Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/323830343a336537633a3a2f33322d3438203d3e20323636353939.roa
File:                     323830343a336537633a3a2f33322d3438203d3e20323636353939.roa (raw, json)
Hash identifier:          wlP5GFa4B66ybcU7bFSkMlWhc3Bk7iZA/VD3tXkbOuA=
Subject key identifier:   6E:ED:3C:F3:0D:36:16:50:F1:5B:AE:93:4D:D5:EF:F0:96:CC:A3:07
Certificate issuer:       /CN=0DB41CB7646BE6A5416F1099EF03A767F8EB51C9
Certificate serial:       5FED531901C692D67D407E741F32D4489584006D
Authority key identifier: 0D:B4:1C:B7:64:6B:E6:A5:41:6F:10:99:EF:03:A7:67:F8:EB:51:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DB41CB7646BE6A5416F1099EF03A767F8EB51C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/323830343a336537633a3a2f33322d3438203d3e20323636353939.roa
Signing time:             Fri 26 Jan 2024 23:26:37 +0000
ROA not before:           Fri 26 Jan 2024 23:21:37 +0000
ROA not after:            Fri 24 Jan 2025 23:26:37 +0000
asID:                     266599
IP address blocks:        2804:3e7c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ed:53:19:01:c6:92:d6:7d:40:7e:74:1f:32:d4:48:95:84:00:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DB41CB7646BE6A5416F1099EF03A767F8EB51C9
        Validity
            Not Before: Jan 26 23:21:37 2024 GMT
            Not After : Jan 24 23:26:37 2025 GMT
        Subject: CN=6EED3CF30D361650F15BAE934DD5EFF096CCA307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c7:92:a9:66:c4:8b:b5:f5:c8:44:a1:ce:75:
                    2d:d7:1b:4d:7d:08:fa:03:0d:e4:c5:b4:69:32:3f:
                    be:21:36:81:57:28:2e:2b:66:c8:73:d4:13:cf:af:
                    20:7d:46:f4:7c:48:82:4e:31:17:68:95:ca:d6:62:
                    87:c4:d0:2f:53:95:85:67:08:f1:06:04:57:58:ce:
                    4a:5d:c4:20:c9:fd:bb:4a:44:e7:b9:68:77:8f:19:
                    3e:76:3b:c7:54:42:55:5e:e6:a8:e6:25:a4:60:01:
                    1e:3a:5a:53:b3:87:a0:a8:e2:c8:8a:3c:67:f7:52:
                    d8:66:d3:5e:75:f8:2a:0b:61:9b:99:3e:10:5b:6f:
                    6c:e8:a8:38:04:11:fb:e4:6c:c9:03:52:c8:4f:e7:
                    d5:7c:18:ce:e9:c1:99:cd:56:f7:9f:1a:81:89:60:
                    8a:13:26:6f:c1:4d:51:cb:3f:4f:61:de:02:bc:6c:
                    7b:de:2d:ca:97:df:10:ee:e6:83:1f:c8:b3:a6:bd:
                    f0:2d:92:70:46:f9:0e:0c:97:d9:06:6a:e0:05:bd:
                    6b:b6:5f:12:d0:bc:ac:17:e6:97:db:22:45:e4:9d:
                    76:a2:9d:56:88:0f:ce:31:9a:c0:6d:41:3d:7a:f2:
                    23:28:1a:e5:b2:12:98:2a:94:a9:16:b2:aa:5a:51:
                    60:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:ED:3C:F3:0D:36:16:50:F1:5B:AE:93:4D:D5:EF:F0:96:CC:A3:07
            X509v3 Authority Key Identifier:
                keyid:0D:B4:1C:B7:64:6B:E6:A5:41:6F:10:99:EF:03:A7:67:F8:EB:51:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/0DB41CB7646BE6A5416F1099EF03A767F8EB51C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DB41CB7646BE6A5416F1099EF03A767F8EB51C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/323830343a336537633a3a2f33322d3438203d3e20323636353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:b4:91:72:1b:a3:7c:a1:72:c4:fa:aa:23:fb:14:79:dd:
         b9:16:f3:c4:29:67:92:47:29:5a:c4:98:b7:04:cc:02:b0:27:
         f7:db:51:8d:57:b7:17:73:e6:02:33:3f:66:b9:74:a5:c7:cf:
         fe:14:df:05:40:a9:cd:81:51:7a:85:9f:8d:48:63:ba:e7:d4:
         0a:97:e8:f6:18:9d:94:ff:71:a7:a1:4e:2f:05:ba:7f:0b:f2:
         39:5b:90:f3:c0:0c:4d:c0:ef:a5:19:90:1e:8e:0e:07:f5:b0:
         c9:14:c4:e7:74:75:2a:dd:de:f1:4c:77:4c:fe:32:ce:86:90:
         bc:77:b5:df:92:47:d1:98:00:77:98:31:51:a0:cb:7c:39:8b:
         43:70:5a:6c:b5:1c:33:54:5d:ae:f0:42:fa:35:4f:4d:5f:06:
         f4:0b:94:93:1a:b1:40:ad:82:c1:ab:e2:21:eb:cb:aa:76:ed:
         19:9e:cd:c1:16:d4:4a:e7:1a:b2:2e:8a:1d:cd:bc:6f:1e:d3:
         ee:16:9f:92:48:e2:2b:17:f3:11:42:85:f3:cc:84:8e:72:a3:
         94:5f:bf:2c:44:55:30:c1:da:a3:e3:7f:69:21:9e:ac:79:6e:
         ad:c7:60:83:61:38:6c:21:bf:55:97:69:d7:d1:44:c6:06:ca:
         14:60:65:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----