Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/323830343a316466383a3a2f33322d3332203d3e20323634343034.roa
File:                     323830343a316466383a3a2f33322d3332203d3e20323634343034.roa (raw, json)
Hash identifier:          Hf6wD5uKi+LtO2ZvzOTUDaFrtiztBKmybdIoR4ycoAE=
Subject key identifier:   E9:78:B2:B3:20:D0:E3:48:3E:7B:E4:FA:7A:AD:81:B6:7F:28:54:7F
Certificate issuer:       /CN=9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6
Certificate serial:       149DC0106F86C7E0DB4459E72D136175A43202E0
Authority key identifier: 9E:7F:85:E6:64:5B:79:3C:FE:0D:1D:98:7C:09:FB:13:7B:FB:F7:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/323830343a316466383a3a2f33322d3332203d3e20323634343034.roa
Signing time:             Fri 20 Oct 2023 14:40:14 +0000
ROA not before:           Fri 20 Oct 2023 14:35:14 +0000
ROA not after:            Fri 18 Oct 2024 14:40:14 +0000
asID:                     264404
IP address blocks:        2804:1df8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9d:c0:10:6f:86:c7:e0:db:44:59:e7:2d:13:61:75:a4:32:02:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6
        Validity
            Not Before: Oct 20 14:35:14 2023 GMT
            Not After : Oct 18 14:40:14 2024 GMT
        Subject: CN=E978B2B320D0E3483E7BE4FA7AAD81B67F28547F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:fd:78:86:f9:69:b0:36:2b:d3:35:05:c6:
                    f1:b8:9c:d6:2b:17:93:eb:28:68:81:b3:73:8f:39:
                    e8:e9:6c:00:85:6d:69:86:6c:35:3c:49:20:0c:db:
                    d6:48:0b:03:86:ff:2f:72:1c:31:fe:e4:fe:39:ec:
                    a3:6e:3c:f8:ac:6b:77:9b:25:45:4f:ea:cb:7d:8a:
                    cb:ff:f6:cb:51:fe:11:2f:ff:bb:37:40:ab:0f:82:
                    97:07:50:47:0f:e4:d6:00:63:74:0d:3b:af:8a:43:
                    d6:5b:dd:69:cb:f1:f9:f0:f5:dd:85:a6:1e:7e:47:
                    0c:f5:4a:1d:38:09:ff:70:4e:28:9d:96:b8:a4:4b:
                    d9:f8:c7:bd:6e:82:cc:d2:1e:78:fb:60:03:aa:5a:
                    af:95:9e:e9:d5:a6:7f:67:e3:e9:94:e6:db:e5:88:
                    3a:33:a0:7c:6a:4e:07:6b:46:fe:28:82:ff:95:22:
                    68:8b:5d:3d:9f:51:97:9e:30:61:7b:a4:50:8f:96:
                    2a:76:92:f9:23:fb:5d:9e:a9:61:7f:ae:e3:34:90:
                    45:70:66:00:75:9e:36:10:65:75:1f:f0:a6:db:b3:
                    dc:ce:4d:74:a2:7a:1e:b0:2a:95:b7:a5:8a:0c:c5:
                    dc:55:20:a9:6e:18:be:d8:78:97:27:27:2d:a3:57:
                    1f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:78:B2:B3:20:D0:E3:48:3E:7B:E4:FA:7A:AD:81:B6:7F:28:54:7F
            X509v3 Authority Key Identifier:
                keyid:9E:7F:85:E6:64:5B:79:3C:FE:0D:1D:98:7C:09:FB:13:7B:FB:F7:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/323830343a316466383a3a2f33322d3332203d3e20323634343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1df8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:e6:cd:04:3e:a0:13:a5:57:2e:16:25:f3:35:55:93:45:2b:
         87:cc:e2:5b:b3:0b:76:09:03:df:69:a2:fe:2f:4d:d8:35:76:
         85:95:99:53:88:d6:e1:f9:9b:18:c2:b3:8d:f2:96:35:f9:5e:
         b0:ae:c6:4a:41:25:2e:2e:d3:7a:30:23:ca:9e:a8:db:30:1f:
         d6:6f:ea:1b:39:00:f5:bd:b8:9a:b5:db:fc:21:c7:c2:82:83:
         9e:eb:25:bc:2a:16:0d:0f:8a:3f:e0:25:21:72:36:51:84:b7:
         e9:97:3e:76:4e:f8:fe:d3:6a:19:0d:de:f3:a1:43:8c:3a:1e:
         c2:ee:a2:27:91:5d:53:c7:49:d3:f7:32:70:3a:07:ca:eb:96:
         79:2e:35:4f:df:8e:95:3d:91:3b:b3:2c:1c:8c:a9:0a:75:51:
         30:d9:00:6e:60:42:a8:fa:11:9b:14:53:aa:84:ac:9d:45:a8:
         e1:85:f5:6a:32:17:89:fd:59:de:94:eb:e5:1e:d1:a5:a9:94:
         3f:67:4c:c7:53:f1:c9:30:2e:96:a6:15:7e:ed:be:cb:cc:bc:
         bf:80:bd:69:96:86:8b:f1:6c:2b:86:21:96:4d:83:ff:4a:66:
         e0:33:27:26:fd:b3:5c:b2:9f:cc:dd:ce:d8:61:0b:7b:57:1b:
         b2:8f:36:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----