Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/323830343a383937343a3a2f33322d3332203d3e20323733363035.roa
File:                     323830343a383937343a3a2f33322d3332203d3e20323733363035.roa (raw, json)
Hash identifier:          3PSevJrrl8ybLeXji9m7PkXHAOegPg6zVFMkbmOTXVs=
Subject key identifier:   91:B9:74:36:49:55:26:92:97:07:AB:80:89:95:6A:86:2A:BA:0C:B3
Certificate issuer:       /CN=B760F6C5D8988D3EA7DBA56DDE658E809D988219
Certificate serial:       322D50B788F1169FBF3A92D0C4B5CF217E9712C2
Authority key identifier: B7:60:F6:C5:D8:98:8D:3E:A7:DB:A5:6D:DE:65:8E:80:9D:98:82:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B760F6C5D8988D3EA7DBA56DDE658E809D988219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/323830343a383937343a3a2f33322d3332203d3e20323733363035.roa
Signing time:             Mon 30 Oct 2023 14:27:17 +0000
ROA not before:           Mon 30 Oct 2023 14:22:17 +0000
ROA not after:            Mon 28 Oct 2024 14:27:17 +0000
asID:                     273605
IP address blocks:        2804:8974::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2d:50:b7:88:f1:16:9f:bf:3a:92:d0:c4:b5:cf:21:7e:97:12:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B760F6C5D8988D3EA7DBA56DDE658E809D988219
        Validity
            Not Before: Oct 30 14:22:17 2023 GMT
            Not After : Oct 28 14:27:17 2024 GMT
        Subject: CN=91B97436495526929707AB8089956A862ABA0CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:cd:a8:61:ee:d2:d5:dc:0a:05:a8:5d:73:
                    2c:a0:fa:e0:39:27:b2:ca:02:56:44:ff:34:b9:d2:
                    b5:48:9a:43:45:b8:81:92:0d:44:f0:6b:be:03:ee:
                    b4:8f:8f:7c:11:68:de:85:d8:37:cb:aa:aa:17:3f:
                    d2:c3:0f:be:a2:64:9b:c3:37:11:3a:01:38:40:69:
                    ae:17:4b:64:70:14:9e:e3:4e:a5:08:fe:51:15:07:
                    d7:af:5c:db:0c:6f:a0:0f:3c:ea:78:ad:46:aa:18:
                    09:10:7b:3e:8c:53:9b:91:5f:28:9a:ed:f7:54:70:
                    e0:77:d6:e0:57:ae:eb:f0:80:43:31:17:d9:6d:6f:
                    bf:35:ae:d9:98:99:1a:bb:2a:fa:4e:a2:1a:b0:18:
                    b3:07:fa:a0:fa:a3:92:16:0b:03:c9:3c:a8:6c:e4:
                    bf:43:2c:d6:28:0d:0a:dd:24:5d:39:c2:89:fd:0f:
                    fc:f7:42:85:fd:0c:c4:12:0c:06:34:35:38:1c:3c:
                    8a:a4:ea:64:1f:11:42:40:e1:ab:98:49:6f:6b:ae:
                    cd:01:d1:b1:07:d0:6a:24:fa:97:27:f8:74:fd:35:
                    3f:b3:2d:11:28:6f:2c:b2:8a:4f:a5:54:31:e0:bd:
                    75:59:5c:89:75:b2:67:90:c8:d7:62:29:d9:95:fd:
                    b7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B9:74:36:49:55:26:92:97:07:AB:80:89:95:6A:86:2A:BA:0C:B3
            X509v3 Authority Key Identifier:
                keyid:B7:60:F6:C5:D8:98:8D:3E:A7:DB:A5:6D:DE:65:8E:80:9D:98:82:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/B760F6C5D8988D3EA7DBA56DDE658E809D988219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B760F6C5D8988D3EA7DBA56DDE658E809D988219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/323830343a383937343a3a2f33322d3332203d3e20323733363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8974::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:a1:9c:b4:4d:a4:e6:83:93:40:47:2b:9a:ee:b6:8a:3b:28:
         1c:4b:20:f1:9c:6b:72:8a:54:c0:89:4c:31:10:44:c1:3a:e6:
         b6:49:5f:a7:a5:fa:a8:99:47:7a:61:e6:8a:bd:eb:c5:03:f5:
         ce:8c:0c:56:51:c9:67:31:81:23:57:fd:7b:60:16:6f:df:9c:
         0d:07:42:09:c7:f0:b8:4e:0d:0c:f3:aa:2c:13:2b:c7:16:69:
         ff:1f:93:ad:9f:60:b9:e1:c7:18:8a:29:6c:93:92:69:7e:96:
         a7:ea:3c:98:02:bb:90:ee:b4:65:79:99:8c:58:08:4b:ad:5c:
         fb:17:40:b8:b7:85:43:f2:f8:2b:84:ac:c9:f5:91:5a:ac:64:
         97:23:f7:c4:a9:06:a9:59:b4:79:8f:9a:28:a2:da:68:06:60:
         7a:c6:f3:60:2e:e7:9e:0c:bf:22:75:98:4b:ab:bc:f5:c7:ac:
         20:64:98:3f:3a:97:0f:2d:b7:e6:49:1a:f4:f8:eb:2b:23:24:
         bb:d5:5f:b5:a9:ce:1c:51:32:20:1d:1f:46:0e:5d:cc:5f:da:
         c3:a3:a8:4c:c9:53:e0:9f:06:35:dc:1f:cc:3d:d9:f8:b3:96:
         c2:bb:c4:19:45:57:4a:52:74:72:b0:a7:cf:78:86:d0:8a:d1:
         8b:9c:42:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----