Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a3a2f33322d313238203d3e20323634393534.roa
File:                     323830343a333037633a3a2f33322d313238203d3e20323634393534.roa (raw, json)
Hash identifier:          GiqzqjCoYhwN6fsSYgWqXb61V7fSUPofMhc0Q+CPuNQ=
Subject key identifier:   84:65:D7:FB:8A:9B:03:99:C1:F1:11:A4:9F:B3:97:EB:72:35:22:6F
Certificate issuer:       /CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
Certificate serial:       3749088A854A30290EE37A505B4CE05AA363F86F
Authority key identifier: 9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a3a2f33322d313238203d3e20323634393534.roa
Signing time:             Mon 16 Oct 2023 19:01:15 +0000
ROA not before:           Mon 16 Oct 2023 18:56:15 +0000
ROA not after:            Mon 14 Oct 2024 19:01:15 +0000
asID:                     264954
IP address blocks:        2804:307c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:49:08:8a:85:4a:30:29:0e:e3:7a:50:5b:4c:e0:5a:a3:63:f8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
        Validity
            Not Before: Oct 16 18:56:15 2023 GMT
            Not After : Oct 14 19:01:15 2024 GMT
        Subject: CN=8465D7FB8A9B0399C1F111A49FB397EB7235226F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:38:fb:5e:97:5b:2c:5e:6c:1c:c8:2f:c5:bf:
                    93:5b:ef:02:12:cb:9f:04:89:3e:aa:39:32:aa:d9:
                    75:9e:78:63:fd:56:bb:b3:9e:25:44:46:0b:32:e9:
                    38:bd:13:e8:0d:29:d0:cb:4f:be:4d:d1:86:df:b7:
                    1f:91:e0:aa:4d:80:7e:5d:30:12:14:4c:8a:25:ec:
                    d0:14:37:df:42:5a:fe:b2:00:6d:9b:b2:2a:f3:c6:
                    05:89:35:17:80:71:a3:61:b7:42:24:1b:64:c2:e1:
                    bd:0f:d0:61:2a:54:29:fc:2c:3c:2a:c2:a4:fe:29:
                    5b:83:1b:6f:8d:1b:c9:2e:47:4a:b1:49:db:9c:97:
                    39:33:93:28:72:72:72:9d:f7:b3:af:98:da:d5:d2:
                    2e:98:ab:f6:97:e1:ac:68:31:94:93:78:dd:e5:07:
                    4e:0b:25:21:61:44:2d:f0:82:c5:61:1d:e9:d3:e1:
                    0f:e2:fb:07:2f:e5:3f:f8:bc:08:a1:fe:55:a4:eb:
                    64:43:64:b2:fd:44:69:b3:3b:48:1d:38:b4:bb:b8:
                    e5:77:dd:1c:b0:63:fd:38:72:1d:ce:06:a9:a5:62:
                    38:8a:f8:24:8f:3e:46:bb:93:b9:da:be:94:2f:e9:
                    68:b1:b6:dc:39:29:09:db:44:cc:a1:43:49:9a:67:
                    75:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:65:D7:FB:8A:9B:03:99:C1:F1:11:A4:9F:B3:97:EB:72:35:22:6F
            X509v3 Authority Key Identifier:
                keyid:9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a3a2f33322d313238203d3e20323634393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:307c::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:56:09:6f:67:8d:1c:24:3f:7d:90:73:bf:b4:bd:46:74:df:
         69:1e:3c:b9:1b:c0:ea:d9:6d:e4:92:f3:fa:98:5b:ea:c7:8e:
         f9:d0:c8:9d:bf:eb:dc:8e:00:e3:6f:d8:73:30:2c:90:cb:b7:
         a4:28:02:19:9f:23:50:e2:0f:cd:60:7c:a0:5a:a1:3f:66:8a:
         3c:7a:0b:bb:6d:d8:ce:87:35:e8:79:67:76:45:18:4c:ee:34:
         57:cc:02:80:45:be:33:4d:32:94:ac:2a:1f:a0:e3:1a:e7:18:
         12:b3:b6:b7:72:60:ca:6a:82:f0:71:95:fe:d2:ff:e9:6b:96:
         bb:61:f0:6f:88:05:30:fa:2c:a5:22:93:15:f1:5b:36:da:e1:
         33:07:dd:f1:18:4d:2d:01:dc:e4:0d:ab:c9:28:48:81:fb:9c:
         c5:d5:75:24:0f:e7:91:d5:51:67:0f:5a:af:3e:a2:8c:a5:38:
         88:b5:60:04:47:f2:3b:b5:59:b6:6b:dd:c4:50:e2:61:d5:b4:
         ce:cc:61:f1:90:f5:29:28:cd:ac:4c:d5:97:15:63:e7:fb:2b:
         62:aa:36:06:3b:5a:c9:76:70:84:be:c7:41:13:f4:78:24:9b:
         30:e2:81:0e:75:5a:ba:d0:84:58:8a:96:01:1b:ec:3c:e5:32:
         5f:10:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----