Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a383030323a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030323a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          Swv+czS0pa5D7iCsv5Dx65/5EtMfCW+xickv8JnHOSU=
Subject key identifier:   2E:8D:89:2C:F7:1E:7E:CB:19:FC:B6:15:DE:55:ED:F8:D2:0A:EB:3C
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       178688460E5A9738BD99DD0F69816A29B8ABF4E3
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a383030323a3a2f34382d3438203d3e203532343638.roa
Signing time:             Mon 13 Nov 2023 19:00:00 +0000
ROA not before:           Mon 13 Nov 2023 18:55:00 +0000
ROA not after:            Mon 11 Nov 2024 19:00:00 +0000
asID:                     52468
IP address blocks:        2804:2b78:8002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:86:88:46:0e:5a:97:38:bd:99:dd:0f:69:81:6a:29:b8:ab:f4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Nov 13 18:55:00 2023 GMT
            Not After : Nov 11 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:e0:4d:18:8b:21:71:61:08:e0:a7:36:36:
                    32:24:42:eb:b6:1f:15:a1:5f:b0:af:a4:7d:d8:77:
                    f5:80:da:ed:2f:3f:13:b8:cf:2e:73:e7:bd:f8:38:
                    27:bf:dc:e9:62:e8:c0:b1:f4:d8:26:55:b3:e9:77:
                    6d:59:4b:18:36:88:b5:03:9d:2e:c8:8e:d4:49:fa:
                    3b:82:10:d1:16:1c:6f:2c:bc:1e:b4:c9:d7:26:39:
                    58:b6:13:6b:55:5b:46:f2:b3:f3:7a:b0:d3:92:b6:
                    a2:3f:6e:16:53:59:4b:d5:b4:0f:a9:f9:3e:cb:51:
                    51:da:f8:24:f8:47:59:a7:80:3d:18:77:2e:73:96:
                    e9:86:ee:99:54:1a:3d:a1:b2:f6:b7:60:49:94:86:
                    34:e3:23:31:e5:25:40:cb:08:4a:6e:7c:f9:15:4b:
                    81:49:8a:2f:63:b4:36:49:93:22:26:95:d1:bd:0a:
                    53:ed:e5:9d:0c:c2:20:65:44:48:40:4f:ed:49:07:
                    fc:60:81:29:43:96:17:86:b8:8d:a0:d5:6e:27:64:
                    bd:f2:62:88:7d:ba:28:2f:d8:1a:6b:73:db:34:6d:
                    7d:11:88:bb:d8:df:65:a8:f5:5f:09:36:de:82:9f:
                    d0:59:9a:bb:2c:84:79:8f:5c:95:e5:af:9e:8f:0b:
                    6c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8D:89:2C:F7:1E:7E:CB:19:FC:B6:15:DE:55:ED:F8:D2:0A:EB:3C
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a383030323a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:8e:14:9f:75:7a:10:15:2c:a8:eb:ec:f9:21:1e:69:0d:61:
         88:6d:7c:fa:ab:fe:8b:90:db:ca:b5:f6:66:ca:25:79:9a:34:
         a2:c8:e0:f7:11:12:df:b8:ee:ef:b2:e0:a3:6a:35:e6:29:3f:
         2c:c8:f2:e9:fb:3e:9a:66:42:bd:7c:47:19:5d:46:83:01:94:
         52:3a:5e:e1:54:40:9f:32:f2:60:51:91:8e:19:35:af:32:fc:
         d1:e2:2b:ed:63:8f:69:23:66:18:80:cc:94:72:56:36:cd:87:
         57:48:4f:00:af:29:69:e3:30:82:f9:ad:dc:e9:8d:0f:af:76:
         1c:1b:f8:c5:de:e5:ee:98:22:3e:0a:e1:c3:9f:21:fa:5a:4f:
         7b:be:7b:c0:c3:2f:02:b9:1a:04:b7:98:10:02:19:ec:52:2b:
         aa:0f:86:ae:80:6d:84:83:72:bf:0f:87:9a:e3:ee:bf:05:57:
         f9:ce:ce:bd:35:1e:46:c3:dd:73:67:d9:57:99:e5:1d:4c:98:
         c5:09:46:18:15:b4:4f:9d:8c:d3:a1:73:94:75:df:a8:47:6c:
         cd:aa:9d:4f:02:c6:a9:9d:fe:7f:1e:39:a7:de:2c:d4:6b:2f:
         82:3b:81:d3:1b:57:0e:63:26:dd:cc:c2:47:b2:97:f5:41:89:
         14:05:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----