Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a383030303a3a2f33332d3333203d3e20323730363030.roa
File:                     323830343a366537633a383030303a3a2f33332d3333203d3e20323730363030.roa (raw, json)
Hash identifier:          jCNTcmUNnuPq3UqjOLecPeYURmvPKxUmRMsTQSKJtXA=
Subject key identifier:   91:8F:02:FF:C8:2F:EF:BF:CD:A3:D5:A2:39:9D:E8:D6:71:DE:3F:FC
Certificate issuer:       /CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
Certificate serial:       566EEDB8B3E9364E2876E42EC8491ED9824BE31E
Authority key identifier: 91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a383030303a3a2f33332d3333203d3e20323730363030.roa
Signing time:             Sat 11 Mar 2023 16:46:46 +0000
ROA not before:           Sat 11 Mar 2023 16:41:46 +0000
ROA not after:            Sat 09 Mar 2024 16:46:46 +0000
asID:                     270600
IP address blocks:        2804:6e7c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6e:ed:b8:b3:e9:36:4e:28:76:e4:2e:c8:49:1e:d9:82:4b:e3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
        Validity
            Not Before: Mar 11 16:41:46 2023 GMT
            Not After : Mar  9 16:46:46 2024 GMT
        Subject: CN=918F02FFC82FEFBFCDA3D5A2399DE8D671DE3FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:5c:00:36:1c:63:f2:35:9e:89:e1:14:2e:
                    b2:b8:f5:63:0f:b4:a8:e7:36:86:70:8f:a8:e9:6d:
                    40:3d:39:10:5a:ba:60:ae:2e:6f:11:74:70:00:76:
                    06:dc:62:c5:7a:93:78:f0:2f:bd:37:d0:3c:f1:66:
                    83:ca:12:b4:4e:82:81:04:be:b4:0e:5d:0b:72:b6:
                    a5:33:9a:b5:d6:35:4a:c3:b7:e9:2b:13:16:95:de:
                    f2:1e:5a:36:b3:3b:bc:4c:78:26:fa:c5:a3:01:ca:
                    f1:57:34:b1:f1:f9:28:f3:02:58:29:0f:11:0f:b7:
                    4f:87:f7:95:a9:a6:92:00:b1:46:95:87:09:b6:0d:
                    8e:b2:a5:7a:9f:25:2a:8a:0e:a9:ff:da:00:69:ef:
                    a1:c9:43:7d:52:45:5f:3c:7a:a0:a3:53:09:13:9e:
                    3c:3f:b4:92:f6:3c:b7:b3:11:3f:d3:6e:b6:f9:1e:
                    8d:9b:10:b8:12:28:4d:0a:a5:bf:c6:12:0b:9d:8a:
                    6b:82:f2:cc:0e:96:db:f4:a7:91:20:04:c8:c1:47:
                    04:df:83:f8:df:0c:f5:41:1c:96:92:15:52:d6:9c:
                    8a:d2:c5:6b:c5:80:0d:20:22:a3:a3:50:f7:0e:58:
                    4d:b1:ec:b7:3f:d4:90:f9:c9:80:e8:50:31:83:36:
                    43:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8F:02:FF:C8:2F:EF:BF:CD:A3:D5:A2:39:9D:E8:D6:71:DE:3F:FC
            X509v3 Authority Key Identifier:
                keyid:91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a383030303a3a2f33332d3333203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e7c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         16:14:38:19:04:4e:d3:2f:a1:be:0a:69:66:a0:d7:79:d3:69:
         9f:ef:20:bb:b9:4f:ef:64:a2:27:20:5e:e2:84:f0:d9:a9:e8:
         29:aa:1f:f6:57:e8:2a:53:c4:ea:b2:2b:71:76:18:95:dd:01:
         7d:7b:66:33:4d:88:58:16:1d:87:27:03:c6:5a:fb:52:72:05:
         57:e2:5c:7d:8e:a5:5f:ec:0d:2f:13:f8:4d:39:b8:61:ab:68:
         9b:63:f1:c8:0e:a6:19:49:55:de:7d:48:31:00:14:5a:60:9a:
         e8:81:52:82:2b:b8:0d:b9:a2:bc:a8:17:c2:61:94:70:9c:8e:
         41:ab:88:2b:fd:71:6a:31:ee:ca:fc:b3:d3:da:4c:51:77:82:
         ff:d0:f2:ee:ca:8d:39:66:1a:8a:9b:03:ef:07:e8:a0:df:7f:
         1a:71:7a:42:67:3f:bf:04:18:0b:b4:c4:e0:1c:61:5b:34:ba:
         bc:ce:f8:52:71:69:a9:e1:ab:fa:a7:54:39:7b:01:9d:29:c3:
         46:96:a3:06:5f:9f:bc:b3:ea:d6:01:9e:fb:15:df:bf:57:ed:
         e2:ad:f0:f6:82:28:27:10:06:2f:53:3f:80:28:d6:95:8c:a5:
         11:c0:e9:96:72:89:0f:6e:36:58:53:1c:a5:8a:b5:27:38:58:
         bb:6b:0a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----