Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a34353a3a2f34382d3438203d3e20323633303733.roa
File:                     323830343a3935343a34353a3a2f34382d3438203d3e20323633303733.roa (raw, json)
Hash identifier:          BFrNsZgCRJi1hy5xzRDvClBL+pymTiAf/vZdaSsHH+8=
Subject key identifier:   CA:43:1A:CA:5F:4D:B8:F6:E7:53:09:FE:36:72:5C:0B:71:8E:B0:B0
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       6BDC8459010F3853EFAB912679C987F605FB71D4
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a34353a3a2f34382d3438203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:10 +0000
ROA not before:           Fri 22 Dec 2023 20:20:10 +0000
ROA not after:            Fri 20 Dec 2024 20:25:10 +0000
asID:                     263073
IP address blocks:        2804:954:45::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:dc:84:59:01:0f:38:53:ef:ab:91:26:79:c9:87:f6:05:fb:71:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:10 2023 GMT
            Not After : Dec 20 20:25:10 2024 GMT
        Subject: CN=CA431ACA5F4DB8F6E75309FE36725C0B718EB0B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:35:aa:10:d6:a7:4c:79:6a:d1:dc:69:3e:
                    6e:f1:a2:8c:f6:91:36:c2:45:44:94:3d:0b:5c:44:
                    eb:30:b2:54:42:54:8d:76:d1:9b:c2:f6:9c:87:81:
                    ed:62:fa:48:0e:67:3a:29:cd:5e:5f:04:87:f4:bf:
                    6a:cf:5a:bf:0c:d2:5f:fa:d8:41:9a:b7:b9:f7:93:
                    f8:82:9d:d9:22:54:07:0f:54:e0:b1:79:4b:15:85:
                    12:79:d1:77:c3:86:4a:94:bc:a6:47:f1:a9:c5:b0:
                    c6:ea:00:6b:9b:7d:b8:83:72:bd:b2:6a:ac:0b:21:
                    0b:87:37:91:90:dd:64:0e:9d:9c:23:87:ea:15:9d:
                    51:d9:14:b3:fe:68:1a:e4:69:21:b7:0e:5f:20:5c:
                    5f:4f:19:89:ec:4f:b9:19:f3:7f:b0:7d:e9:bb:5e:
                    2b:c2:36:f5:f5:39:3c:85:d0:16:12:3f:a3:dd:24:
                    85:ba:85:3e:d6:94:5f:9f:2e:3e:bc:7a:40:48:08:
                    f4:1f:7f:7c:3d:1b:df:80:79:8d:e0:8c:bc:ad:7f:
                    15:45:7d:c1:af:4e:07:ab:4c:1c:c4:26:1d:f1:3e:
                    f0:fd:3c:99:07:9c:41:f7:3e:26:15:9f:bd:3c:5a:
                    e0:64:82:6a:cd:32:e5:8b:85:35:57:b4:6d:15:f3:
                    a9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:43:1A:CA:5F:4D:B8:F6:E7:53:09:FE:36:72:5C:0B:71:8E:B0:B0
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a34353a3a2f34382d3438203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:45::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:00:c9:02:a4:1f:87:90:6c:e5:f5:49:cb:62:ac:01:56:b9:
         f7:9e:21:9f:e7:a6:47:18:61:01:34:d8:4c:50:3a:e6:91:82:
         59:a5:74:68:4a:d0:10:35:60:08:ff:8f:b5:95:72:98:4b:fb:
         fa:d5:28:a3:ad:01:c4:74:55:68:2b:ee:6c:ec:98:11:2c:d1:
         09:f1:46:ed:c9:fe:28:71:99:7e:a0:37:41:36:e7:eb:12:b7:
         4e:ca:bd:2f:04:69:3d:6d:70:18:fa:f1:fb:ec:2f:d9:f3:fe:
         ac:c4:15:e7:ed:cd:6e:d6:5a:1b:23:3a:6b:e7:ce:db:2d:f0:
         a7:0a:10:b3:55:0f:db:15:aa:b4:ce:08:2a:6f:1b:dc:11:f6:
         b9:2f:10:65:1f:5b:7b:20:10:67:ae:05:ba:89:37:27:33:f4:
         b0:70:26:4f:22:60:86:89:49:87:19:a2:4d:9d:8c:6f:3b:ec:
         de:ea:61:8c:b2:f6:ee:f6:d6:4d:f6:ba:9f:55:02:af:22:f3:
         0f:e2:95:2a:ea:af:e8:8d:9d:bd:e9:e5:b1:83:e6:86:31:92:
         2b:12:a7:1e:1c:98:15:32:04:4a:23:ed:f8:ea:d0:8e:32:24:
         67:27:9b:e5:48:0d:ba:c6:57:86:26:5c:f1:b3:e9:e0:29:33:
         08:2e:99:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----