Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/323830343a356632343a3a2f33322d3332203d3e20323639303739.roa
File:                     323830343a356632343a3a2f33322d3332203d3e20323639303739.roa (raw, json)
Hash identifier:          h/u6SH73K/UAon6ZjClXOW0bcOSlbr30ePCfU559YI0=
Subject key identifier:   4D:FB:44:9D:22:7E:A4:9F:77:1E:29:18:C7:3C:CF:C4:CD:AA:D9:43
Certificate issuer:       /CN=91D97236B10E4FBEDE123CA07874969CB8E67A83
Certificate serial:       6A2060A16974A20EAD0FDB46D2049791C997BB59
Authority key identifier: 91:D9:72:36:B1:0E:4F:BE:DE:12:3C:A0:78:74:96:9C:B8:E6:7A:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91D97236B10E4FBEDE123CA07874969CB8E67A83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/323830343a356632343a3a2f33322d3332203d3e20323639303739.roa
Signing time:             Tue 26 Sep 2023 18:56:57 +0000
ROA not before:           Tue 26 Sep 2023 18:51:57 +0000
ROA not after:            Tue 24 Sep 2024 18:56:57 +0000
asID:                     269079
IP address blocks:        2804:5f24::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:20:60:a1:69:74:a2:0e:ad:0f:db:46:d2:04:97:91:c9:97:bb:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D97236B10E4FBEDE123CA07874969CB8E67A83
        Validity
            Not Before: Sep 26 18:51:57 2023 GMT
            Not After : Sep 24 18:56:57 2024 GMT
        Subject: CN=4DFB449D227EA49F771E2918C73CCFC4CDAAD943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:b6:92:8b:b6:01:77:75:cb:d4:94:c0:6f:
                    53:ad:17:aa:3a:a9:c4:30:7c:60:37:91:97:d5:7e:
                    0b:84:20:9e:da:74:b1:88:0b:90:22:6b:6b:67:8d:
                    30:50:2c:e3:45:0a:7d:70:ed:3d:12:48:16:69:d4:
                    cc:c3:47:d4:8d:36:2b:bc:f6:22:5c:59:86:cf:07:
                    8b:61:7c:48:ce:9f:92:eb:60:d2:79:6f:cc:12:ad:
                    cf:d5:3a:dd:bd:82:7d:de:29:4d:c3:ee:bd:09:8a:
                    a8:47:20:4f:41:8d:ce:48:06:aa:7a:5f:a4:46:b2:
                    6f:fe:de:2f:40:66:66:52:66:a1:56:5d:d7:2b:ef:
                    90:a2:03:ce:f2:98:1c:35:f2:0c:c3:4a:5a:56:64:
                    af:d6:c7:49:9e:8d:b9:90:8b:69:ed:d9:16:dc:7c:
                    12:fe:c6:3f:06:3a:3e:05:29:58:49:d7:f2:c9:aa:
                    87:d5:66:82:a2:a9:16:7d:77:9e:6d:1b:f2:97:7d:
                    00:97:7c:bc:19:6d:8e:bd:ac:b0:df:bf:34:f6:b1:
                    06:e2:39:90:4c:66:7a:aa:30:c2:84:91:eb:94:9a:
                    5d:dd:1e:43:89:fc:0e:82:70:fa:39:b3:8d:f0:cf:
                    d2:5d:de:9e:69:fc:ce:74:27:f6:42:b9:d8:2a:36:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FB:44:9D:22:7E:A4:9F:77:1E:29:18:C7:3C:CF:C4:CD:AA:D9:43
            X509v3 Authority Key Identifier:
                keyid:91:D9:72:36:B1:0E:4F:BE:DE:12:3C:A0:78:74:96:9C:B8:E6:7A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/91D97236B10E4FBEDE123CA07874969CB8E67A83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91D97236B10E4FBEDE123CA07874969CB8E67A83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/323830343a356632343a3a2f33322d3332203d3e20323639303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f24::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:69:22:e7:3e:54:c5:0c:c4:4e:6f:67:cf:d5:9b:d4:5e:73:
         90:2d:72:c4:a6:c1:4a:06:37:d7:58:d8:9b:b7:6c:f5:65:c9:
         53:d6:4d:93:d4:75:fe:e2:1a:9f:44:40:07:47:70:6e:75:f1:
         19:ce:ff:7f:01:e6:c4:f8:e0:4b:ac:04:ce:2c:79:d8:fb:25:
         b2:0e:7e:34:e7:d0:e9:3d:77:d6:7c:67:8c:25:1c:8d:56:7e:
         4c:49:04:f5:48:e2:d0:bc:d9:8e:f9:8f:02:ce:a3:87:c1:24:
         19:0f:19:1f:df:78:33:69:f5:02:87:32:e7:83:a8:2d:7a:23:
         75:4c:1c:f1:dc:bb:f9:34:2c:cb:38:00:45:20:d6:f6:48:18:
         e0:fb:ca:de:c9:3a:d1:11:67:b1:95:b2:bd:31:31:39:6a:35:
         d3:87:46:6f:19:2a:6b:5a:d2:6e:57:8d:06:90:ee:4a:e7:44:
         7a:d2:24:f5:c1:c0:ed:b7:4f:8f:f1:dc:7a:65:ac:4d:8b:a5:
         68:66:0e:f6:62:55:05:48:12:72:21:90:3f:46:68:11:c9:c0:
         e9:98:dd:72:4f:29:c2:e2:b6:72:c0:ef:0a:b2:7d:87:43:f8:
         ce:d8:35:3c:ec:9f:d2:08:83:b7:70:c2:2a:c9:54:f5:b9:63:
         41:07:d8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----