Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa
File:                     323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa (raw, json)
Hash identifier:          A0FtOkBa2hn01EbQ7NGLWYzC6vD4DAwWSiXngno0Awo=
Subject key identifier:   BF:A7:23:78:D2:75:A0:94:BF:03:2A:F5:E6:B8:C4:6A:F4:76:39:2C
Certificate issuer:       /CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
Certificate serial:       547EEDB63D7A1B4C6E2D936B5F4705366EBFEF23
Authority key identifier: F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa
Signing time:             Mon 21 Aug 2023 22:51:42 +0000
ROA not before:           Mon 21 Aug 2023 22:46:42 +0000
ROA not after:            Mon 19 Aug 2024 22:51:42 +0000
asID:                     271117
IP address blocks:        2804:7684:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7e:ed:b6:3d:7a:1b:4c:6e:2d:93:6b:5f:47:05:36:6e:bf:ef:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
        Validity
            Not Before: Aug 21 22:46:42 2023 GMT
            Not After : Aug 19 22:51:42 2024 GMT
        Subject: CN=BFA72378D275A094BF032AF5E6B8C46AF476392C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:46:6f:b4:07:9a:70:86:8a:cd:58:37:36:a3:
                    ff:d4:74:30:18:3b:6c:4c:1c:56:7a:cf:c6:cf:34:
                    ec:8c:b5:1e:9d:ca:dd:1d:b6:1d:9f:e5:13:7f:86:
                    84:3e:32:b9:f5:b6:75:a6:6f:92:4c:80:24:78:ea:
                    c5:fc:65:52:d7:fb:71:c5:18:56:cd:82:8f:6a:98:
                    38:a0:73:ad:eb:6b:95:77:60:48:28:18:81:7f:03:
                    a9:a3:01:24:15:43:67:63:d8:20:e6:b5:b9:8d:e1:
                    0e:6e:88:f5:f6:19:56:34:92:47:40:64:21:9b:53:
                    02:9b:a5:14:a6:e2:65:8d:c1:d1:fd:ba:4d:11:3c:
                    bc:0b:f5:84:00:42:eb:3e:c9:22:0f:03:ae:08:41:
                    62:8a:2d:f1:c5:ec:06:d1:4c:22:6b:9f:57:6d:49:
                    4b:f2:22:00:cb:33:15:2d:f5:9a:4a:36:21:4a:08:
                    fb:4e:91:9b:bd:e5:ba:57:53:7d:e6:5d:e8:92:c1:
                    cb:0a:68:e9:3b:d2:0c:5b:ca:f0:ff:30:bd:41:22:
                    da:1d:bf:3a:15:a4:c3:e6:5e:28:23:18:ac:ea:7c:
                    27:a9:1d:02:56:db:a4:75:cd:11:5e:a8:fc:ce:1d:
                    f5:23:e0:55:41:57:63:b3:13:38:33:77:84:de:0e:
                    04:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A7:23:78:D2:75:A0:94:BF:03:2A:F5:E6:B8:C4:6A:F4:76:39:2C
            X509v3 Authority Key Identifier:
                keyid:F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5a:84:ab:1b:70:77:82:86:6e:e2:23:86:57:48:8d:eb:74:8c:
         a2:e2:21:fc:79:a0:e9:6c:d0:a8:15:31:e2:c2:d6:cd:d5:19:
         77:d8:9f:34:fb:cc:72:88:1b:54:dc:5c:78:aa:4e:48:7a:3c:
         b5:20:bc:9e:ef:7c:ff:03:27:4e:ed:d4:60:68:64:a7:f5:cb:
         04:75:41:e4:33:ec:b0:f4:89:d3:47:ac:0f:60:67:16:40:c2:
         18:64:f2:21:47:f5:50:36:be:bb:c2:17:ad:6d:2e:ab:39:56:
         7d:83:e3:33:b9:a7:0e:f3:f3:93:11:82:43:8a:e4:9e:c3:52:
         a4:47:5e:c1:6e:75:db:2f:82:c7:4a:d0:3a:b7:2a:fb:bc:9a:
         de:6e:73:3d:2b:86:17:52:ec:6f:0a:26:25:7b:f9:72:db:41:
         a4:15:46:95:2d:c8:88:0b:3e:38:5a:2a:ec:ab:ed:06:d8:69:
         02:c6:a2:23:1b:58:3f:c4:3a:b0:96:6d:6d:06:c8:b2:84:53:
         36:a2:3d:41:e0:f8:4f:aa:6c:68:c2:eb:e9:48:8c:55:8b:59:
         0e:29:a1:87:2c:00:a6:0a:95:42:6c:ab:58:f1:46:86:4c:5a:
         07:85:8c:7c:f6:30:9e:30:9a:87:e2:ba:59:29:16:36:e7:c7:
         b5:30:16:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----