Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a383030353a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030353a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          v+QwNokRXnMFI7ys8ke/3PKKysSLuGNhXmkEWzUHJT4=
Subject key identifier:   8E:4D:E1:FD:A4:4C:91:02:B8:71:00:46:5B:A5:B8:F4:89:37:5D:85
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       7E90FF6BF888B2E9670428CB4F3684F80F1E3847
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a383030353a3a2f34382d3438203d3e203532343638.roa
Signing time:             Sat 25 Nov 2023 01:55:23 +0000
ROA not before:           Sat 25 Nov 2023 01:50:23 +0000
ROA not after:            Sat 23 Nov 2024 01:55:23 +0000
asID:                     52468
IP address blocks:        2804:2b78:8005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:90:ff:6b:f8:88:b2:e9:67:04:28:cb:4f:36:84:f8:0f:1e:38:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Nov 25 01:50:23 2023 GMT
            Not After : Nov 23 01:55:23 2024 GMT
        Subject: CN=3082010A0282010100E14A0A4B9D39E4CCFCB0D7839C681BCBE6D50464B0327EF5F715F60755C0AE211BF205917E02648E653F9571807841C7F11FDF526E72C0599D1BBA6A206A878E766C179940A858BC19CA0925BA8B1247FF73A2E0E7059B901F76094B1371C56C3ECC2A05DCFCD4D0DB84022DF5FAD6681D44E7F64B163FB4A1397CFEBC544F6CA601C6CCD722DD8A4CD71711A45452FB031BF8A68CDB7F6D462466547E351713869C6398EBD3F3BDBAFB5888239479498512731C569656D2FDFAEB72CC23116F96665CA35097F4622ED28E42C6A41469E61054C01BE6BDC057FE2CC8093DBB482F5D4807B6B1EDAAE3A3ECCFF14206115C53C64E33CE73B8278703FC4134B9E50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4a:0a:4b:9d:39:e4:cc:fc:b0:d7:83:9c:68:
                    1b:cb:e6:d5:04:64:b0:32:7e:f5:f7:15:f6:07:55:
                    c0:ae:21:1b:f2:05:91:7e:02:64:8e:65:3f:95:71:
                    80:78:41:c7:f1:1f:df:52:6e:72:c0:59:9d:1b:ba:
                    6a:20:6a:87:8e:76:6c:17:99:40:a8:58:bc:19:ca:
                    09:25:ba:8b:12:47:ff:73:a2:e0:e7:05:9b:90:1f:
                    76:09:4b:13:71:c5:6c:3e:cc:2a:05:dc:fc:d4:d0:
                    db:84:02:2d:f5:fa:d6:68:1d:44:e7:f6:4b:16:3f:
                    b4:a1:39:7c:fe:bc:54:4f:6c:a6:01:c6:cc:d7:22:
                    dd:8a:4c:d7:17:11:a4:54:52:fb:03:1b:f8:a6:8c:
                    db:7f:6d:46:24:66:54:7e:35:17:13:86:9c:63:98:
                    eb:d3:f3:bd:ba:fb:58:88:23:94:79:49:85:12:73:
                    1c:56:96:56:d2:fd:fa:eb:72:cc:23:11:6f:96:66:
                    5c:a3:50:97:f4:62:2e:d2:8e:42:c6:a4:14:69:e6:
                    10:54:c0:1b:e6:bd:c0:57:fe:2c:c8:09:3d:bb:48:
                    2f:5d:48:07:b6:b1:ed:aa:e3:a3:ec:cf:f1:42:06:
                    11:5c:53:c6:4e:33:ce:73:b8:27:87:03:fc:41:34:
                    b9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4D:E1:FD:A4:4C:91:02:B8:71:00:46:5B:A5:B8:F4:89:37:5D:85
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a383030353a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8005::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:d9:c5:33:d3:94:8c:cd:1c:31:dd:7c:70:cc:19:0f:a6:39:
         1f:3b:f9:40:c3:f9:4f:29:a2:ac:4e:7e:94:44:e2:0e:e8:db:
         4a:51:fd:bf:0d:cc:c8:49:75:25:61:2e:b0:ab:21:6f:b5:15:
         ab:81:30:92:9e:5f:a8:da:5f:bc:1f:2a:81:27:b7:a2:cf:2d:
         e9:27:13:2e:fa:bc:0d:86:e1:b9:61:d8:00:97:04:cd:2c:86:
         94:96:5a:84:eb:eb:75:9f:bc:0d:9e:c0:9b:2f:a9:09:dd:31:
         cc:9b:fa:42:59:62:31:94:46:97:71:19:1c:89:01:3d:82:df:
         5f:98:2e:b5:bb:5b:f4:bb:ad:29:5e:e2:a5:e9:83:b1:cc:7e:
         14:91:17:5f:ec:a9:18:30:8b:fc:89:a7:47:bb:2e:b6:ce:04:
         8b:ff:c9:e5:b5:cf:d6:d2:86:79:99:c5:8e:ba:15:a3:f3:a6:
         c8:50:16:28:d4:14:62:99:79:a5:c7:e6:fe:22:7b:26:2a:03:
         e1:1a:17:32:9a:f1:9c:05:91:20:a2:57:5f:43:fe:e8:29:84:
         0b:40:9c:ff:2b:ad:d6:e0:4f:05:28:d0:04:ff:d8:87:38:a2:
         c1:b7:57:26:fe:33:f3:b9:0e:1d:97:4e:3f:ce:84:42:fb:26:
         0e:f6:d6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----