Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/323830343a373136343a3a2f33322d3332203d3e20323730373836.roa
File:                     323830343a373136343a3a2f33322d3332203d3e20323730373836.roa (raw, json)
Hash identifier:          Ft7vzWP5jV5kD9YOzj36AYAx5+FcXUGUS3r9Vjm+uz8=
Subject key identifier:   91:EF:93:88:DD:F4:E4:21:76:90:B6:BB:CE:40:C8:BA:07:E0:D8:AB
Certificate issuer:       /CN=A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1
Certificate serial:       639A96BC233955E29C4BEC491540FC943043689A
Authority key identifier: A9:B3:62:39:9E:C0:C7:60:B9:B9:D2:F3:CE:7F:93:D2:46:94:DB:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/323830343a373136343a3a2f33322d3332203d3e20323730373836.roa
Signing time:             Mon 20 Nov 2023 14:27:45 +0000
ROA not before:           Mon 20 Nov 2023 14:22:45 +0000
ROA not after:            Mon 18 Nov 2024 14:27:45 +0000
asID:                     270786
IP address blocks:        2804:7164::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9a:96:bc:23:39:55:e2:9c:4b:ec:49:15:40:fc:94:30:43:68:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1
        Validity
            Not Before: Nov 20 14:22:45 2023 GMT
            Not After : Nov 18 14:27:45 2024 GMT
        Subject: CN=91EF9388DDF4E4217690B6BBCE40C8BA07E0D8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:fc:91:c1:22:b2:36:7e:c4:63:0d:6b:00:
                    f9:7f:88:3e:a2:e0:7c:3a:1c:32:cd:36:fd:cb:03:
                    f3:8d:85:40:98:04:20:1d:84:8a:da:03:3a:63:75:
                    39:fc:c6:5a:e8:d5:15:da:19:f9:0e:34:a3:08:e0:
                    47:11:8f:c5:b8:3e:e6:71:66:56:af:e1:13:f5:13:
                    80:99:fe:00:f4:45:5f:f6:4c:72:94:e1:55:15:48:
                    59:7a:0c:00:11:cb:6f:89:2d:97:f6:d6:8e:27:8b:
                    e3:40:a3:e4:1a:38:51:a7:f7:43:8b:f0:a7:c2:26:
                    0f:8d:3d:23:cf:06:8c:bf:27:ec:ae:40:06:47:e2:
                    3f:52:fa:96:06:e3:80:4c:5d:58:02:6b:a4:6b:b4:
                    f0:2d:e1:0e:17:e7:00:f6:51:11:d2:0b:a3:fa:2d:
                    c0:e4:be:51:2a:76:60:fb:d1:10:00:8c:36:67:68:
                    33:d4:0e:15:a7:e4:f7:21:e6:6e:63:4f:1b:c5:41:
                    d0:29:d4:6f:bf:97:ba:0c:35:c4:f8:49:70:a5:d7:
                    de:1d:21:1a:9f:70:e1:32:a8:df:ad:8f:58:46:ed:
                    4c:d6:ce:f6:3b:98:84:fc:ad:be:e2:d5:f2:ef:c5:
                    27:a1:98:91:40:f8:fc:68:72:c1:76:a7:8d:ab:90:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EF:93:88:DD:F4:E4:21:76:90:B6:BB:CE:40:C8:BA:07:E0:D8:AB
            X509v3 Authority Key Identifier:
                keyid:A9:B3:62:39:9E:C0:C7:60:B9:B9:D2:F3:CE:7F:93:D2:46:94:DB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/323830343a373136343a3a2f33322d3332203d3e20323730373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7164::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:3d:7e:6b:f5:04:53:46:61:e0:cc:51:8f:80:7b:2b:42:7c:
         3e:63:55:2d:41:86:32:30:64:44:c1:61:4d:dd:3a:14:47:8f:
         d2:b7:ed:7a:4d:3b:b5:29:1c:db:82:87:c2:bd:8b:d4:d2:2b:
         08:31:4f:6d:58:13:22:68:3c:7f:80:a3:8f:30:35:26:89:5e:
         f3:06:60:99:cb:dc:39:ab:0f:9a:41:2c:a7:77:f0:28:0a:b8:
         a8:35:f6:af:fa:40:25:7a:b2:8b:ad:c3:c1:57:5f:68:06:00:
         65:31:00:69:15:21:93:78:b2:01:7b:eb:76:fd:a5:43:ef:5d:
         79:61:c3:27:1f:f7:ab:af:65:3f:5d:0a:ad:27:7a:e7:4f:26:
         fc:73:67:07:13:69:2b:3b:09:4b:92:e1:33:20:43:90:9e:96:
         c7:44:67:2d:eb:ed:b2:c5:6b:98:00:67:7e:0c:31:26:e3:9b:
         c7:0b:94:4e:71:35:88:d2:21:19:42:3e:b7:a9:c8:7c:7f:b9:
         d4:da:21:2c:b1:40:bf:7f:7e:91:88:63:79:5b:6a:08:17:96:
         a8:ae:19:aa:3d:39:c6:af:d3:49:ab:22:70:ee:13:97:d1:4c:
         96:e9:ff:33:9e:14:66:b4:2a:bd:a6:fa:de:8e:77:dc:8a:f5:
         31:31:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----