Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a343030303a3a2f33342d3334203d3e20323730373933.roa
File:                     323830343a373138303a343030303a3a2f33342d3334203d3e20323730373933.roa (raw, json)
Hash identifier:          rUJpVw5CeEtUfa6oc9elkX1ZfSAwk4VZFmN28FZvNYE=
Subject key identifier:   ED:E9:BE:C0:1C:20:D9:99:16:4F:40:91:14:3B:6A:E4:C4:B4:45:53
Certificate issuer:       /CN=9A87074F73DD530421306A811F62BA127C58A09C
Certificate serial:       70202095D8A282DB7E8795BA1C9272C5CBAC55F8
Authority key identifier: 9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A87074F73DD530421306A811F62BA127C58A09C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a343030303a3a2f33342d3334203d3e20323730373933.roa
Signing time:             Mon 18 Dec 2023 19:21:09 +0000
ROA not before:           Mon 18 Dec 2023 19:16:09 +0000
ROA not after:            Mon 16 Dec 2024 19:21:09 +0000
asID:                     270793
IP address blocks:        2804:7180:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:20:20:95:d8:a2:82:db:7e:87:95:ba:1c:92:72:c5:cb:ac:55:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A87074F73DD530421306A811F62BA127C58A09C
        Validity
            Not Before: Dec 18 19:16:09 2023 GMT
            Not After : Dec 16 19:21:09 2024 GMT
        Subject: CN=EDE9BEC01C20D999164F4091143B6AE4C4B44553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:48:64:18:b1:60:4a:c6:ef:ae:a6:70:2e:
                    eb:c5:c5:ae:e8:75:d9:0b:f0:12:fe:9d:23:60:e8:
                    7b:57:80:1f:72:40:2a:aa:4c:d6:b2:01:90:b8:12:
                    7d:3b:d7:20:e0:58:6c:7a:28:7a:4d:e0:8b:59:20:
                    d0:80:8a:93:0e:63:90:4b:e0:6c:b0:24:4a:77:a1:
                    d6:c0:e9:30:c1:32:d8:9a:e1:5e:96:c4:31:d7:fc:
                    2a:49:9e:13:ec:23:a3:01:7b:11:4c:c4:1b:fe:2c:
                    7b:75:70:57:7f:69:be:74:6e:0d:96:eb:ed:96:35:
                    76:e7:00:87:4c:a2:b0:c9:6a:42:7b:2c:20:9b:92:
                    67:bd:79:14:d9:2a:56:20:22:9e:64:fb:da:9b:92:
                    bd:ae:c0:31:49:4e:ea:21:13:92:e0:36:a4:dc:06:
                    8e:b3:4e:10:a4:c9:4e:47:2b:8e:75:ae:90:31:62:
                    9c:dc:16:bd:bf:c1:95:f5:25:5b:ca:95:c8:41:45:
                    a3:9f:f2:34:68:ae:e0:bb:b6:dd:56:d5:94:84:11:
                    99:ea:35:6f:8b:6f:b6:b6:db:57:cd:87:b6:ec:9a:
                    57:fe:3d:ad:91:0b:80:fa:a8:76:77:96:a1:ad:df:
                    f2:9e:5f:34:9a:d7:75:55:eb:50:84:a4:e6:7e:de:
                    94:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E9:BE:C0:1C:20:D9:99:16:4F:40:91:14:3B:6A:E4:C4:B4:45:53
            X509v3 Authority Key Identifier:
                keyid:9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/9A87074F73DD530421306A811F62BA127C58A09C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A87074F73DD530421306A811F62BA127C58A09C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a343030303a3a2f33342d3334203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7180:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4b:3a:b2:88:2a:52:b0:f8:79:ea:56:c8:5b:af:f4:59:9c:0c:
         b5:6b:c0:5d:4b:49:fb:2a:f8:ce:8e:23:e2:79:5b:b9:05:be:
         db:24:2f:db:67:13:98:55:68:56:cf:0d:1f:61:91:be:2e:04:
         9f:3b:5b:8a:9c:e6:3f:ad:8d:db:9a:aa:80:1a:4e:cc:08:ab:
         77:d3:2d:69:0d:96:a3:f7:d7:7b:d7:7f:55:06:23:1c:d6:84:
         8e:5f:0a:1a:bc:0b:f4:cc:94:87:df:aa:0b:2e:58:6a:7a:69:
         7f:44:b2:24:96:95:f8:99:a3:b6:3a:03:b6:c3:60:ee:29:f7:
         94:4c:75:f5:ac:b6:1c:2f:1a:1e:5d:30:78:50:2b:09:bd:42:
         38:f0:f5:05:fd:9b:97:a4:4f:96:fd:8b:05:e2:d6:af:e0:25:
         4f:11:0d:38:52:c1:df:c7:64:de:08:51:0a:56:04:59:0d:07:
         53:d3:29:86:d2:cb:0f:77:25:e2:2f:82:43:a4:d3:aa:99:c0:
         27:4f:d4:55:08:8f:70:47:77:53:ae:cc:4c:84:9f:64:e9:df:
         3a:f7:50:80:53:82:0e:b9:2f:da:76:b3:ad:ab:d5:12:1f:d4:
         07:82:62:88:c3:a9:c1:e5:ce:ff:e0:b9:5f:af:c1:4f:99:b0:
         fc:d2:92:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----