Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0/323830343a373738343a3a2f33322d3334203d3e20323731313833.roa
File:                     323830343a373738343a3a2f33322d3334203d3e20323731313833.roa (raw, json)
Hash identifier:          cww+93ZUNELJrgFRjX87/UjJyyy4iw8hZuAggpNHmRo=
Subject key identifier:   0D:02:27:D9:07:14:E9:85:FF:75:59:B9:B0:A2:F9:18:82:7F:C9:1B
Certificate issuer:       /CN=439FF6311D69FD8E0CED053845878C844A00FE9F
Certificate serial:       7B057EC93820A8698DB2D110A053C30A4736FB66
Authority key identifier: 43:9F:F6:31:1D:69:FD:8E:0C:ED:05:38:45:87:8C:84:4A:00:FE:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/439FF6311D69FD8E0CED053845878C844A00FE9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0/323830343a373738343a3a2f33322d3334203d3e20323731313833.roa
Signing time:             Tue 19 Sep 2023 19:37:27 +0000
ROA not before:           Tue 19 Sep 2023 19:32:27 +0000
ROA not after:            Tue 17 Sep 2024 19:37:27 +0000
asID:                     271183
IP address blocks:        2804:7784::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:05:7e:c9:38:20:a8:69:8d:b2:d1:10:a0:53:c3:0a:47:36:fb:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439FF6311D69FD8E0CED053845878C844A00FE9F
        Validity
            Not Before: Sep 19 19:32:27 2023 GMT
            Not After : Sep 17 19:37:27 2024 GMT
        Subject: CN=0D0227D90714E985FF7559B9B0A2F918827FC91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:cd:8e:4e:fe:a2:9d:a0:10:82:57:42:a3:
                    8f:26:8f:8c:b9:3b:56:31:b7:d8:a0:88:35:ad:0a:
                    35:84:d4:22:18:48:47:a0:be:f4:f3:9b:c5:38:f4:
                    bb:7f:17:2b:7f:2e:70:b7:10:c0:eb:ba:89:35:0c:
                    a3:b2:32:8c:e6:53:6b:d8:99:c5:84:5a:b5:2c:92:
                    55:a7:7e:a5:ca:94:98:1d:9d:5c:25:8b:cf:1d:27:
                    be:87:ee:65:73:28:33:39:5f:85:32:71:5e:a5:8c:
                    0b:94:14:49:24:6c:6d:29:bc:77:e8:b4:e0:6e:49:
                    aa:9b:8b:f2:f3:84:b6:39:34:b0:73:eb:21:f5:ae:
                    fe:87:df:e2:b9:6d:d7:f8:01:e4:35:f9:1b:b5:61:
                    89:e3:0c:19:27:b5:7f:12:28:4a:72:51:59:62:aa:
                    15:56:73:55:73:0f:b1:aa:62:bb:9b:23:df:b4:4f:
                    cf:81:dd:51:ea:ef:75:66:48:1e:a2:7c:23:73:8c:
                    c5:62:fd:35:7e:12:35:22:de:91:d0:ec:a7:c2:b9:
                    69:d5:90:43:08:d0:db:bb:63:42:3d:0e:bb:75:6e:
                    fb:10:da:93:97:65:d6:58:7a:c6:d1:3f:c6:e6:9e:
                    6a:f6:b0:5d:87:f8:01:b2:26:75:c6:0a:70:3a:fc:
                    f9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:02:27:D9:07:14:E9:85:FF:75:59:B9:B0:A2:F9:18:82:7F:C9:1B
            X509v3 Authority Key Identifier:
                keyid:43:9F:F6:31:1D:69:FD:8E:0C:ED:05:38:45:87:8C:84:4A:00:FE:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0/439FF6311D69FD8E0CED053845878C844A00FE9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/439FF6311D69FD8E0CED053845878C844A00FE9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0/323830343a373738343a3a2f33322d3334203d3e20323731313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7784::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:e0:69:71:1c:bc:3a:8a:5c:cc:8a:0e:f0:a3:6a:c1:e2:2e:
         f4:ef:42:b7:13:ac:31:ac:b8:6b:3d:46:4f:3e:a7:3c:f3:0a:
         12:c8:9e:35:89:3d:51:f4:a4:55:33:4b:a1:22:73:c7:e2:69:
         02:68:04:17:01:c7:bf:aa:6e:fa:1c:c9:5a:f5:30:08:96:5e:
         03:0a:4b:27:33:0c:d4:34:7d:7e:62:da:78:76:ad:8f:2a:85:
         d1:19:1b:d0:d5:6f:84:c3:cb:c7:dc:b8:4d:53:f3:eb:3d:fc:
         b8:89:ea:40:02:ab:d5:f5:5e:f2:12:58:66:ea:ed:17:5b:d2:
         1f:d2:b9:e8:84:6b:d5:57:e3:d2:62:69:c6:e2:c1:bb:00:9c:
         5b:e4:13:04:af:3a:14:a6:0f:7a:eb:64:ec:92:5d:ea:a2:c3:
         f4:83:71:53:55:02:01:00:51:70:8c:e1:f5:6c:d1:c9:5a:ea:
         3c:71:cd:16:9b:84:f4:95:57:0c:f5:2e:77:7c:72:39:35:36:
         00:70:0b:a4:88:53:e2:d9:9b:11:46:04:95:8e:16:78:f6:a5:
         11:39:a7:ab:57:d2:bb:2f:f1:d5:29:27:eb:6c:44:55:6c:82:
         f7:e5:a3:14:73:5c:61:65:cc:47:e2:93:91:50:3b:84:13:87:
         24:48:d9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----