Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa
File:                     323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa (raw, json)
Hash identifier:          H8QSqY4sRy863pG4cUYgFPgqe3Jkc/LiuyihGjlha/c=
Subject key identifier:   73:D5:7F:A7:06:62:5E:F8:97:83:53:9D:73:AD:8E:D9:1A:EC:3E:97
Certificate issuer:       /CN=7EED30292A9C9E1294DDA31D52BC97D7775EE9EC
Certificate serial:       6E397E106F8BED1A1E86DAE47D46E3A621120A1D
Authority key identifier: 7E:ED:30:29:2A:9C:9E:12:94:DD:A3:1D:52:BC:97:D7:77:5E:E9:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa
Signing time:             Mon 29 Jan 2024 13:48:36 +0000
ROA not before:           Mon 29 Jan 2024 13:43:36 +0000
ROA not after:            Mon 27 Jan 2025 13:48:36 +0000
asID:                     263897
IP address blocks:        2804:2760:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:39:7e:10:6f:8b:ed:1a:1e:86:da:e4:7d:46:e3:a6:21:12:0a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EED30292A9C9E1294DDA31D52BC97D7775EE9EC
        Validity
            Not Before: Jan 29 13:43:36 2024 GMT
            Not After : Jan 27 13:48:36 2025 GMT
        Subject: CN=73D57FA706625EF89783539D73AD8ED91AEC3E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:ab:89:bd:d3:ec:9b:5c:de:86:24:61:38:
                    c4:ac:84:49:ab:85:b5:d3:a2:c5:98:3f:52:0e:c7:
                    7f:ce:d4:1e:8f:9d:e6:d4:91:22:8f:32:d2:39:17:
                    78:cb:87:1a:39:bb:b4:15:ab:b8:1e:c2:59:ba:83:
                    e7:eb:42:f1:a4:6f:1e:e0:32:65:d5:03:c1:7e:b4:
                    77:89:44:0e:16:36:27:db:12:8d:11:a1:a0:bc:0e:
                    33:92:09:bd:01:e5:2f:f3:db:c2:bd:2a:04:b2:e9:
                    9b:db:b1:13:29:34:95:b3:05:02:52:a0:67:b7:c2:
                    e9:61:4c:84:0b:d6:55:55:df:32:8b:7a:f6:fe:54:
                    91:fc:fa:a7:25:48:1c:0c:33:6f:f9:42:07:99:ca:
                    59:b8:11:ed:79:96:fb:21:cd:97:c0:7d:ad:b8:03:
                    83:ea:7f:74:ce:f3:45:e1:df:00:36:ad:2a:8e:0b:
                    64:7d:3f:3e:79:38:6b:d5:9f:06:f3:a1:8f:cc:48:
                    4e:00:79:95:9b:0a:bb:fb:fd:03:7f:79:61:54:43:
                    69:b4:a7:91:0b:66:c8:78:6e:21:b8:a5:0e:37:47:
                    7c:e0:66:3e:72:7d:36:a6:1c:0e:4b:ac:b0:a1:64:
                    6b:59:64:02:93:cf:71:02:fe:90:cd:11:5c:06:a9:
                    65:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D5:7F:A7:06:62:5E:F8:97:83:53:9D:73:AD:8E:D9:1A:EC:3E:97
            X509v3 Authority Key Identifier:
                keyid:7E:ED:30:29:2A:9C:9E:12:94:DD:A3:1D:52:BC:97:D7:77:5E:E9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2760:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         86:dd:7c:9e:f0:1b:ee:33:e1:c6:c3:a3:7b:9f:2f:8b:b0:05:
         9c:e6:b5:68:a0:99:bb:3c:77:d9:15:5a:ad:32:3d:04:fe:24:
         eb:e4:d1:50:cf:74:86:90:bf:51:44:a1:2f:85:12:f3:a1:75:
         5a:5f:15:10:3e:c9:91:09:2b:b1:ef:32:5b:72:b8:db:58:6b:
         9d:df:3a:e7:36:cd:b9:c7:fc:a2:c7:e6:67:d6:0d:2a:3a:98:
         22:97:ab:24:e0:0a:68:57:6f:09:04:55:8e:a9:5c:f8:9e:96:
         c1:9a:0c:58:dc:79:19:60:6d:2b:29:87:39:dc:a4:e1:50:18:
         70:a8:35:02:d0:b6:ff:44:4c:d1:92:64:c0:34:f1:b7:87:98:
         9d:23:3b:5c:52:dd:ab:56:fa:06:74:3c:04:01:a8:5a:b6:77:
         11:6e:47:0c:cd:87:f6:54:03:e7:ce:e7:f5:f9:db:f3:b6:53:
         5a:43:8e:72:84:52:0f:ba:fa:de:95:43:2c:11:69:8f:75:77:
         d8:76:63:9c:50:1c:3a:c7:95:0c:e6:3a:75:1f:23:8d:85:ee:
         40:a0:81:33:b0:bb:41:7f:e5:c1:ba:e5:61:d4:73:6e:ae:a4:
         3a:5f:7d:9f:db:59:42:13:16:a8:2c:fc:8b:b0:d8:c6:31:b5:
         c1:46:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----