Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/323830343a323736633a3a2f33342d3334203d3e20323633393030.roa
File:                     323830343a323736633a3a2f33342d3334203d3e20323633393030.roa (raw, json)
Hash identifier:          XpK1T6o+VV7DbwDIqQv/iHh8yVyCKI5mLTBU553MxKM=
Subject key identifier:   0D:19:BC:F0:F0:F8:08:19:39:3F:58:40:80:3D:8E:8D:DC:29:26:AA
Certificate issuer:       /CN=55268646F33053B8CA50C07462C0B20DA7420218
Certificate serial:       795FDA7D667E7B831D2738EBA1E80DD96A55764B
Authority key identifier: 55:26:86:46:F3:30:53:B8:CA:50:C0:74:62:C0:B2:0D:A7:42:02:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55268646F33053B8CA50C07462C0B20DA7420218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/323830343a323736633a3a2f33342d3334203d3e20323633393030.roa
Signing time:             Fri 26 Jan 2024 19:30:07 +0000
ROA not before:           Fri 26 Jan 2024 19:25:07 +0000
ROA not after:            Fri 24 Jan 2025 19:30:07 +0000
asID:                     263900
IP address blocks:        2804:276c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5f:da:7d:66:7e:7b:83:1d:27:38:eb:a1:e8:0d:d9:6a:55:76:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55268646F33053B8CA50C07462C0B20DA7420218
        Validity
            Not Before: Jan 26 19:25:07 2024 GMT
            Not After : Jan 24 19:30:07 2025 GMT
        Subject: CN=0D19BCF0F0F80819393F5840803D8E8DDC2926AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:ad:41:7f:38:f4:a3:be:10:c2:64:85:7b:
                    1e:12:c6:d0:39:74:e8:fc:e8:64:7a:7d:bf:54:0d:
                    8e:24:8c:ad:0a:13:a9:26:ab:29:ce:af:e8:71:7f:
                    a9:2b:17:6b:5c:97:00:db:c2:e7:7e:07:3f:4c:e6:
                    7d:03:d5:46:f5:45:e4:68:10:95:d1:b0:7d:04:b8:
                    16:b2:7c:55:4c:8e:73:40:1b:b8:84:4d:ac:6b:05:
                    9d:8e:e1:20:d6:99:27:a9:b4:74:f9:9d:d8:8b:fe:
                    39:7d:53:86:12:62:76:94:83:fc:94:82:62:49:26:
                    62:46:5b:93:54:90:e2:07:cf:88:0c:14:d6:ee:68:
                    8f:2b:4c:74:61:0a:0b:61:3e:80:f2:f8:b0:fa:46:
                    23:ae:81:23:9b:39:d4:fe:4f:9e:7b:a0:4a:09:6f:
                    31:e1:99:cb:fc:1f:ae:57:d4:c7:f9:65:92:20:6b:
                    50:89:68:8c:17:fc:fe:7b:25:c0:76:64:df:de:03:
                    1d:60:4c:11:ca:c3:f5:33:b2:b4:9a:34:ac:9d:e5:
                    18:7c:ae:4a:1e:97:ab:6a:73:4a:f2:18:40:6a:3d:
                    90:86:23:2c:18:fd:62:db:d7:67:50:17:fa:d6:1d:
                    68:ef:9b:c0:d8:88:5c:ba:02:04:7e:8d:69:ba:c7:
                    99:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:19:BC:F0:F0:F8:08:19:39:3F:58:40:80:3D:8E:8D:DC:29:26:AA
            X509v3 Authority Key Identifier:
                keyid:55:26:86:46:F3:30:53:B8:CA:50:C0:74:62:C0:B2:0D:A7:42:02:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/55268646F33053B8CA50C07462C0B20DA7420218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55268646F33053B8CA50C07462C0B20DA7420218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/323830343a323736633a3a2f33342d3334203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:276c::/34

    Signature Algorithm: sha256WithRSAEncryption
         62:c2:ca:99:b6:71:e5:0a:94:75:67:96:66:d3:28:0f:a9:96:
         ca:5a:ba:55:37:e7:ad:b9:bd:ea:60:da:1c:ca:74:62:09:15:
         1c:b4:01:be:24:b8:23:ab:38:34:c6:53:80:15:09:1e:fc:cc:
         d4:2f:bd:c8:0b:bb:02:34:47:ff:0b:0e:6c:52:77:22:53:29:
         d9:5b:48:94:d9:e0:13:29:9d:0f:a0:10:73:b2:17:97:c9:3d:
         79:cf:a2:7e:5c:65:8c:12:b6:11:8d:70:a0:85:d9:2f:6f:83:
         b8:b0:84:e1:8f:bf:98:ae:af:e8:88:b2:b9:0b:64:eb:6a:bc:
         37:a3:86:16:11:5b:5a:89:21:e9:e2:d7:af:f2:46:b9:97:3e:
         df:88:17:78:50:d3:60:f8:cf:fb:27:ed:22:75:87:dc:10:e8:
         be:7a:db:af:09:c3:4a:16:c3:d9:be:cb:1e:29:5a:1d:db:3f:
         15:85:f8:2f:93:43:82:45:eb:f7:db:a0:7c:36:14:5a:61:ac:
         68:dc:b8:92:a1:4d:39:86:9b:2b:fa:2d:db:1c:cb:1c:ad:ec:
         e8:86:cd:45:3f:d5:61:5e:fe:a5:d3:5b:d9:ea:2c:bd:94:75:
         4f:4e:03:31:ea:73:d1:6a:5a:9a:6f:a4:12:18:c1:a8:27:47:
         c0:30:bc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----