Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a3a2f33322d3334203d3e20323731333335.roa
File:                     323830343a373965383a3a2f33322d3334203d3e20323731333335.roa (raw, json)
Hash identifier:          rBD90i4jznH4LEWJXHRlmm11CpvlIDZ7/ZqK1XlC4Hk=
Subject key identifier:   7B:57:5C:E7:FE:0F:E8:C0:F6:C3:A0:8B:46:BA:D4:39:AC:DF:D6:34
Certificate issuer:       /CN=80A84A91D7829D181BA98D210D118AEA94C1B232
Certificate serial:       1F49B8698CB9BE2BCC26CF66CD54380C45A1D6EA
Authority key identifier: 80:A8:4A:91:D7:82:9D:18:1B:A9:8D:21:0D:11:8A:EA:94:C1:B2:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80A84A91D7829D181BA98D210D118AEA94C1B232.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a3a2f33322d3334203d3e20323731333335.roa
Signing time:             Tue 21 Nov 2023 17:51:25 +0000
ROA not before:           Tue 21 Nov 2023 17:46:25 +0000
ROA not after:            Tue 19 Nov 2024 17:51:25 +0000
asID:                     271335
IP address blocks:        2804:79e8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:49:b8:69:8c:b9:be:2b:cc:26:cf:66:cd:54:38:0c:45:a1:d6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A84A91D7829D181BA98D210D118AEA94C1B232
        Validity
            Not Before: Nov 21 17:46:25 2023 GMT
            Not After : Nov 19 17:51:25 2024 GMT
        Subject: CN=7B575CE7FE0FE8C0F6C3A08B46BAD439ACDFD634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:d5:d0:a3:6e:21:23:24:c2:db:78:f7:92:
                    e1:af:70:6a:d9:f5:cb:47:cd:82:06:ba:28:ab:59:
                    5f:7c:4d:03:27:d0:bf:58:3d:b0:60:1c:6d:fd:ae:
                    47:7e:ad:5d:60:22:db:bc:1c:cf:a0:60:c4:6d:ed:
                    4e:22:bc:f3:9d:b1:2c:bf:ea:37:23:34:56:65:f2:
                    1c:63:fd:cf:9d:9e:dc:c0:00:64:9d:51:24:e0:2e:
                    a4:83:6e:76:2d:9d:2e:e8:d0:b6:b1:0f:0c:27:35:
                    74:f3:ed:f2:4b:ef:51:ca:6a:72:1f:82:a9:2f:9a:
                    17:58:e3:db:3b:e6:54:af:af:a0:8e:28:75:af:dc:
                    b6:57:e3:91:08:79:4f:01:73:b0:3b:7a:2f:24:ae:
                    35:10:23:60:6d:2a:bc:ad:ce:50:ec:9e:77:0f:0d:
                    75:dd:9e:cd:3a:e1:b2:ed:19:e4:39:62:59:33:70:
                    78:ee:44:1c:5a:a6:d2:06:e5:77:b3:04:ba:47:b8:
                    3c:d3:61:4b:85:3d:3b:85:fd:a1:61:65:15:29:f3:
                    a2:00:9c:1c:9f:9a:77:af:64:1f:b9:0a:58:0b:e2:
                    65:4d:de:83:40:dd:90:6b:e2:17:de:19:7d:00:34:
                    2c:76:94:36:b0:0f:e8:1b:bd:d8:20:75:33:83:ee:
                    45:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:57:5C:E7:FE:0F:E8:C0:F6:C3:A0:8B:46:BA:D4:39:AC:DF:D6:34
            X509v3 Authority Key Identifier:
                keyid:80:A8:4A:91:D7:82:9D:18:1B:A9:8D:21:0D:11:8A:EA:94:C1:B2:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/80A84A91D7829D181BA98D210D118AEA94C1B232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80A84A91D7829D181BA98D210D118AEA94C1B232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a3a2f33322d3334203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:3e:f0:78:dc:6d:cd:bd:27:ba:e1:19:24:69:6c:52:ca:39:
         15:c5:88:e2:36:44:c3:51:78:c7:05:ef:6c:29:8f:c0:67:58:
         54:6e:71:e7:e5:e6:1f:e1:b1:ca:e8:2f:8c:be:50:e3:28:02:
         83:a5:7d:42:55:dd:7b:93:98:03:e6:25:e2:b8:d9:a8:27:36:
         b2:6f:db:25:57:96:15:a0:16:15:e4:2c:5d:00:e9:14:8b:28:
         74:3c:91:2c:45:91:91:c8:ac:84:38:28:fc:39:e3:45:74:f2:
         e9:20:ad:8d:dd:64:03:46:aa:f9:f9:29:7e:02:88:ae:fb:4f:
         f9:b9:86:5b:0f:87:d0:3a:08:9c:63:76:6c:66:a3:be:85:b1:
         61:89:c2:78:25:85:dd:16:3e:78:a4:1f:20:b6:11:6e:29:09:
         fc:5e:af:b9:c6:a0:7b:44:74:e4:4b:15:19:e2:df:44:07:be:
         46:a4:81:3f:72:c7:e4:e1:10:45:1a:1d:08:74:b1:fd:84:5b:
         b0:5c:df:3a:b3:be:f4:f3:3d:05:24:41:8c:19:53:b6:e6:6c:
         56:aa:96:cb:48:4d:b7:e5:47:19:32:e0:fa:b9:04:21:59:e1:
         2c:4d:31:b3:a6:51:30:9c:99:b2:96:dd:33:08:3d:79:a9:67:
         61:57:ae:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----