Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a383030303a3a2f33342d3334203d3e20323634393534.roa
File:                     323830343a333037633a383030303a3a2f33342d3334203d3e20323634393534.roa (raw, json)
Hash identifier:          UMRd4inYRMHH1ufRjNGhZmhSU1yTG/OukCtEXAyyDfg=
Subject key identifier:   9A:29:12:C5:30:F0:D9:64:83:C3:0D:58:7D:AE:D3:06:B4:34:D0:8D
Certificate issuer:       /CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
Certificate serial:       15101C46CF15971CB417DC438AB7FBFD4CEF936A
Authority key identifier: 9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a383030303a3a2f33342d3334203d3e20323634393534.roa
Signing time:             Tue 26 Sep 2023 20:01:49 +0000
ROA not before:           Tue 26 Sep 2023 19:56:49 +0000
ROA not after:            Tue 24 Sep 2024 20:01:49 +0000
asID:                     264954
IP address blocks:        2804:307c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:10:1c:46:cf:15:97:1c:b4:17:dc:43:8a:b7:fb:fd:4c:ef:93:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
        Validity
            Not Before: Sep 26 19:56:49 2023 GMT
            Not After : Sep 24 20:01:49 2024 GMT
        Subject: CN=9A2912C530F0D96483C30D587DAED306B434D08D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:4a:99:56:00:ea:43:d6:91:df:6e:bf:15:
                    48:54:c4:a9:19:e8:a1:24:e7:f9:c8:56:c3:76:40:
                    f0:ab:76:f0:42:41:71:d1:0c:48:f0:f3:0a:6f:8e:
                    fc:e7:49:0a:db:1f:f2:7b:df:28:57:15:c0:0e:69:
                    18:00:b5:96:8b:ca:6b:d0:f6:a6:10:7e:bc:95:6f:
                    00:e5:f7:f5:3b:a0:72:a6:bf:10:86:8f:24:ce:de:
                    0e:1c:c8:9f:b6:5c:2e:a4:c9:90:19:c8:99:39:6b:
                    49:a3:27:37:23:64:f5:2d:88:da:39:c4:95:b6:99:
                    eb:9e:39:2e:e0:af:d5:60:74:a0:34:ea:ee:17:5c:
                    a1:d7:5a:9e:0b:3e:94:89:ef:05:16:5b:44:03:67:
                    47:c5:a0:ef:09:99:78:ef:9d:2e:23:25:7e:71:e4:
                    c6:d2:57:63:38:f2:4d:82:3f:64:5c:83:14:0d:b7:
                    c3:2f:d5:93:e8:82:0e:db:4d:51:27:0e:40:b2:73:
                    53:35:22:74:d3:f3:0e:88:84:72:c9:99:e5:e2:17:
                    6a:dc:84:19:d6:2a:d1:f9:6a:97:95:87:43:d4:4b:
                    f8:cd:71:73:9e:33:00:be:ff:b3:fe:36:14:7f:c0:
                    ad:8e:9d:aa:72:36:91:c4:77:ed:f1:1a:f8:f0:b4:
                    bb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:29:12:C5:30:F0:D9:64:83:C3:0D:58:7D:AE:D3:06:B4:34:D0:8D
            X509v3 Authority Key Identifier:
                keyid:9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a383030303a3a2f33342d3334203d3e20323634393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:307c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         56:a6:b8:9d:bf:8e:79:4d:04:ee:25:2e:8b:75:dc:39:72:dd:
         fe:aa:cf:e5:0f:2b:15:54:dd:41:ee:38:2a:ce:97:d5:ba:bb:
         d5:af:b3:3d:16:38:1c:c9:b7:a4:12:b8:71:f7:33:0c:2e:f7:
         64:4e:32:4d:e9:45:d0:d0:d4:e3:ae:b1:36:40:9f:69:c7:64:
         7a:d3:de:20:4e:df:1b:6c:15:ae:0c:8c:87:65:99:61:51:93:
         b1:6a:14:52:11:1b:c2:46:cc:7a:86:75:02:ee:a2:03:13:91:
         d7:b2:f7:3c:4f:b5:7f:e5:4a:40:56:9f:f7:41:de:95:9e:8c:
         6e:19:f1:90:34:c6:5d:55:0a:df:24:17:5c:29:53:75:62:4e:
         7d:ff:af:7d:7c:a5:53:f6:a1:aa:5a:52:3e:bf:2a:e4:79:1d:
         3c:c2:1c:74:50:41:17:06:4a:77:b2:60:36:50:b7:f9:61:e5:
         57:2a:3d:91:ad:8b:75:40:43:ef:cd:23:e6:d6:89:e8:35:85:
         a5:49:33:01:85:a1:07:d7:c2:13:f0:29:b9:76:15:f2:a9:e6:
         2d:fe:eb:f7:d2:65:ba:8c:e8:53:e6:71:a8:2e:ee:47:ee:ea:
         80:a1:69:6f:38:13:eb:c3:70:71:86:b1:12:69:60:7b:47:69:
         82:18:5f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----