Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/323830343a333366343a3a2f33322d3438203d3e20323635343237.roa
File:                     323830343a333366343a3a2f33322d3438203d3e20323635343237.roa (raw, json)
Hash identifier:          cwD/ytdTx0I/1jC9asvYboXFRy3EfY39hJ4QvaY1cuY=
Subject key identifier:   B9:4E:91:9F:38:E6:EE:36:74:AA:4A:CD:D2:B7:1D:7E:59:1B:F9:6B
Certificate issuer:       /CN=D704ED5A93D1B57340DF21829918581BDF630FA9
Certificate serial:       7C3769EDD0B9C91E0667820C31086966930C3FE0
Authority key identifier: D7:04:ED:5A:93:D1:B5:73:40:DF:21:82:99:18:58:1B:DF:63:0F:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D704ED5A93D1B57340DF21829918581BDF630FA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/323830343a333366343a3a2f33322d3438203d3e20323635343237.roa
Signing time:             Thu 26 Oct 2023 14:18:47 +0000
ROA not before:           Thu 26 Oct 2023 14:13:47 +0000
ROA not after:            Thu 24 Oct 2024 14:18:47 +0000
asID:                     265427
IP address blocks:        2804:33f4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:37:69:ed:d0:b9:c9:1e:06:67:82:0c:31:08:69:66:93:0c:3f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D704ED5A93D1B57340DF21829918581BDF630FA9
        Validity
            Not Before: Oct 26 14:13:47 2023 GMT
            Not After : Oct 24 14:18:47 2024 GMT
        Subject: CN=B94E919F38E6EE3674AA4ACDD2B71D7E591BF96B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:26:50:5f:24:69:9e:1b:63:50:91:22:9c:
                    83:b7:f6:ed:cc:9a:a3:48:d0:02:6d:27:1f:21:94:
                    b3:66:11:5a:d3:8d:3b:a4:96:66:46:24:5a:33:66:
                    c5:da:a6:21:ec:e3:3c:bb:89:b5:ad:b1:26:1d:05:
                    b1:66:80:35:a2:72:41:8f:f5:83:2c:ca:d6:81:e5:
                    79:ee:c0:8b:e9:41:38:03:b3:e0:b4:f7:21:4b:53:
                    cc:76:0a:fd:6e:f5:e8:b8:39:ae:e6:34:94:23:21:
                    e6:eb:f3:fa:42:2f:5d:09:d3:2b:a3:ac:1c:ef:b0:
                    f8:2c:d4:7c:e5:38:fe:b0:a7:21:83:01:ad:46:97:
                    3a:77:11:31:39:dd:08:42:07:16:cc:52:9f:8c:32:
                    d1:85:34:bf:f8:8f:a6:5d:04:ad:6d:39:af:24:77:
                    40:5a:57:cd:82:4b:78:2c:9b:ef:eb:51:71:b0:2a:
                    6c:dd:7b:b3:d8:0e:df:f6:0f:1d:17:c9:ee:a0:9a:
                    dc:1c:8c:a7:4a:24:33:77:e5:a3:1d:3f:ab:43:c6:
                    c0:71:71:3d:65:65:44:ed:a1:6c:a1:5d:52:1b:4c:
                    a7:4e:1c:50:cb:ff:62:5d:94:1e:e4:68:2e:29:34:
                    b3:0a:59:5b:60:36:15:b2:04:17:14:52:37:ad:ae:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4E:91:9F:38:E6:EE:36:74:AA:4A:CD:D2:B7:1D:7E:59:1B:F9:6B
            X509v3 Authority Key Identifier:
                keyid:D7:04:ED:5A:93:D1:B5:73:40:DF:21:82:99:18:58:1B:DF:63:0F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/D704ED5A93D1B57340DF21829918581BDF630FA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D704ED5A93D1B57340DF21829918581BDF630FA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/323830343a333366343a3a2f33322d3438203d3e20323635343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:5e:21:e2:4b:39:8c:e0:28:24:fa:13:92:87:64:b8:e7:46:
         f1:56:25:2e:1f:06:da:a3:0d:eb:b3:1e:c1:a4:ab:0a:93:e1:
         bd:a7:2c:cc:11:57:38:c2:3d:99:f5:e4:a1:9c:fb:f6:90:0e:
         83:71:15:27:da:d7:aa:cb:b2:ab:73:67:c0:62:bd:e5:40:12:
         20:87:0e:f6:d3:31:75:b0:4e:74:17:a2:f5:15:d5:85:af:7c:
         83:99:26:2b:19:53:42:c7:30:a7:6c:9a:0a:11:c9:8d:18:d7:
         fb:34:e3:df:16:2d:26:3a:03:6b:03:02:32:f2:1b:1a:96:fa:
         f7:46:92:a8:cf:02:ce:4a:6d:5b:30:43:64:ae:29:17:98:d3:
         37:a9:ad:a7:01:d6:97:0d:95:1a:9b:35:70:f9:24:8c:75:5e:
         a2:20:c2:d6:9a:81:12:7d:cf:8e:d0:fa:64:c2:6e:e7:15:2e:
         90:5a:c2:42:8d:32:ee:75:fc:7c:ab:01:7d:3f:4d:e1:41:cf:
         31:ce:0a:ba:a3:ce:4a:d6:df:58:eb:70:a5:dc:c2:08:66:2d:
         32:d5:78:29:9c:21:8a:f0:b3:89:23:4c:22:3c:50:0f:da:b1:
         db:fe:c0:ad:b2:43:cd:21:57:d5:12:e9:f8:9b:38:c6:69:51:
         69:53:5f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----