Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/323830343a336635343a3a2f33322d3332203d3e20323635383835.roa
File:                     323830343a336635343a3a2f33322d3332203d3e20323635383835.roa (raw, json)
Hash identifier:          Iy4mqEqYQCrc7GkdgemPrggw8AWgKmtQHHPF6OT9HNk=
Subject key identifier:   EF:5B:0C:4D:B1:46:C2:95:72:BA:5B:4D:73:A7:02:8A:32:52:C0:80
Certificate issuer:       /CN=FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3
Certificate serial:       79473C9AB8550D1D1EC1E2C15C218F1414459CF2
Authority key identifier: FB:61:CC:FF:CB:CC:30:40:B5:6E:07:B8:AA:81:73:F9:B5:CC:F8:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/323830343a336635343a3a2f33322d3332203d3e20323635383835.roa
Signing time:             Wed 20 Sep 2023 10:16:01 +0000
ROA not before:           Wed 20 Sep 2023 10:11:01 +0000
ROA not after:            Wed 18 Sep 2024 10:16:01 +0000
asID:                     265885
IP address blocks:        2804:3f54::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:47:3c:9a:b8:55:0d:1d:1e:c1:e2:c1:5c:21:8f:14:14:45:9c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3
        Validity
            Not Before: Sep 20 10:11:01 2023 GMT
            Not After : Sep 18 10:16:01 2024 GMT
        Subject: CN=EF5B0C4DB146C29572BA5B4D73A7028A3252C080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:09:f8:6b:77:1f:36:69:05:fc:b9:86:c0:
                    c6:08:96:c0:13:9c:5d:37:2c:00:87:b3:f7:68:65:
                    e4:02:03:93:0d:fd:a1:84:6d:6e:6b:a3:ed:b0:a0:
                    df:68:a8:18:48:90:d9:5a:4f:e3:1b:8a:9b:87:76:
                    6d:d1:bb:61:b6:47:f9:d8:a5:2b:e5:c9:55:dc:c3:
                    7c:18:fb:35:f1:c1:32:25:12:12:93:4b:20:14:85:
                    57:73:83:28:b1:3c:3e:2d:fb:69:cf:99:17:90:5f:
                    9e:3b:af:1f:b0:fe:6e:78:23:f0:f8:b3:d5:78:8b:
                    c8:c1:5a:c7:e7:4a:ac:88:60:c5:a0:85:92:3a:78:
                    a9:c1:84:9a:bb:fb:e9:4d:1f:a0:8a:42:84:a4:7e:
                    4d:f0:e4:90:71:70:4c:56:5a:fe:9a:19:e3:3c:73:
                    2b:8b:78:5a:4a:72:b1:9e:f3:25:2f:d9:d1:66:b3:
                    19:aa:e2:56:b1:7c:dc:45:bc:d4:75:97:a6:9a:7b:
                    16:a1:38:75:66:1c:e6:4a:37:a6:b9:ec:53:f1:a1:
                    ed:98:ce:95:ea:47:e1:7e:31:46:78:0c:75:6e:f6:
                    e1:4d:77:29:b9:55:5c:8e:0a:41:a2:14:40:99:79:
                    61:f3:b5:8e:9d:61:02:76:49:e0:21:83:94:d2:1f:
                    4a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5B:0C:4D:B1:46:C2:95:72:BA:5B:4D:73:A7:02:8A:32:52:C0:80
            X509v3 Authority Key Identifier:
                keyid:FB:61:CC:FF:CB:CC:30:40:B5:6E:07:B8:AA:81:73:F9:B5:CC:F8:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB61CCFFCBCC3040B56E07B8AA8173F9B5CCF8C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/0/323830343a336635343a3a2f33322d3332203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:9e:25:e7:c6:21:a5:28:04:d2:6b:cb:02:e9:62:c5:3c:6d:
         5f:4f:a1:31:ef:bd:50:f5:6a:e6:08:e3:94:64:19:aa:35:62:
         02:2e:05:6d:d2:79:cf:0c:2a:67:5d:6e:1a:c9:6f:40:e1:d9:
         1a:24:bd:80:f4:ea:04:3b:09:29:55:b2:3c:7c:47:a4:f5:d1:
         63:93:79:15:19:16:81:8b:39:00:ed:ee:bd:25:68:22:44:6d:
         41:ce:73:86:c1:eb:6a:81:8a:3d:ba:bd:c4:aa:b8:1a:25:23:
         94:f9:c2:d7:f0:7d:4e:87:f5:a8:03:a3:87:94:e8:5f:6d:43:
         56:19:85:97:af:9f:51:68:cc:6e:28:17:98:3f:44:1d:50:f3:
         8b:60:a9:29:b9:aa:fb:43:6f:d5:9a:36:e1:23:6b:c5:95:f7:
         2a:47:ed:c7:a8:ec:da:d9:15:b1:d2:5e:ba:67:60:de:f3:c7:
         0a:22:4a:57:95:2e:f4:e2:b7:48:c7:7e:a8:04:42:67:e1:84:
         2f:e8:04:36:64:1d:50:f3:98:13:0a:26:e8:50:21:32:9f:88:
         2a:2e:23:9a:06:27:de:b0:04:76:ef:11:f7:b7:fb:28:23:f4:
         03:e1:1b:a6:2a:92:2b:d7:4a:99:0a:2f:2d:cf:13:d2:56:af:
         f4:9d:a8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----