Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a3437303a3a2f33322d3332203d3e203533313038.roa
File:                     323830343a3437303a3a2f33322d3332203d3e203533313038.roa (raw, json)
Hash identifier:          hLSLZnToOPUZjEo0M5/v89k8E7kqcSHVZrLR/dCEgq8=
Subject key identifier:   71:ED:A2:05:14:2B:BD:69:2E:C1:D4:A8:3C:76:BB:DD:D0:45:76:07
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       46D525AAB73BAC21BEF34AB8ED255D5A7F0F2A60
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a3437303a3a2f33322d3332203d3e203533313038.roa
Signing time:             Thu 04 Jan 2024 21:00:00 +0000
ROA not before:           Thu 04 Jan 2024 20:55:00 +0000
ROA not after:            Thu 02 Jan 2025 21:00:00 +0000
asID:                     53108
IP address blocks:        2804:470::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d5:25:aa:b7:3b:ac:21:be:f3:4a:b8:ed:25:5d:5a:7f:0f:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Jan  4 20:55:00 2024 GMT
            Not After : Jan  2 21:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3d:50:3c:0e:0e:e0:e0:ef:f4:3d:03:39:92:
                    ca:d8:b7:ab:35:41:34:ef:cf:71:2f:e6:29:6f:ef:
                    15:ef:da:fc:ad:60:ba:4c:40:6b:3d:1b:c8:7c:81:
                    58:44:37:1d:c5:42:65:d1:1a:a3:7b:4f:53:d0:a8:
                    ba:62:70:77:95:73:33:c2:a2:fe:6e:0e:b9:30:42:
                    11:4c:2e:7f:02:e7:ea:9d:ce:a3:9b:78:18:c0:50:
                    f8:37:e1:fb:6f:85:73:79:f9:2d:de:7f:da:84:7a:
                    19:f7:0f:be:53:cb:06:75:eb:f0:19:8e:81:4c:6a:
                    64:c0:f2:7f:8e:d6:9c:7e:0a:ef:52:fb:88:ac:2a:
                    26:26:e8:9b:54:bb:ae:bc:cd:0c:2b:3d:a5:a8:89:
                    ca:19:df:ec:19:7d:97:7b:03:67:77:cf:bd:eb:e6:
                    fa:f3:14:74:df:82:af:16:21:5e:81:42:b5:84:2e:
                    f4:bd:fa:0e:d4:19:0c:40:1a:40:48:3c:e8:d0:76:
                    4f:5a:e4:7b:8e:c5:cc:06:e4:52:9e:02:c2:c1:56:
                    ba:ac:a8:e6:21:fa:e0:d8:de:a7:1f:5d:28:5f:cd:
                    0b:f4:6c:c4:e4:e7:8c:42:73:10:29:f5:55:43:95:
                    d5:06:f9:33:33:54:10:02:de:59:24:1a:f6:90:d9:
                    14:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:ED:A2:05:14:2B:BD:69:2E:C1:D4:A8:3C:76:BB:DD:D0:45:76:07
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a3437303a3a2f33322d3332203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:470::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:4e:96:db:14:34:7d:23:2d:90:ba:8c:25:47:78:c1:b0:b2:
         e2:b1:e8:ca:b6:4b:01:b7:59:99:e0:6c:06:3f:1c:ff:db:7f:
         7a:0c:4c:00:f7:4f:3f:cf:3c:3f:76:ad:9b:c9:43:5c:77:ba:
         f6:05:e5:10:b3:a7:41:a8:d9:26:35:9a:e4:be:c1:d7:60:80:
         e0:2c:be:41:f3:da:2d:d4:69:d2:5e:bc:b1:40:89:52:31:4d:
         92:85:d5:e0:f3:4a:98:6c:6b:20:dc:cb:52:2e:6e:74:1f:e9:
         0a:e4:8c:75:ae:dd:3c:94:fa:58:10:6b:55:79:b8:c1:b0:5d:
         11:90:d0:44:fe:f1:65:a8:af:96:8c:0a:17:b2:18:72:f8:2c:
         fb:ac:f4:8e:08:1b:f8:8e:1c:e9:e8:3d:d4:ad:c0:79:92:53:
         3b:c6:60:ad:1e:7c:1d:53:45:b1:13:d3:d8:2a:57:58:7f:35:
         cd:c6:f7:73:84:9a:1e:0c:8f:50:0b:8f:5c:5f:4f:64:e8:19:
         bb:df:56:6c:a9:c8:00:a2:5f:99:56:41:0a:83:de:b1:75:5b:
         c7:d0:03:98:8d:aa:74:74:1a:23:a2:0a:4a:e3:ec:f4:a1:b3:
         1d:b2:d3:17:b2:e2:1a:96:2e:ec:d5:fd:f2:10:9f:ff:23:96:
         38:db:36:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----