Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/323830343a376264303a3a2f33322d3332203d3e20323731343536.roa
File:                     323830343a376264303a3a2f33322d3332203d3e20323731343536.roa (raw, json)
Hash identifier:          Abta2/r72Yz1CDFCTzs9h+VVXe4BtnfuhRTVMOl1k/c=
Subject key identifier:   F4:52:51:75:CA:37:E3:DB:25:AC:F1:2E:E1:28:4C:67:B0:BF:9C:18
Certificate issuer:       /CN=DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1
Certificate serial:       0E4D8F8172003FB03A2726FED6A20F2664557B52
Authority key identifier: DF:4A:B5:F9:B9:65:30:45:23:F2:CE:BC:86:6B:AF:3C:C8:3D:E7:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/323830343a376264303a3a2f33322d3332203d3e20323731343536.roa
Signing time:             Wed 21 Feb 2024 20:16:57 +0000
ROA not before:           Wed 21 Feb 2024 20:11:57 +0000
ROA not after:            Wed 19 Feb 2025 20:16:57 +0000
asID:                     271456
IP address blocks:        2804:7bd0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4d:8f:81:72:00:3f:b0:3a:27:26:fe:d6:a2:0f:26:64:55:7b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1
        Validity
            Not Before: Feb 21 20:11:57 2024 GMT
            Not After : Feb 19 20:16:57 2025 GMT
        Subject: CN=F4525175CA37E3DB25ACF12EE1284C67B0BF9C18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bf:f8:55:37:bb:88:e2:bb:27:63:d3:0d:14:
                    18:31:1e:1b:2b:75:8c:bd:db:c6:b2:54:06:58:f8:
                    22:c9:09:20:06:a0:b9:ed:66:3d:d3:dc:36:33:ea:
                    59:c1:6d:74:5c:fc:26:75:e1:02:bf:17:bd:45:0d:
                    36:d8:b7:7b:d6:a1:11:a6:45:ce:f7:62:27:b6:7a:
                    d4:96:4f:97:2d:a6:a9:38:f9:9f:fd:b8:c3:65:03:
                    aa:3d:fe:32:3c:c8:b4:5c:65:19:86:f7:ff:b8:af:
                    f6:46:87:93:9b:51:c7:04:96:c4:ca:04:33:3e:eb:
                    51:54:c0:fb:17:de:2c:6c:d8:5c:c0:65:9c:13:53:
                    cd:22:da:5b:9c:ab:0d:b1:bb:7e:18:a3:75:ed:58:
                    06:8c:bd:46:1b:d0:38:3b:3d:d5:3f:b4:2a:33:e9:
                    69:c6:b7:a3:6f:99:bc:4c:a9:44:ad:bd:18:40:af:
                    d2:02:2f:d6:61:b4:8b:3f:17:e7:a3:a6:7b:c9:3e:
                    18:43:e6:3f:4d:07:0f:e4:dc:c8:4d:83:2d:11:a3:
                    69:5e:fe:48:3a:d9:b3:96:77:c8:a5:79:c7:49:b3:
                    6e:59:08:fc:76:72:70:7a:5e:49:80:b1:04:c5:e5:
                    68:02:22:52:37:74:90:4a:8b:c1:e1:e6:55:a3:de:
                    cf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:52:51:75:CA:37:E3:DB:25:AC:F1:2E:E1:28:4C:67:B0:BF:9C:18
            X509v3 Authority Key Identifier:
                keyid:DF:4A:B5:F9:B9:65:30:45:23:F2:CE:BC:86:6B:AF:3C:C8:3D:E7:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/323830343a376264303a3a2f33322d3332203d3e20323731343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:b9:b9:0a:0e:1a:83:66:64:ce:d7:ad:7e:d2:f8:00:5e:0b:
         d5:9f:0b:be:dc:1e:0c:7f:42:7a:6a:6d:16:d0:4a:b6:49:f9:
         6e:14:4b:ed:37:32:b0:2b:59:19:4a:8f:f9:23:da:e3:1d:a2:
         2f:85:f9:17:3f:86:74:24:b5:6d:e2:fb:70:b1:9c:0d:cf:a3:
         28:a5:0a:54:8a:ad:0c:ed:66:44:2f:c4:73:3b:e2:ac:05:22:
         62:37:cd:6d:e2:de:20:e1:3f:48:81:5a:c2:42:e5:c2:dc:e3:
         04:11:0d:48:7c:d6:da:7a:cd:42:82:0e:86:fe:12:db:1d:50:
         16:9e:e5:49:44:3d:4d:93:43:ef:1e:a0:ad:52:02:25:38:7f:
         a5:6a:1b:19:36:a7:3b:7a:ef:b2:1e:be:2b:08:50:d8:fd:4c:
         1d:fb:30:b9:63:b2:35:d1:05:07:14:1a:b5:37:d0:bd:6f:60:
         a7:28:d2:c3:12:a3:40:b1:53:57:43:05:70:e3:1b:21:95:d1:
         18:03:e1:da:46:5b:c3:b3:2d:0e:24:b6:cd:cc:dd:a9:60:ba:
         73:a7:0d:c2:3c:19:82:a4:e3:db:46:ea:2c:dc:d4:3b:d6:31:
         0c:0f:1f:65:2b:92:fd:4e:ab:10:02:7e:e9:15:4f:61:63:e6:
         f5:a8:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----