Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a383030333a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030333a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          qXlRvTKLho+mVIjjAN4KPMQlot+XqIgIuRbJu5s4wdE=
Subject key identifier:   A5:C3:68:7E:16:04:4B:88:83:1D:16:11:E1:B3:A7:47:12:E5:36:92
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       40C6F45EF3B6A1DC31F6D4E7F4C9574A9B72E5CC
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a383030333a3a2f34382d3438203d3e203532343638.roa
Signing time:             Wed 13 Dec 2023 03:00:00 +0000
ROA not before:           Wed 13 Dec 2023 02:55:00 +0000
ROA not after:            Wed 11 Dec 2024 03:00:00 +0000
asID:                     52468
IP address blocks:        2804:2b78:8003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c6:f4:5e:f3:b6:a1:dc:31:f6:d4:e7:f4:c9:57:4a:9b:72:e5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Dec 13 02:55:00 2023 GMT
            Not After : Dec 11 03:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:88:2a:da:91:64:6e:98:43:a8:b7:d5:6f:
                    4b:ba:59:ad:19:bf:0d:14:ec:a9:c4:62:3e:42:9f:
                    49:99:b8:40:68:e9:95:fc:8f:f5:d4:ea:89:24:ff:
                    a1:fc:48:3c:20:ff:c0:d4:f8:d3:0d:85:1e:89:7a:
                    83:6c:b5:26:2c:0a:eb:89:96:85:17:f5:58:6b:f1:
                    ac:cb:65:0f:10:39:5e:5e:75:f3:ee:4d:02:c4:96:
                    14:b5:87:2e:9f:3e:4d:54:27:6b:26:12:e0:64:5a:
                    1b:1d:03:40:02:de:86:d3:a2:f8:4a:99:e2:a3:08:
                    71:7d:61:1b:09:d0:1e:d0:f4:d9:f9:36:1d:26:30:
                    d0:d6:b1:5f:fd:67:e2:64:7d:44:de:be:13:db:75:
                    84:4f:93:bc:ef:fa:6e:14:a4:b4:f2:49:ed:bc:21:
                    e6:93:46:58:09:33:f5:eb:d0:60:05:09:dd:aa:ad:
                    90:68:c1:04:ef:13:1f:bc:6d:6d:a1:3a:1a:9d:72:
                    9d:a3:d9:91:a1:c7:48:b2:cc:46:3b:be:b8:6a:70:
                    38:7a:f6:d5:e7:4c:39:fd:b5:af:27:70:f0:e5:52:
                    4e:54:8a:b8:24:96:58:23:1c:c2:a4:12:64:66:03:
                    84:f3:bd:bb:2b:10:15:cf:ec:13:29:97:8a:ac:24:
                    20:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C3:68:7E:16:04:4B:88:83:1D:16:11:E1:B3:A7:47:12:E5:36:92
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a383030333a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8003::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:1b:7f:17:47:bc:a7:16:36:e3:06:63:fb:cb:d8:32:1b:04:
         01:5f:74:32:2f:48:67:c0:ae:de:dc:09:77:b3:26:4e:a0:05:
         78:90:8a:b0:d3:27:ac:b8:fa:77:84:82:41:bd:0e:c8:e2:fc:
         80:72:91:26:a2:86:c7:3d:1d:d8:a9:5d:21:52:fd:13:ca:be:
         89:94:d3:c3:72:83:27:3d:8c:b5:27:03:3b:b9:73:b9:d1:7c:
         ec:ff:bc:91:b5:33:da:01:85:80:24:2e:ee:df:44:87:22:6b:
         a3:8f:70:78:2c:52:41:b8:b5:9c:b9:ed:04:b9:fb:de:21:aa:
         f4:b6:c9:f1:48:59:79:0f:af:3f:74:0e:0c:84:46:3f:34:f8:
         d8:54:a7:02:02:73:7f:31:74:0f:19:2c:b1:b8:c5:d8:15:85:
         8c:fc:5c:7b:0c:92:af:43:fd:49:7c:79:36:da:ff:a1:62:91:
         a9:51:f7:c0:14:30:14:12:e7:11:b2:39:41:7d:88:d7:f4:0f:
         96:83:02:78:49:0b:56:c6:12:1b:b7:1a:14:be:5d:85:00:ed:
         e3:0e:9a:03:76:92:68:c9:ce:1e:a3:cc:2f:8a:d4:18:83:15:
         a6:0d:23:49:cb:66:38:e9:57:9e:87:12:b5:d4:f5:34:59:c5:
         f0:e2:77:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----