Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a3a2f33332d3333203d3e203238313234.roa
File:                     323830343a326237383a3a2f33332d3333203d3e203238313234.roa (raw, json)
Hash identifier:          geBkbyU9dVjItYbFlnoNoBaKbaoSqehFz8TBy9pNOTU=
Subject key identifier:   D6:7E:0E:2A:E8:2B:E1:D1:54:F9:93:DD:C5:5C:A7:0A:88:25:DE:78
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       69C87F25E51D4C06565F5EE65CFD0095FF761276
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a3a2f33332d3333203d3e203238313234.roa
Signing time:             Thu 04 Jan 2024 21:00:01 +0000
ROA not before:           Thu 04 Jan 2024 20:55:01 +0000
ROA not after:            Thu 02 Jan 2025 21:00:01 +0000
asID:                     28124
IP address blocks:        2804:2b78::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c8:7f:25:e5:1d:4c:06:56:5f:5e:e6:5c:fd:00:95:ff:76:12:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Jan  4 20:55:01 2024 GMT
            Not After : Jan  2 21:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:e5:0b:bc:4d:5a:1e:41:50:03:0e:1c:a9:
                    fa:22:12:de:55:fb:24:0a:ea:82:19:d2:6a:72:0c:
                    93:30:bb:e0:21:2f:c8:1e:3c:a8:9f:3f:b4:12:73:
                    51:08:37:c0:9d:70:04:d5:7a:df:a2:15:8d:e3:8a:
                    13:09:18:9f:a3:ec:6a:4b:44:bd:d5:27:f8:db:d1:
                    6c:83:bb:c9:c9:71:c6:cd:00:c2:2a:9f:b0:70:50:
                    86:79:c1:f8:b2:f8:0a:40:06:3d:ba:b1:8d:9d:c0:
                    70:c8:c5:69:cb:9c:46:20:62:aa:4a:e3:75:8e:e9:
                    af:38:e3:e9:20:e9:ad:1c:83:aa:5a:bb:d9:87:61:
                    9d:b8:bf:3b:be:66:92:01:23:df:6c:d3:50:cc:73:
                    90:34:f4:c3:96:bf:50:74:e9:0d:8c:9f:ed:f6:88:
                    2e:97:29:47:16:12:f5:ee:af:aa:80:8a:65:c7:8f:
                    a2:94:ec:ea:5d:14:b2:aa:de:60:a4:95:21:8f:d7:
                    86:c1:ca:cb:fa:4e:5e:13:e9:81:96:b6:83:4c:b5:
                    ec:d7:16:15:4b:25:9c:6d:aa:c1:6d:0f:ec:9f:32:
                    b5:e0:96:01:b8:ac:fc:5c:d7:55:39:34:fd:da:70:
                    dd:da:66:18:b5:ce:cb:f4:34:38:78:07:7f:ac:56:
                    39:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7E:0E:2A:E8:2B:E1:D1:54:F9:93:DD:C5:5C:A7:0A:88:25:DE:78
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a3a2f33332d3333203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78::/33

    Signature Algorithm: sha256WithRSAEncryption
         c7:f0:94:5b:80:b1:22:a4:48:97:08:dc:5d:a5:aa:56:0b:51:
         08:87:86:7f:60:09:d8:8b:0f:9e:cd:fb:7f:a5:43:06:8d:8a:
         f1:33:cf:6e:b6:66:74:f7:8b:05:44:93:d0:98:76:84:6b:e9:
         03:65:ad:6a:02:81:46:61:f9:24:f5:2b:58:61:48:e3:b8:60:
         e6:b9:99:18:4e:54:36:ca:4a:f0:b1:0b:fd:88:88:8a:b8:1f:
         86:2f:0f:54:68:bf:13:cd:d1:31:95:2f:f5:81:2c:6e:f4:ec:
         04:5b:f5:5b:d8:88:13:ca:91:aa:6b:ab:0b:db:03:da:2f:a7:
         03:cc:b4:e3:61:6a:dd:eb:87:c9:4a:33:b5:3d:e8:89:51:50:
         26:dd:a5:f0:3a:60:9a:58:6a:55:c6:25:ca:2e:a6:4e:93:99:
         99:ad:91:8f:da:93:3a:68:e0:09:08:4a:df:17:0a:e4:02:c2:
         0f:5c:3d:ed:1f:f2:4c:26:0e:e1:4f:2a:e8:c5:a3:8a:37:09:
         fe:6b:d5:29:33:f8:8f:60:d9:f2:45:98:1d:2a:37:c1:bf:31:
         21:43:7f:36:de:3d:3f:67:1a:66:e4:e2:ff:2f:c8:d7:82:98:
         f2:f3:97:fc:17:d5:07:4b:ae:9b:23:d8:7a:66:60:e6:cf:03:
         a1:f0:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----