Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/1/323830343a373963303a3a2f33322d3332203d3e20323731333235.roa
File:                     323830343a373963303a3a2f33322d3332203d3e20323731333235.roa (raw, json)
Hash identifier:          hHuAZN2Mu5szbfZF+7hWloddQvhXVArTo19ulD4Mf4o=
Subject key identifier:   36:E1:C1:46:9E:F1:63:15:C4:1F:97:93:C5:5F:73:4D:92:F8:05:52
Certificate issuer:       /CN=093CC67E30F53E1296481C084045BA2B68DBF7F0
Certificate serial:       1C807D99363EB6E2ABB41B3C26CAFB106518A5AD
Authority key identifier: 09:3C:C6:7E:30:F5:3E:12:96:48:1C:08:40:45:BA:2B:68:DB:F7:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/093CC67E30F53E1296481C084045BA2B68DBF7F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/1/323830343a373963303a3a2f33322d3332203d3e20323731333235.roa
Signing time:             Thu 27 Jul 2023 13:54:40 +0000
ROA not before:           Thu 27 Jul 2023 13:49:40 +0000
ROA not after:            Thu 25 Jul 2024 13:54:40 +0000
asID:                     271325
IP address blocks:        2804:79c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:80:7d:99:36:3e:b6:e2:ab:b4:1b:3c:26:ca:fb:10:65:18:a5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093CC67E30F53E1296481C084045BA2B68DBF7F0
        Validity
            Not Before: Jul 27 13:49:40 2023 GMT
            Not After : Jul 25 13:54:40 2024 GMT
        Subject: CN=36E1C1469EF16315C41F9793C55F734D92F80552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:3c:70:87:9f:e8:49:70:e6:08:20:65:9d:
                    52:91:d0:38:68:c2:13:dc:8f:0c:5b:13:4c:31:c8:
                    8d:4d:db:d5:20:e0:3b:b9:fa:c6:cf:7e:90:ec:ac:
                    0b:c9:1b:fc:1d:db:1e:94:ea:c9:0f:72:78:eb:4c:
                    d6:54:db:ec:4a:cc:80:80:94:36:81:eb:d0:9f:ee:
                    e4:17:71:a9:84:4a:a0:01:e6:02:a7:ae:32:67:da:
                    27:3f:a1:64:68:26:e5:34:8c:ec:3c:cf:fa:49:65:
                    de:c8:32:d8:0a:39:54:37:32:54:5f:ea:a6:ff:30:
                    78:dd:8f:e7:7b:57:c0:74:ce:f3:b8:26:5c:82:c7:
                    2b:4c:d1:8f:4e:fe:60:2b:82:73:15:d1:5a:39:36:
                    1e:2f:3e:e2:52:f4:77:3c:59:52:ef:73:46:ed:35:
                    d2:df:a7:26:f9:e2:c2:1d:d6:69:e2:52:9c:25:97:
                    48:51:9a:72:89:a9:1c:80:a6:29:55:15:02:52:47:
                    57:49:a8:d7:2c:6a:4d:09:25:43:d0:2c:8b:f0:fc:
                    3a:3d:b0:53:70:22:da:c6:d7:f8:c2:9f:42:5f:08:
                    24:e6:30:19:d3:e5:06:04:12:07:11:d5:28:a2:37:
                    1d:f0:73:a1:79:68:ad:c9:fa:19:2b:56:79:f9:64:
                    7e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E1:C1:46:9E:F1:63:15:C4:1F:97:93:C5:5F:73:4D:92:F8:05:52
            X509v3 Authority Key Identifier:
                keyid:09:3C:C6:7E:30:F5:3E:12:96:48:1C:08:40:45:BA:2B:68:DB:F7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/1/093CC67E30F53E1296481C084045BA2B68DBF7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/093CC67E30F53E1296481C084045BA2B68DBF7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/1/323830343a373963303a3a2f33322d3332203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:16:c5:42:32:ae:74:9f:b0:b8:ca:79:0f:93:f3:41:f8:63:
         00:94:2f:5f:f5:7e:df:80:87:cc:a4:24:3c:53:f1:b5:e9:6f:
         dd:5a:d5:13:ac:be:19:32:6a:e3:50:39:62:8a:ad:f7:54:ee:
         80:88:8a:2b:06:60:39:d4:e9:b6:df:99:e2:31:f8:91:bb:68:
         10:fb:83:df:75:e6:83:bf:ff:48:57:16:3a:ad:03:38:68:bd:
         0c:4f:bf:16:16:93:f4:81:29:12:10:4e:78:ef:48:6c:07:2b:
         91:b2:9c:7f:c7:7e:bb:eb:00:14:53:14:b0:90:94:5d:e3:a8:
         55:f4:15:3e:3b:6f:e4:b9:ad:8c:19:e7:a8:77:04:7f:2b:03:
         f4:ab:72:53:85:6c:b5:4c:17:5f:6c:60:bd:fd:42:a4:67:a7:
         62:16:d5:ac:37:d3:9d:13:13:d3:08:34:a7:23:01:da:c9:35:
         c9:07:cf:a8:9e:f8:2e:db:c5:20:c5:0e:5e:e4:46:8b:f7:48:
         63:4e:b5:17:4d:51:c3:34:76:16:0f:55:27:e9:bc:e8:4a:d9:
         af:f7:9d:d4:10:22:f7:26:f4:95:05:3f:30:4e:17:a7:e3:f8:
         5d:9a:b6:53:20:67:eb:ec:69:f3:4c:d4:b0:7e:b3:11:25:19:
         f8:ef:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----