Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/323830343a373337383a3a2f33322d3332203d3e20323730393137.roa
File:                     323830343a373337383a3a2f33322d3332203d3e20323730393137.roa (raw, json)
Hash identifier:          V4eHiH2JZcLZ7mPYjnGF8rsoCAC6YuCXcF2iuQlBb2o=
Subject key identifier:   8F:65:BD:45:35:FA:7E:15:FB:FD:1C:FE:EF:06:11:7C:B9:79:E7:F1
Certificate issuer:       /CN=CC9E345A5443E54716B824EB79F1A5F6060302C0
Certificate serial:       45DC0A049495D5E312D3312ACEFCD71D84C4D934
Authority key identifier: CC:9E:34:5A:54:43:E5:47:16:B8:24:EB:79:F1:A5:F6:06:03:02:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E345A5443E54716B824EB79F1A5F6060302C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/323830343a373337383a3a2f33322d3332203d3e20323730393137.roa
Signing time:             Tue 06 Feb 2024 22:18:23 +0000
ROA not before:           Tue 06 Feb 2024 22:13:23 +0000
ROA not after:            Tue 04 Feb 2025 22:18:23 +0000
asID:                     270917
IP address blocks:        2804:7378::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:dc:0a:04:94:95:d5:e3:12:d3:31:2a:ce:fc:d7:1d:84:c4:d9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC9E345A5443E54716B824EB79F1A5F6060302C0
        Validity
            Not Before: Feb  6 22:13:23 2024 GMT
            Not After : Feb  4 22:18:23 2025 GMT
        Subject: CN=8F65BD4535FA7E15FBFD1CFEEF06117CB979E7F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:ff:67:ab:2d:dc:b3:94:4f:2d:ba:5a:ea:
                    12:af:72:4e:32:5b:3a:80:b6:2a:ea:4f:f3:f9:5e:
                    13:bd:29:ba:99:22:ef:3f:73:9f:3c:61:44:7f:8d:
                    7a:62:c4:ed:5e:09:d6:e0:d9:3a:da:e5:a1:86:e5:
                    28:93:6e:19:4f:76:77:f2:fc:0f:95:65:cf:13:06:
                    1c:68:32:b8:70:22:04:b8:39:a4:92:17:b3:9d:36:
                    8c:13:a1:76:d9:fc:ce:bd:7a:42:fa:10:4e:88:8c:
                    bc:83:8e:88:8a:7f:a4:e5:85:ba:79:c4:25:c6:50:
                    d4:dd:12:0f:41:a4:a4:90:80:35:c7:5e:01:57:46:
                    f9:99:c2:07:9d:9b:19:94:85:a5:7d:69:26:cb:28:
                    8d:c6:4a:20:b5:3d:0d:ed:61:11:b6:34:e4:ce:4e:
                    b0:08:46:f7:19:36:11:f2:07:ff:9c:ff:04:d8:3d:
                    60:1e:a4:d9:dd:b5:2a:ad:6c:bf:c7:c5:73:2a:bb:
                    ed:b1:f7:6c:1b:0b:46:dd:77:ac:4d:06:da:99:f9:
                    aa:03:a1:3d:58:02:0f:b7:fd:27:c9:de:8e:bb:c8:
                    3a:2b:a2:fc:2e:7c:b0:54:c8:84:c0:f9:72:0d:b5:
                    dc:dc:c1:85:14:1b:76:a7:96:33:44:6d:e1:06:cd:
                    37:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:65:BD:45:35:FA:7E:15:FB:FD:1C:FE:EF:06:11:7C:B9:79:E7:F1
            X509v3 Authority Key Identifier:
                keyid:CC:9E:34:5A:54:43:E5:47:16:B8:24:EB:79:F1:A5:F6:06:03:02:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/CC9E345A5443E54716B824EB79F1A5F6060302C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E345A5443E54716B824EB79F1A5F6060302C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/323830343a373337383a3a2f33322d3332203d3e20323730393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7378::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:22:4f:1b:3b:66:6c:88:20:53:3e:2e:cd:bc:31:a7:c4:80:
         91:eb:f8:be:95:b6:73:bd:d5:8d:d4:44:70:fa:55:7f:30:0f:
         71:51:ec:76:00:94:8a:ec:74:7f:87:ef:79:f3:b1:7c:0a:bb:
         f7:36:13:dd:e3:2f:82:0c:01:1c:83:6e:1d:24:2f:27:0b:07:
         f3:5b:2f:9d:8b:f8:13:00:ec:6f:68:0b:f1:5a:fd:c9:cc:62:
         39:b9:32:67:55:cc:12:ec:b1:0f:99:b5:c7:47:66:aa:a7:99:
         9e:49:f6:df:70:57:35:d2:c3:41:e7:6c:4e:07:37:ea:ca:9c:
         d3:43:a2:26:13:de:a6:85:7f:cb:14:fb:a7:06:70:8b:6b:26:
         53:e8:f4:1b:1e:46:25:92:eb:19:ea:f7:77:75:4f:b6:64:38:
         5f:52:b9:b0:f2:b4:bf:23:dc:6d:0a:ff:03:ab:d1:0c:c5:e5:
         94:24:ba:30:9a:4c:99:6a:04:aa:30:c6:aa:f5:92:ce:f0:9e:
         0b:df:6d:2d:7e:0b:cb:6d:cf:bc:73:7c:dd:c4:f6:21:8a:f9:
         cb:aa:c8:cc:b3:08:4f:ab:f6:3a:da:17:e6:9b:59:10:54:f2:
         37:83:91:6c:78:bc:a6:13:0a:1b:c2:e4:f0:8a:0f:46:f6:b6:
         ed:8f:7c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----