Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/1/323830343a373963303a3230303a3a2f34382d3438203d3e20323731333235.roa
File:                     323830343a373963303a3230303a3a2f34382d3438203d3e20323731333235.roa (raw, json)
Hash identifier:          uq3HIDSaTxXmVz3c36CBEyPeBnJCFXCPj7OOO/TV2Ng=
Subject key identifier:   38:7F:60:E6:ED:F3:C6:41:02:40:A2:41:9F:BB:02:79:2D:0E:A9:8A
Certificate issuer:       /CN=093CC67E30F53E1296481C084045BA2B68DBF7F0
Certificate serial:       04C54B5F5B613D5B4455BF5AC97345A0E5EFFD41
Authority key identifier: 09:3C:C6:7E:30:F5:3E:12:96:48:1C:08:40:45:BA:2B:68:DB:F7:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/093CC67E30F53E1296481C084045BA2B68DBF7F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/1/323830343a373963303a3230303a3a2f34382d3438203d3e20323731333235.roa
Signing time:             Thu 27 Jul 2023 13:54:38 +0000
ROA not before:           Thu 27 Jul 2023 13:49:38 +0000
ROA not after:            Thu 25 Jul 2024 13:54:38 +0000
asID:                     271325
IP address blocks:        2804:79c0:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c5:4b:5f:5b:61:3d:5b:44:55:bf:5a:c9:73:45:a0:e5:ef:fd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093CC67E30F53E1296481C084045BA2B68DBF7F0
        Validity
            Not Before: Jul 27 13:49:38 2023 GMT
            Not After : Jul 25 13:54:38 2024 GMT
        Subject: CN=387F60E6EDF3C6410240A2419FBB02792D0EA98A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:65:e3:ec:76:de:ed:e7:0e:3c:56:aa:d6:
                    3f:9e:9f:1e:0d:74:a9:de:02:1a:07:a2:8b:33:f5:
                    c8:8e:d7:ba:9f:22:29:bf:75:17:2a:b2:e2:36:07:
                    1a:af:cb:1e:2f:3c:d3:c8:2f:e6:9a:5b:f7:41:cb:
                    6a:5b:7c:56:ce:d4:57:c4:5f:a4:61:eb:a5:e9:e7:
                    d4:33:70:4d:cb:c5:91:43:94:3a:be:f3:ba:0e:ab:
                    2d:08:31:a3:f7:27:8f:e6:87:09:53:22:87:33:c0:
                    d8:c4:2b:e0:6f:31:ef:77:67:36:d3:78:99:cc:b9:
                    e9:c0:a8:b9:10:df:7e:50:ea:d1:8f:59:a0:e7:86:
                    70:81:be:ee:43:0c:82:04:fb:ee:6e:91:72:cd:1e:
                    2a:c7:33:6b:26:b5:49:bb:61:35:05:a1:6b:53:b9:
                    f2:6d:e7:64:42:fb:b3:88:65:66:c9:12:83:f4:ef:
                    ec:b2:15:f9:36:4a:f2:ce:1b:d9:7f:66:0f:b7:3c:
                    e4:1a:00:27:be:c7:d3:b4:3e:7e:c8:89:5d:23:f7:
                    9b:a3:6f:f0:18:0f:5d:22:76:79:4c:c3:f9:b7:6c:
                    3f:ec:67:f0:83:fb:f0:e3:c3:30:28:7a:a7:a1:1f:
                    97:8b:9d:7d:98:6d:61:be:2c:29:3a:50:c2:b3:86:
                    aa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7F:60:E6:ED:F3:C6:41:02:40:A2:41:9F:BB:02:79:2D:0E:A9:8A
            X509v3 Authority Key Identifier:
                keyid:09:3C:C6:7E:30:F5:3E:12:96:48:1C:08:40:45:BA:2B:68:DB:F7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/1/093CC67E30F53E1296481C084045BA2B68DBF7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/093CC67E30F53E1296481C084045BA2B68DBF7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/1/323830343a373963303a3230303a3a2f34382d3438203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79c0:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:e7:0e:00:97:14:3a:d7:e1:17:a1:9f:8d:79:a6:db:6d:13:
         0e:e0:30:0a:9f:ad:f1:1d:89:8b:02:ae:d1:12:4c:af:ba:78:
         5a:c6:1b:a3:bc:6b:44:ed:c3:bb:3f:c1:36:45:5b:cc:d5:5b:
         70:0c:43:2b:b7:4b:a4:97:57:a9:aa:f7:87:00:97:07:d4:eb:
         b7:c9:17:69:57:f4:3f:69:7d:0d:23:ac:1e:d3:bc:8e:7f:a0:
         33:18:31:88:2d:e6:c9:3f:0b:dc:4d:5d:f4:f9:91:b4:91:9b:
         94:6e:c3:b9:0f:87:ea:f0:66:d4:46:bd:b3:13:ae:ed:a0:fa:
         39:c5:49:18:08:d8:26:4b:e7:ad:9a:45:5a:fc:1c:95:2a:69:
         fa:7e:a5:d9:82:d3:aa:e1:d9:97:ac:ed:4e:6b:b3:d3:40:e8:
         0b:87:fb:57:38:03:45:94:c5:7a:b2:58:52:e8:4d:ab:c2:00:
         c5:1c:4b:e9:09:9f:a5:f9:ef:9d:e3:fe:16:98:35:79:53:75:
         f7:99:d2:a1:b2:a7:54:91:ff:22:b9:53:95:84:bd:88:81:39:
         9a:6b:fd:eb:0e:bb:e1:a0:67:c3:40:ae:a3:cc:ce:2a:43:62:
         f4:31:5f:70:63:bd:a5:9a:f9:1d:f7:1d:9b:34:f0:a9:d7:d1:
         72:8d:25:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----