Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa
File:                     323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa (raw, json)
Hash identifier:          O3W1hNuB+qC/Ng9KOaQ5O5Fhj1Rh10DwsjnoUaXU89Q=
Subject key identifier:   92:18:C2:38:9A:8F:ED:E7:FA:C0:81:F4:81:D8:89:20:EE:4C:A4:18
Certificate issuer:       /CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
Certificate serial:       1BDBE2E8BDA0BEB8721752D235C0E5375DDE0DB0
Authority key identifier: 95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa
Signing time:             Sun 26 Nov 2023 21:00:00 +0000
ROA not before:           Sun 26 Nov 2023 20:55:00 +0000
ROA not after:            Sun 24 Nov 2024 21:00:00 +0000
asID:                     267334
IP address blocks:        2804:4be0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:db:e2:e8:bd:a0:be:b8:72:17:52:d2:35:c0:e5:37:5d:de:0d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
        Validity
            Not Before: Nov 26 20:55:00 2023 GMT
            Not After : Nov 24 21:00:00 2024 GMT
        Subject: CN=9218C2389A8FEDE7FAC081F481D88920EE4CA418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:73:40:76:63:a2:08:9c:65:a1:f8:14:a2:
                    66:c4:15:23:0d:55:93:a6:49:e3:51:0a:75:21:11:
                    ba:4b:30:c0:f1:4d:02:ba:44:d3:2b:96:05:aa:0c:
                    8b:15:99:3d:24:db:af:d4:d6:c7:5a:af:5d:4e:a1:
                    62:7e:91:f0:b5:71:3b:9a:e7:46:f1:5e:e7:a1:ff:
                    73:b7:9e:1f:4c:64:82:0a:64:1e:d4:79:10:5e:45:
                    55:93:cb:7d:b2:c4:78:5d:e6:49:6d:56:e8:b1:34:
                    4d:dc:d1:a0:0b:11:a5:09:93:f7:65:5c:56:10:14:
                    b6:52:16:3e:43:11:e4:9f:30:ac:c1:e3:49:e3:e2:
                    aa:54:c9:22:01:59:11:b4:38:48:c8:69:0b:52:40:
                    d0:1b:d7:40:9d:fb:1c:58:a0:4e:95:4c:7e:13:23:
                    35:f5:05:ca:2a:92:e4:81:81:78:c2:c7:62:d1:3c:
                    46:b8:0d:d2:fe:ae:ea:ea:18:bb:03:95:92:93:fa:
                    3b:97:5a:11:2a:26:0c:ec:35:af:cc:38:c6:84:76:
                    f1:f1:6a:4c:e7:9f:bb:76:8e:cd:26:e4:1a:73:2d:
                    39:46:54:08:04:fb:68:ba:ab:24:a8:47:a4:9c:7c:
                    76:7f:08:99:4e:6b:60:bb:d7:10:9d:4a:31:6c:03:
                    08:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:18:C2:38:9A:8F:ED:E7:FA:C0:81:F4:81:D8:89:20:EE:4C:A4:18
            X509v3 Authority Key Identifier:
                keyid:95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4be0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         32:68:09:fe:5e:6d:09:ef:6b:74:65:5e:09:91:44:fb:a9:ee:
         47:7e:2a:63:d8:dd:32:cb:f8:39:12:e6:3d:e1:89:7e:18:89:
         e2:0a:ae:6b:40:c4:bd:43:0a:28:48:48:aa:97:15:76:bc:f8:
         5f:27:1a:1b:95:e4:ef:41:55:ba:95:67:67:ad:01:54:58:9b:
         29:35:11:dc:7f:36:ea:74:43:f3:37:d3:90:96:a3:7a:81:73:
         9b:03:41:47:96:7b:b8:ed:5b:23:fc:03:fd:38:77:5d:2d:64:
         10:f7:0b:df:c6:8c:20:9f:b2:27:1a:a1:7b:02:4b:00:2e:b5:
         1a:2e:70:27:d5:5f:5a:81:8b:a9:08:d0:5b:e2:28:90:d6:3e:
         61:6d:b7:04:5b:0c:87:37:69:6e:d9:6b:65:0e:6b:46:98:7b:
         85:26:28:5a:0d:ab:09:e9:01:39:e0:b0:4b:64:ad:f7:8e:a7:
         26:8b:15:f1:77:e6:f9:41:60:19:d6:d4:64:06:7b:0c:dd:82:
         51:f0:b2:3a:91:f7:65:bb:1f:81:40:28:89:04:b1:18:1c:dc:
         80:99:c5:fe:3a:6a:d1:c5:88:1f:c7:59:fb:f1:67:72:86:07:
         cf:66:0d:0b:93:f7:93:57:4a:c2:24:1f:fe:6d:7d:6e:ce:63:
         fc:55:95:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----