Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/323830343a323736633a3a2f33322d3332203d3e20323633393030.roa
File:                     323830343a323736633a3a2f33322d3332203d3e20323633393030.roa (raw, json)
Hash identifier:          /ZFHf+ytFLCj0MV5KOnvH1vN6QO8eBGT9inlEj1gS30=
Subject key identifier:   53:56:33:F6:AF:2C:B8:28:B8:E8:25:A6:95:9A:1B:5E:81:68:D7:9A
Certificate issuer:       /CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
Certificate serial:       0E1DE435912768CE5574D1C65FA1AECCFE52DE07
Authority key identifier: E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/323830343a323736633a3a2f33322d3332203d3e20323633393030.roa
Signing time:             Wed 20 Dec 2023 14:06:13 +0000
ROA not before:           Wed 20 Dec 2023 14:01:13 +0000
ROA not after:            Wed 18 Dec 2024 14:06:13 +0000
asID:                     263900
IP address blocks:        2804:276c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1d:e4:35:91:27:68:ce:55:74:d1:c6:5f:a1:ae:cc:fe:52:de:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
        Validity
            Not Before: Dec 20 14:01:13 2023 GMT
            Not After : Dec 18 14:06:13 2024 GMT
        Subject: CN=535633F6AF2CB828B8E825A6959A1B5E8168D79A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:bb:3b:a7:c0:36:0f:59:dd:7f:c5:a8:65:
                    14:d1:c1:1f:c4:44:d0:04:73:4e:41:e7:8a:7b:c1:
                    b4:7a:76:9e:0f:2d:18:a9:48:ec:c7:29:d7:dc:cd:
                    a5:75:d6:20:37:ad:1c:79:59:c0:da:55:aa:f6:a6:
                    ee:87:55:ba:de:b3:d2:f3:d6:69:85:dd:f0:44:c1:
                    5f:c3:de:22:43:c2:2d:18:8e:5d:27:6f:fc:73:25:
                    02:9e:60:dd:38:d4:45:71:0b:9d:46:ad:2b:62:52:
                    05:05:70:cc:2a:d4:b1:5b:bc:ea:c7:c3:ca:d6:57:
                    cd:38:59:8a:01:a1:ac:b1:d3:ac:eb:39:3e:9b:f7:
                    a4:b0:e1:b2:fd:e0:ab:9c:34:b4:3b:42:9d:a0:f3:
                    df:b3:76:75:35:8a:7f:c3:2e:7f:a1:37:be:a0:9a:
                    00:f3:62:9d:93:07:44:82:ac:e2:b0:a7:0d:b0:57:
                    07:55:5d:66:4f:2e:b6:14:0f:3c:48:9c:ee:87:1a:
                    a6:7d:dc:6d:a1:9c:b6:71:b7:d3:44:43:62:55:df:
                    27:60:ba:a5:f6:a6:90:5b:ed:66:02:6e:db:2a:45:
                    ae:90:41:53:c4:2a:db:e4:d1:79:ee:c1:f9:34:3c:
                    77:64:c7:47:bd:18:60:d1:ff:59:ec:dd:a2:c0:0a:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:56:33:F6:AF:2C:B8:28:B8:E8:25:A6:95:9A:1B:5E:81:68:D7:9A
            X509v3 Authority Key Identifier:
                keyid:E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/E09AEFBAB9FAA20F5629757DA668E610219ED98F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/323830343a323736633a3a2f33322d3332203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:276c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:7d:89:11:a5:ea:d4:87:d4:29:38:14:b3:ea:09:eb:fa:bb:
         a6:1a:06:60:6c:15:0e:ab:f7:dc:6f:4c:5f:29:19:32:4f:81:
         25:24:77:82:24:26:52:75:92:c5:a1:e3:b8:93:f4:c8:7d:ff:
         49:ff:9b:68:f8:ae:f7:22:6b:60:d5:34:cc:eb:b3:1c:a3:48:
         a5:2c:22:9a:38:66:d3:54:c1:30:8c:ee:17:e4:f7:7c:09:9d:
         59:6b:83:93:41:d6:41:13:27:a2:60:17:2f:80:6d:49:72:50:
         c4:e3:f7:3e:37:73:3c:67:d5:ab:9a:96:81:f1:fa:8b:ec:30:
         1a:3a:9f:fc:4c:7e:c2:3f:10:8c:f5:d8:a6:29:73:20:7c:49:
         5d:30:54:cd:b2:e0:7e:ed:e8:e4:9d:90:dd:be:a5:9a:89:4d:
         a0:da:81:b9:06:54:7c:9d:e3:d7:aa:25:1e:b2:23:23:31:27:
         4f:27:78:b5:9f:a5:c9:22:da:f2:f8:a2:61:d6:d3:8d:61:c4:
         ad:7a:7d:0f:48:72:8c:f3:78:13:46:dc:6e:c7:ca:57:6c:c3:
         96:10:7e:19:d4:b5:31:8b:bb:0a:11:09:db:48:9c:32:74:d4:
         a6:fb:36:f1:f4:f4:e3:68:d5:55:f3:33:ad:46:4e:f8:b7:29:
         13:c6:4f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----