Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a3a2f33322d3332203d3e20323731313137.roa
File:                     323830343a373638343a3a2f33322d3332203d3e20323731313137.roa (raw, json)
Hash identifier:          OtueiGBGULWDZ10mRheibScctM7SiVISYjCQQPyktEk=
Subject key identifier:   00:EF:33:37:08:97:C6:2A:1B:B5:23:8F:51:D9:18:89:23:11:11:7A
Certificate issuer:       /CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
Certificate serial:       4416845D9019BAE546E85FF387BF7FD8369E9517
Authority key identifier: F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a3a2f33322d3332203d3e20323731313137.roa
Signing time:             Mon 21 Aug 2023 22:52:08 +0000
ROA not before:           Mon 21 Aug 2023 22:47:08 +0000
ROA not after:            Mon 19 Aug 2024 22:52:08 +0000
asID:                     271117
IP address blocks:        2804:7684::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:16:84:5d:90:19:ba:e5:46:e8:5f:f3:87:bf:7f:d8:36:9e:95:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
        Validity
            Not Before: Aug 21 22:47:08 2023 GMT
            Not After : Aug 19 22:52:08 2024 GMT
        Subject: CN=00EF33370897C62A1BB5238F51D918892311117A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b1:4e:d3:41:78:ab:ce:8a:4e:29:67:35:30:
                    15:9c:9e:d8:e7:e4:70:f0:4a:fc:8f:a0:2a:19:bc:
                    f7:d8:7a:ce:29:3a:22:36:14:ea:c0:61:36:5e:2a:
                    50:53:ca:92:21:68:cb:d3:c5:8b:6b:09:1e:79:b0:
                    cf:36:ce:f9:f0:c6:6b:82:22:7b:d8:a8:f8:5f:12:
                    4e:0b:95:a0:5d:4d:a9:cc:9d:88:4e:a5:4d:b8:1b:
                    0e:1b:b7:d1:a8:b3:ed:04:3e:e6:01:80:14:98:b9:
                    01:e4:29:ac:95:51:e6:74:1c:97:73:da:79:30:42:
                    09:3c:75:b2:41:fa:cd:4e:40:8c:43:98:b4:39:0a:
                    e3:00:85:04:80:96:3b:44:d3:e7:22:9e:82:c7:8a:
                    76:50:76:13:a5:0c:28:94:66:44:72:0c:99:e7:9c:
                    9f:0c:6e:b1:6a:47:03:67:24:1a:a5:ba:19:fa:11:
                    dc:f8:41:a2:9c:c4:8a:e6:93:fa:3e:b1:69:cf:32:
                    1c:c1:91:cc:bf:c4:a7:5f:ec:2e:38:d1:11:e1:5c:
                    5b:8a:21:cd:3d:2f:01:7c:28:58:9b:10:51:ff:44:
                    77:10:88:37:63:ce:f3:7e:20:5e:b6:19:ad:d2:9d:
                    d6:cc:83:85:46:e2:35:cb:12:08:bc:0f:1b:8e:7e:
                    83:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EF:33:37:08:97:C6:2A:1B:B5:23:8F:51:D9:18:89:23:11:11:7A
            X509v3 Authority Key Identifier:
                keyid:F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a3a2f33322d3332203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:e2:51:ac:11:4c:c9:f7:39:58:1d:0e:ba:6a:22:02:b8:38:
         27:04:43:0a:e9:f6:21:97:61:c3:39:f4:f7:0e:3c:89:76:fc:
         e7:95:d8:d8:dc:54:bd:ca:08:19:26:92:7a:ff:8c:1a:8b:71:
         12:36:46:3c:92:48:a2:97:da:2b:86:27:92:01:32:88:a5:9e:
         97:f5:f3:79:c8:e4:62:9e:a2:dd:0c:69:97:10:04:a0:91:f7:
         aa:c1:48:14:93:61:95:37:df:39:8a:6d:59:4d:af:c7:7e:89:
         82:22:05:ba:4f:07:05:b1:e1:c8:b7:e9:74:bf:08:82:17:c4:
         11:14:a5:37:23:b1:d6:7a:2c:31:e3:70:30:27:2a:ee:1c:3d:
         7f:c8:33:e0:43:9b:5f:0f:0b:d8:2e:24:30:e0:7b:1c:97:c2:
         4d:f9:64:12:66:2c:c0:2e:f4:c7:4e:39:fe:cd:2f:4d:ab:0b:
         a0:27:5c:c7:1a:17:c4:44:a4:37:a1:9e:52:c1:2d:2f:de:2f:
         cb:98:91:0e:f9:51:9e:6a:48:6b:9f:6c:fb:ed:0c:d1:1c:6b:
         75:5b:1d:37:12:89:9f:02:d2:83:04:83:af:2d:1e:61:cb:b8:
         b4:c6:c3:df:29:30:e9:06:11:b8:dd:fb:49:17:64:21:61:c7:
         13:1f:f6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----