639333738.roa
Signing time:             Sun 28 Jan 2024 00:01:08 +0000
ROA not before:           Sat 27 Jan 2024 23:56:08 +0000
ROA not after:            Sun 26 Jan 2025 00:01:08 +0000
asID:                     269378
IP address blocks:        2804:63b4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bf:b7:bc:1c:d3:c5:29:7b:76:a7:b9:02:56:8b:f9:22:dc:35:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A4B203CF6C5A4FD2D00BEB3AEA7A3E9EE167807
        Validity
            Not Before: Jan 27 23:56:08 2024 GMT
            Not After : Jan 26 00:01:08 2025 GMT
        Subject: CN=803C9060DF5AA6CD20B376BDD4B933A1D1EAB7C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:f6:d3:09:66:99:0a:b5:5f:0a:e3:2a:13:
                    6b:44:d4:3f:f8:2f:2f:c9:1e:78:c3:e2:38:9e:22:
                    51:f1:b0:d8:3f:de:70:17:f3:94:95:b5:6b:0b:ff:
                    70:18:1e:8c:65:9b:7a:2b:b2:50:6e:ff:1c:f0:72:
                    d5:e4:d5:93:d0:3d:27:2a:b9:b2:78:f8:88:89:a7:
                    36:b1:83:a0:c3:e3:34:f1:9c:13:fd:8f:58:d4:3f:
                    48:3d:95:3b:7d:26:e6:ed:56:d8:49:0b:2f:db:aa:
                    42:43:3a:f1:ae:6b:4e:a4:9b:cf:aa:b2:d8:73:56:
                    db:35:e0:6a:01:55:55:4c:27:21:ee:dc:ab:1f:e6:
                    83:b9:6b:16:3d:d6:8f:9d:a9:27:bd:e7:05:b8:84:
                    b4:d2:1d:e2:68:8f:ae:67:96:6c:b6:6b:fe:d8:90:
                    a1:ff:7c:76:31:ec:a9:15:0f:b0:64:7b:c4:6b:57:
                    e2:b2:85:7d:05:a3:b7:56:2b:8d:47:58:65:d7:fe:
                    f9:8c:c0:a6:b6:12:f5:24:0c:6c:00:f8:eb:38:a0:
                    22:3f:60:c4:d5:b1:cd:c3:2d:b6:31:43:0b:d1:b1:
                    3c:40:21:73:01:1c:23:8d:38:91:f2:cd:73:3f:c4:
                    76:8d:c4:4e:e0:01:0c:e8:6c:a0:66:e1:ed:c6:3f:
                    e2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3C:90:60:DF:5A:A6:CD:20:B3:76:BD:D4:B9:33:A1:D1:EA:B7:C6
            X509v3 Authority Key Identifier:
                keyid:5A:4B:20:3C:F6:C5:A4:FD:2D:00:BE:B3:AE:A7:A3:E9:EE:16:78:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/0/5A4B203CF6C5A4FD2D00BEB3AEA7A3E9EE167807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A4B203CF6C5A4FD2D00BEB3AEA7A3E9EE167807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/0/323830343a363362343a3a2f33322d3438203d3e20323639333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:25:21:55:94:a9:69:ab:e4:f4:1d:46:89:da:dc:0c:d8:b4:
         31:fb:4d:bc:fb:0d:38:01:dc:dd:f0:bf:52:c3:4c:2a:0c:a5:
         5a:18:3a:ed:d3:53:f2:47:7d:d4:46:c3:3d:4d:51:b6:56:20:
         45:50:34:c1:11:fd:8d:bb:86:04:6f:ef:c0:d9:56:1b:52:8c:
         94:fa:51:5f:93:ff:ea:46:91:7a:75:3b:bb:04:b0:9a:c8:bb:
         91:bf:76:23:ff:ca:6a:24:7c:02:a9:51:22:e9:98:4c:d9:e4:
         a3:f0:45:2e:f1:ef:45:61:87:a7:1e:4d:d0:15:f3:4e:b3:8d:
         85:85:5f:f9:7d:a3:b9:0f:53:d0:c4:9b:b9:aa:31:ee:7c:2b:
         ee:08:3c:f7:32:24:19:09:88:f4:54:98:52:2d:fd:b1:d8:24:
         1b:4c:d4:a8:77:54:9a:cd:7f:75:8b:6c:6a:2d:82:1e:9c:9b:
         b8:93:6e:36:ee:82:b1:f6:5a:b5:3f:1f:fd:d3:06:c1:e8:4f:
         22:fd:19:a7:b5:5f:26:84:58:f5:68:f5:70:ec:3b:63:71:1d:
         38:95:6b:05:e6:04:4a:73:32:8b:b5:2f:dc:ed:61:2d:e8:d2:
         35:ac:94:be:5d:87:0c:ab:e4:22:e8:d3:70:ab:ad:2c:5a:94:
         92:d1:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----