Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/323830343a336439303a3a2f33322d3438203d3e20323033.roa
File:                     323830343a336439303a3a2f33322d3438203d3e20323033.roa (raw, json)
Hash identifier:          fuCdoRzhTClzzSQzBCs5PtmGGgFglB5FW3CJswjIO/U=
Subject key identifier:   67:A1:70:34:8C:FE:26:E2:0A:21:CB:54:16:F7:99:A5:B3:2E:72:53
Certificate issuer:       /CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
Certificate serial:       0CF56F64256F7CF9AE4DA25DD604E6977880ADBC
Authority key identifier: A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/323830343a336439303a3a2f33322d3438203d3e20323033.roa
Signing time:             Wed 29 Nov 2023 10:55:36 +0000
ROA not before:           Wed 29 Nov 2023 10:50:36 +0000
ROA not after:            Wed 27 Nov 2024 10:55:36 +0000
asID:                     203
IP address blocks:        2804:3d90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f5:6f:64:25:6f:7c:f9:ae:4d:a2:5d:d6:04:e6:97:78:80:ad:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
        Validity
            Not Before: Nov 29 10:50:36 2023 GMT
            Not After : Nov 27 10:55:36 2024 GMT
        Subject: CN=67A170348CFE26E20A21CB5416F799A5B32E7253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a4:4c:3c:d9:00:35:18:c9:9c:1f:ea:6b:88:
                    dc:32:bb:da:16:f9:8e:b5:58:c8:24:1d:9f:f9:bc:
                    17:b1:73:33:13:0b:90:a4:fe:76:ce:e0:ff:71:9e:
                    15:c9:fa:5a:bc:2a:64:85:3b:d4:c9:b2:d6:20:46:
                    98:a9:27:79:b7:38:30:99:34:83:81:76:e7:4e:63:
                    28:8d:44:87:43:23:72:e7:4e:de:6e:82:12:f2:bb:
                    0f:af:27:83:2a:ca:dd:31:cd:b2:5a:18:fa:93:92:
                    9c:98:38:82:83:48:5a:fb:00:59:fa:3b:ab:79:1c:
                    a9:3a:a8:28:6c:91:8a:a4:5c:c7:56:bd:1b:f9:ed:
                    95:dd:5d:3a:0b:77:a6:35:0a:64:a9:f4:2b:73:df:
                    13:a4:82:2d:1d:16:e9:25:c4:bc:a0:9c:26:5b:94:
                    38:4f:4a:2f:70:dd:de:3b:01:c6:19:31:72:04:df:
                    05:df:8f:18:4b:9b:24:b4:cc:f8:1b:81:90:92:ad:
                    ce:53:a6:d8:f0:fe:0d:ac:d6:13:a3:13:96:c0:32:
                    89:f0:2e:d4:97:2c:9e:8c:49:09:a3:7d:d3:0e:97:
                    7c:83:ad:98:0e:b4:66:4c:d2:10:80:57:7b:6c:da:
                    e1:91:36:19:7d:51:bb:91:a1:6e:88:2e:76:92:b4:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A1:70:34:8C:FE:26:E2:0A:21:CB:54:16:F7:99:A5:B3:2E:72:53
            X509v3 Authority Key Identifier:
                keyid:A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/323830343a336439303a3a2f33322d3438203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:e5:ad:e4:e1:10:a9:91:63:e7:08:2f:47:55:86:1e:ce:cc:
         89:e7:c1:78:8a:08:57:5a:7a:53:7f:42:d4:03:34:44:b6:1b:
         bc:23:64:09:3a:c9:89:69:11:2a:26:c2:13:9c:51:13:e3:43:
         06:9f:8c:9e:75:0b:be:b7:b3:da:94:55:31:5f:1e:62:f5:68:
         03:13:0c:bc:fc:12:9e:fb:81:03:30:60:d8:b3:86:e3:0f:57:
         e4:25:1d:7c:65:71:ab:da:1d:fc:62:13:43:e5:10:4a:f1:3e:
         01:91:c1:c0:71:93:86:ad:ca:d0:33:74:68:e8:fd:c0:7f:c9:
         e6:2e:bb:95:72:0e:6f:de:72:12:2e:58:bb:33:3c:95:eb:79:
         6d:92:52:ef:13:6b:c5:f3:96:ab:57:b9:93:1d:be:4b:fe:53:
         cc:2b:4f:fc:07:a0:53:6c:79:43:21:7d:16:40:bc:c4:6b:99:
         6f:a9:be:85:b8:01:37:5b:d1:75:f1:09:e0:ab:63:0e:86:e5:
         5f:89:a3:03:4b:25:27:95:9f:ca:0f:ec:df:c9:34:33:87:04:
         51:79:d5:79:70:e9:f2:ba:15:4a:40:08:87:f4:c1:c3:1a:6a:
         be:a4:2b:bc:4f:01:86:e2:6f:6e:58:31:19:df:25:e1:68:26:
         2e:d4:eb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----