Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a3a2f33322d3332203d3e20323632343137.roa
File:                     323830343a6532343a3a2f33322d3332203d3e20323632343137.roa (raw, json)
Hash identifier:          TNEsSvQgi6FlOnpA+VRs0mMkB9ONP/OzspLEvA1abC0=
Subject key identifier:   82:5B:DD:2F:3F:99:8D:4F:DA:43:DC:F9:32:02:0C:47:86:FB:BA:12
Certificate issuer:       /CN=97A4AF5A5DAA9301E561374F38352591E093C270
Certificate serial:       03963B303CAF2AEFB569BFF8CF4637E1DBF9F473
Authority key identifier: 97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a3a2f33322d3332203d3e20323632343137.roa
Signing time:             Mon 11 Dec 2023 17:36:23 +0000
ROA not before:           Mon 11 Dec 2023 17:31:23 +0000
ROA not after:            Mon 09 Dec 2024 17:36:23 +0000
asID:                     262417
IP address blocks:        2804:e24::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:96:3b:30:3c:af:2a:ef:b5:69:bf:f8:cf:46:37:e1:db:f9:f4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A4AF5A5DAA9301E561374F38352591E093C270
        Validity
            Not Before: Dec 11 17:31:23 2023 GMT
            Not After : Dec  9 17:36:23 2024 GMT
        Subject: CN=825BDD2F3F998D4FDA43DCF932020C4786FBBA12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:a5:46:6c:46:07:cf:57:e8:45:99:36:25:
                    bb:a9:04:5f:dc:4a:ab:44:97:a4:c9:50:2c:5e:15:
                    83:6b:74:f0:66:94:7a:94:a7:9b:9d:4d:7d:44:1b:
                    1e:96:41:9a:ff:2f:95:1c:46:1e:33:d5:64:70:0b:
                    a8:83:f9:22:c8:ea:f3:ff:14:da:00:de:ab:12:46:
                    a1:45:eb:78:fb:9d:8e:ed:a1:aa:de:2a:49:51:fc:
                    d9:73:e7:a7:c0:5d:97:d4:33:43:e2:4f:48:c1:43:
                    29:cf:be:1e:0b:6a:c3:c8:c1:ca:e7:04:a6:a3:9a:
                    11:0c:5e:3d:05:2e:41:76:8a:7c:71:fa:9a:97:78:
                    50:99:c6:b1:28:60:65:64:33:12:06:a3:f7:c6:ca:
                    06:c9:27:af:33:5a:a8:c4:c8:32:a5:6d:b9:fa:0d:
                    e8:06:6d:48:8e:23:0b:1a:2a:1d:b3:50:4d:41:25:
                    29:1b:d1:28:01:67:b2:31:05:47:a5:da:a8:cd:bc:
                    ee:e6:99:76:7f:55:f4:a0:7b:e9:62:34:c2:ad:d8:
                    61:e2:7a:b9:11:71:a6:73:40:38:8a:e5:e3:3d:32:
                    37:94:01:d8:ff:23:5c:ba:41:29:4d:3f:c8:7e:9c:
                    3b:ee:b4:37:7a:48:f7:7f:46:89:bd:a8:67:f4:b3:
                    d1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5B:DD:2F:3F:99:8D:4F:DA:43:DC:F9:32:02:0C:47:86:FB:BA:12
            X509v3 Authority Key Identifier:
                keyid:97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a3a2f33322d3332203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e24::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:22:f0:50:f0:26:75:81:6d:20:dd:81:95:33:11:2f:78:92:
         f1:e9:48:f8:01:91:cd:5c:a9:4c:61:30:7c:43:15:70:ea:ce:
         ec:53:de:cc:dc:bd:81:76:2a:67:3d:09:83:05:82:42:ae:a2:
         84:93:6d:10:dd:d0:0b:95:41:f6:f1:10:15:e7:34:b1:55:75:
         78:92:2b:31:bf:39:b9:8e:8a:9e:16:37:d1:c0:47:5c:63:97:
         8d:cf:b8:3d:2a:55:35:ed:76:7b:67:14:96:12:f0:b8:64:f0:
         8e:09:f4:ce:86:95:5f:9a:59:27:9b:15:1e:9f:1a:31:3a:5c:
         09:95:1a:11:8f:79:f5:a0:cb:fa:12:2c:e1:01:ee:78:5c:3e:
         2c:a1:4e:38:df:be:3e:10:c0:22:30:d1:27:e6:54:5d:79:d5:
         fe:0d:d3:24:7b:97:75:a3:dc:2d:33:42:a2:75:65:66:93:4c:
         e1:2d:4d:dc:6e:75:fd:5a:35:c3:b0:d1:fa:0f:54:7c:93:4b:
         f8:56:cc:15:6a:bb:08:bb:80:e3:3e:e7:68:2b:cb:68:a0:fe:
         cd:28:96:18:45:74:8c:59:88:02:04:49:02:6d:52:97:e0:f3:
         aa:48:3a:28:da:49:48:b3:68:54:83:53:8b:01:86:62:5c:87:
         31:43:8d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----