Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/323830343a336263383a3a2f33322d3332203d3e20323636313730.roa
File:                     323830343a336263383a3a2f33322d3332203d3e20323636313730.roa (raw, json)
Hash identifier:          Dlb1PPZMVvbubic2TpnlK0S3B6dXax9Oo4jizDx4viI=
Subject key identifier:   F1:54:11:CC:54:DB:D7:D0:7C:73:94:53:3A:63:74:A4:68:D8:CE:3B
Certificate issuer:       /CN=9D5AD2A27015B084D717893DE61B62934999BC26
Certificate serial:       4CA6D4103324149E02843F1A6B16ED68903A78CA
Authority key identifier: 9D:5A:D2:A2:70:15:B0:84:D7:17:89:3D:E6:1B:62:93:49:99:BC:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5AD2A27015B084D717893DE61B62934999BC26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/323830343a336263383a3a2f33322d3332203d3e20323636313730.roa
Signing time:             Thu 04 Apr 2024 10:42:07 +0000
ROA not before:           Thu 04 Apr 2024 10:37:07 +0000
ROA not after:            Thu 03 Apr 2025 10:42:07 +0000
asID:                     266170
IP address blocks:        2804:3bc8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a6:d4:10:33:24:14:9e:02:84:3f:1a:6b:16:ed:68:90:3a:78:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D5AD2A27015B084D717893DE61B62934999BC26
        Validity
            Not Before: Apr  4 10:37:07 2024 GMT
            Not After : Apr  3 10:42:07 2025 GMT
        Subject: CN=F15411CC54DBD7D07C7394533A6374A468D8CE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:77:29:e8:b5:35:2d:3b:c0:e8:38:c2:6f:39:
                    7e:c2:7c:0f:39:96:86:7f:16:7b:2a:00:79:bd:be:
                    d4:25:5a:cf:c5:27:95:9a:69:e6:39:9c:ec:fe:1d:
                    0b:85:f3:9f:26:00:1f:e5:00:28:08:cf:95:4b:4c:
                    f4:16:8c:6c:b8:49:77:e1:81:eb:7b:59:f0:dd:87:
                    f4:4d:58:ac:32:d0:7d:ff:85:01:5e:92:a7:19:68:
                    da:95:11:fa:64:f9:ad:bb:49:52:6e:32:e4:be:5b:
                    dd:57:de:e1:ea:ae:9a:5f:c2:c3:a6:b3:8a:16:67:
                    52:5a:43:63:7a:90:8f:4f:a3:72:b0:8c:f1:68:50:
                    67:89:de:52:c5:c1:fa:21:62:8b:a9:47:26:f1:d7:
                    21:fc:7d:8c:be:27:35:da:fb:07:eb:41:11:d0:aa:
                    7e:30:31:42:2f:ec:1e:af:6c:57:08:0e:a9:1d:18:
                    73:a4:f7:34:66:2d:ff:52:9f:b8:37:5f:b2:cb:c9:
                    c6:d9:b9:94:19:ca:13:26:a6:25:02:a9:64:f0:7e:
                    d3:ca:55:99:84:c8:cb:02:6b:68:4e:03:eb:0b:5b:
                    dd:d9:ce:1a:b6:7a:b3:7a:40:c4:5f:4c:a3:19:f6:
                    40:fa:f1:1d:bd:bd:e5:7b:35:24:9b:03:3d:4c:75:
                    74:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:54:11:CC:54:DB:D7:D0:7C:73:94:53:3A:63:74:A4:68:D8:CE:3B
            X509v3 Authority Key Identifier:
                keyid:9D:5A:D2:A2:70:15:B0:84:D7:17:89:3D:E6:1B:62:93:49:99:BC:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/9D5AD2A27015B084D717893DE61B62934999BC26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5AD2A27015B084D717893DE61B62934999BC26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/323830343a336263383a3a2f33322d3332203d3e20323636313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:b1:5a:8c:6a:f7:e6:b5:da:53:17:77:21:17:51:69:1d:50:
         ec:5e:08:57:05:3c:f9:db:b0:2e:c3:d4:3e:3c:10:3b:87:41:
         ae:72:45:2d:b9:b1:9f:7e:8b:e6:ea:c8:b9:f4:d1:3c:1d:30:
         7f:0e:d8:66:15:48:86:a2:ed:04:c4:3d:77:d1:20:95:7e:d5:
         ed:10:89:af:0a:99:b4:81:c8:dc:d4:b8:60:07:2d:38:3a:c8:
         23:68:f8:df:81:a2:0f:5f:d4:5c:3d:57:08:f3:f1:17:dd:8a:
         a7:6b:4c:90:2e:a0:8b:3b:59:66:04:e4:03:f5:f6:69:07:97:
         d6:79:2f:22:21:bd:6c:17:9e:b8:85:26:2c:c8:ca:d5:6c:17:
         48:01:4f:fa:24:0e:52:ca:f0:26:3c:22:13:a4:16:9f:28:0d:
         9e:63:56:b4:37:d3:56:bf:2a:72:b1:b4:18:e7:d6:74:64:be:
         df:93:ea:0f:db:55:cf:86:0e:10:b8:d0:ad:19:a4:b4:1e:44:
         3e:f1:97:08:c5:f6:21:8c:20:d6:7b:74:74:8d:69:46:04:ef:
         55:f9:6c:77:cd:c6:12:28:b7:a5:69:13:61:be:38:c7:83:98:
         37:a3:ac:64:40:c0:18:6e:b7:15:28:24:a9:47:06:13:80:90:
         ae:14:61:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----