Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa
File:                     323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa (raw, json)
Hash identifier:          zg8JS64Mc2WpCVKTIFLyHoNCBOjdsBajrwfxmWtxipM=
Subject key identifier:   64:47:4B:15:D4:65:E0:CA:E4:0F:A1:6A:3E:2F:00:0F:83:9C:49:D2
Certificate issuer:       /CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
Certificate serial:       4F592D5A3FB5D781BF78FBA0E3578994C7B94D16
Authority key identifier: F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa
Signing time:             Mon 21 Aug 2023 22:51:50 +0000
ROA not before:           Mon 21 Aug 2023 22:46:50 +0000
ROA not after:            Mon 19 Aug 2024 22:51:50 +0000
asID:                     271117
IP address blocks:        2804:7684:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:59:2d:5a:3f:b5:d7:81:bf:78:fb:a0:e3:57:89:94:c7:b9:4d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
        Validity
            Not Before: Aug 21 22:46:50 2023 GMT
            Not After : Aug 19 22:51:50 2024 GMT
        Subject: CN=64474B15D465E0CAE40FA16A3E2F000F839C49D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:1c:7d:1b:e8:4e:11:fe:8d:c8:c6:77:5f:
                    7d:86:a0:cd:d8:08:c5:26:be:1a:1b:7d:6d:21:00:
                    19:8e:fb:f7:40:21:19:37:14:d4:3e:c8:bd:05:1c:
                    6c:eb:85:13:b8:00:47:84:6d:f0:23:83:77:a3:3b:
                    4e:2a:2a:24:02:55:3a:13:a4:d1:14:35:d1:ea:c9:
                    fb:57:54:c0:6a:6b:12:32:bc:b8:07:3a:6f:24:2d:
                    38:66:fa:65:af:3a:d3:d7:d5:20:b9:70:11:23:f6:
                    82:a5:73:b9:78:fc:73:bd:a3:e1:eb:13:ab:79:32:
                    0f:88:1b:f6:7d:f8:e0:8c:37:4a:72:9b:ce:1e:27:
                    85:bf:64:bb:7f:a7:ce:86:3a:15:f4:2f:ca:e0:76:
                    94:1a:b4:a0:33:0c:79:f1:ad:48:77:d0:7f:f8:30:
                    47:87:b1:66:3e:87:f5:9c:d0:79:d5:c7:7a:26:05:
                    d6:b2:b5:65:e9:54:40:66:b7:f7:3f:70:3f:82:ed:
                    42:ad:b1:cf:08:26:33:d4:1b:43:17:cd:76:2a:f5:
                    7c:d5:d2:5e:3c:df:50:8e:c5:28:b4:a2:fb:99:f0:
                    c4:e4:5d:1a:ad:89:ff:c8:6e:1f:2a:56:2f:c3:f5:
                    82:07:a4:87:0a:9a:9b:92:f8:6b:c6:a0:03:7c:30:
                    2a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:47:4B:15:D4:65:E0:CA:E4:0F:A1:6A:3E:2F:00:0F:83:9C:49:D2
            X509v3 Authority Key Identifier:
                keyid:F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         43:a4:9c:b9:3f:59:28:e5:0a:5e:86:ca:e1:0a:65:88:54:89:
         2a:f5:9b:b6:9f:c5:0c:00:1d:19:00:b0:0a:77:8f:67:b0:96:
         0f:01:77:e6:1b:a1:12:57:21:b1:05:8d:bc:57:af:5c:3f:07:
         3b:ee:14:92:d3:87:13:fb:7d:75:99:2d:29:99:44:32:35:d8:
         a4:35:c1:e9:6b:77:a0:0b:42:c1:b3:22:36:6a:ba:52:23:b6:
         86:59:e3:1e:d4:c0:d5:67:95:42:30:df:53:35:d8:f8:d2:7d:
         95:84:cf:b5:e0:f8:49:d6:80:48:c8:b2:98:b4:59:62:a4:2b:
         80:3a:81:1d:59:f5:29:86:11:c0:b4:52:b1:43:a8:e7:b5:94:
         28:ee:95:b6:2f:be:b0:77:44:6a:9b:73:c5:d3:86:bc:46:da:
         4c:dd:d1:38:4c:48:21:dc:c4:28:c4:db:44:a2:d4:8b:82:40:
         2f:a5:62:01:51:08:fe:2f:c9:f7:45:6a:93:ab:25:5f:e5:20:
         1c:81:98:7b:8d:45:6a:ad:f7:a0:2e:a9:7a:09:0b:98:8a:be:
         d9:04:25:c7:b1:33:34:e7:5a:84:0d:2e:c1:2f:c7:32:32:a4:
         55:d7:4b:ce:1f:65:3f:05:5e:88:f5:65:d7:fc:8a:3f:d4:d0:
         42:17:29:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----