Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a343030303a3a2f33342d3334203d3e20323637363134.roa
File:                     323830343a343366633a343030303a3a2f33342d3334203d3e20323637363134.roa (raw, json)
Hash identifier:          g0wG/meglqC1czh6Oa7iCbX5fxBYYd3mrCIQiazlLqU=
Subject key identifier:   14:CF:43:35:C6:52:C8:A0:34:9C:C3:C4:FD:02:57:36:86:04:D3:B1
Certificate issuer:       /CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
Certificate serial:       43133C870C8317E87DE7C9532567B2CC004F108B
Authority key identifier: 7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a343030303a3a2f33342d3334203d3e20323637363134.roa
Signing time:             Wed 06 Dec 2023 18:21:37 +0000
ROA not before:           Wed 06 Dec 2023 18:16:37 +0000
ROA not after:            Wed 04 Dec 2024 18:21:37 +0000
asID:                     267614
IP address blocks:        2804:43fc:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:13:3c:87:0c:83:17:e8:7d:e7:c9:53:25:67:b2:cc:00:4f:10:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
        Validity
            Not Before: Dec  6 18:16:37 2023 GMT
            Not After : Dec  4 18:21:37 2024 GMT
        Subject: CN=14CF4335C652C8A0349CC3C4FD0257368604D3B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2e:13:be:71:54:39:43:1f:5a:43:bd:cf:d9:
                    65:d8:8b:66:37:c3:f5:38:42:6b:f0:f6:58:e7:a5:
                    74:b8:73:73:32:6f:9f:a3:41:dc:c9:b5:01:e3:3b:
                    f4:30:2a:14:10:da:5d:4d:eb:07:aa:ac:6f:0e:10:
                    45:42:34:c7:f6:23:d6:d6:e5:f0:e7:af:72:7c:22:
                    0a:cd:0c:fd:19:db:f2:2b:68:66:f0:d2:7d:5b:50:
                    56:9a:ce:9a:5f:2b:51:1e:97:bd:57:2b:09:f2:84:
                    4a:c8:5c:e7:4f:c5:3f:62:1e:fc:95:3a:8f:3f:59:
                    3d:de:f1:ef:b5:e9:aa:6a:4b:fb:7c:52:7a:ea:ee:
                    47:fb:46:4e:83:ea:e1:40:d7:a1:ee:4e:97:37:e2:
                    f1:5f:5d:3b:3e:65:cf:4d:71:8c:4f:a8:2a:2d:e9:
                    5d:48:9b:58:ed:3d:93:03:39:be:fd:11:26:10:e9:
                    b0:87:86:51:60:98:f3:1e:d6:9e:ec:de:a9:a7:ba:
                    25:52:05:3d:36:9e:55:e4:c1:bb:09:9f:2b:4e:4d:
                    0e:65:38:7d:0c:10:0e:23:3b:3c:f4:7e:9b:64:81:
                    5a:17:60:f8:c0:a0:bd:c6:d6:d5:90:0e:e6:ba:0c:
                    fe:ce:df:22:e8:e8:ac:0a:ba:79:12:c8:30:40:80:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CF:43:35:C6:52:C8:A0:34:9C:C3:C4:FD:02:57:36:86:04:D3:B1
            X509v3 Authority Key Identifier:
                keyid:7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a343030303a3a2f33342d3334203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43fc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ad:0f:7c:33:46:0e:37:1a:6e:b4:ed:eb:e7:59:f8:d8:ab:19:
         25:c6:8f:6f:5e:85:b9:bc:4a:39:bd:13:aa:47:77:cd:56:36:
         36:92:05:e9:da:fa:75:de:c9:7f:fa:8c:33:a5:a5:36:03:f5:
         85:7c:d8:61:80:98:36:a6:54:0b:7d:b5:9f:58:8e:43:f8:be:
         cf:d9:dc:e4:9c:3c:d9:8b:c2:d6:4b:61:9d:78:45:fb:68:c4:
         8f:78:34:da:51:90:4e:6c:12:5f:1e:e1:92:16:a5:df:9c:9f:
         84:b5:ac:39:2f:03:c4:2c:8f:b5:89:19:cf:b6:83:35:15:45:
         5a:6e:53:5d:58:bb:a3:dc:c5:87:11:9d:72:a0:9f:54:49:79:
         f6:28:2c:ce:e5:f6:37:d9:7d:2f:57:49:d8:6c:a8:c0:9b:41:
         e0:f9:9e:c4:9d:b6:53:7e:50:2d:4e:c2:93:28:88:ef:b0:20:
         55:bf:c5:40:01:12:52:03:91:cc:06:63:2f:ff:5e:df:37:d3:
         78:dd:5e:62:97:e6:e5:1c:ea:00:cc:ad:d1:c6:f1:9c:f8:1c:
         05:ae:c9:5e:cc:e2:df:26:18:05:88:ab:95:8a:95:cb:4e:3e:
         ea:cb:57:c4:88:63:58:ba:b6:83:27:fa:d7:39:28:d6:9d:52:
         d8:cb:cf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----