Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/323830343a313163383a3a2f33322d3438203d3e20323633343339.roa
File:                     323830343a313163383a3a2f33322d3438203d3e20323633343339.roa (raw, json)
Hash identifier:          3aBs89t3QO8nMAJgpXGnQACnDY4889a2BcUIihTb6ss=
Subject key identifier:   76:12:73:A9:4F:97:A2:E7:12:77:0E:FA:33:80:18:DD:FD:5B:2C:90
Certificate issuer:       /CN=FAE9AB02BBA9AA128E66394FDEACDF67D5006B93
Certificate serial:       1DB5643C77C4D889FA7D9A0C885BCEE16FA27E20
Authority key identifier: FA:E9:AB:02:BB:A9:AA:12:8E:66:39:4F:DE:AC:DF:67:D5:00:6B:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/323830343a313163383a3a2f33322d3438203d3e20323633343339.roa
Signing time:             Wed 01 Nov 2023 17:37:12 +0000
ROA not before:           Wed 01 Nov 2023 17:32:12 +0000
ROA not after:            Wed 30 Oct 2024 17:37:12 +0000
asID:                     263439
IP address blocks:        2804:11c8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b5:64:3c:77:c4:d8:89:fa:7d:9a:0c:88:5b:ce:e1:6f:a2:7e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE9AB02BBA9AA128E66394FDEACDF67D5006B93
        Validity
            Not Before: Nov  1 17:32:12 2023 GMT
            Not After : Oct 30 17:37:12 2024 GMT
        Subject: CN=761273A94F97A2E712770EFA338018DDFD5B2C90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:f6:34:bd:67:c9:c5:bf:63:e9:01:82:3d:
                    87:50:74:11:df:30:83:0e:8c:c9:73:e4:81:40:37:
                    9b:84:42:c5:49:14:4d:e0:98:e2:c0:e1:25:f4:84:
                    f4:41:e5:1e:be:24:b6:42:c6:b2:f6:11:6c:a5:47:
                    eb:55:7a:80:44:54:7e:64:37:de:c5:5f:d0:a8:a3:
                    3b:19:7b:c7:99:75:b0:4f:cd:92:63:1a:19:6f:13:
                    f0:d0:60:94:c8:a5:05:8d:20:45:53:c1:26:96:3b:
                    df:34:96:8e:bb:1b:c8:c3:b0:f1:14:15:f2:83:74:
                    f2:ef:5f:3f:6e:03:de:80:4a:e8:c9:80:92:1b:0d:
                    3b:aa:b9:c4:09:26:ee:ff:66:74:ad:ec:4e:cd:69:
                    2b:dc:21:01:8b:7d:ce:33:1b:7b:59:6f:59:9a:ec:
                    de:93:25:0a:86:5a:25:e8:35:17:51:11:85:f8:ac:
                    31:51:c4:1d:70:14:87:86:3a:c1:b5:f8:2e:55:90:
                    17:6b:f4:22:01:ef:a0:46:46:1c:f8:bb:bf:69:8d:
                    c2:1c:15:aa:36:74:ee:4e:7a:44:fc:55:db:b6:8a:
                    be:bf:0c:5e:a9:f1:38:ab:cf:c4:cd:8f:9b:52:2b:
                    a3:10:13:32:24:92:6c:1a:dd:58:c4:c9:3f:0e:9f:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:12:73:A9:4F:97:A2:E7:12:77:0E:FA:33:80:18:DD:FD:5B:2C:90
            X509v3 Authority Key Identifier:
                keyid:FA:E9:AB:02:BB:A9:AA:12:8E:66:39:4F:DE:AC:DF:67:D5:00:6B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/323830343a313163383a3a2f33322d3438203d3e20323633343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:a2:6f:86:9f:38:a0:14:ad:63:47:4c:77:ee:c2:2e:8c:45:
         b1:b2:11:f0:bd:89:63:e9:fa:71:ce:d0:13:ab:7f:84:f5:80:
         4c:1f:1c:ad:70:dc:88:e8:4f:7e:f4:63:d3:fb:ef:2d:93:f9:
         99:32:01:ef:78:4e:40:e7:22:ab:3e:3b:94:fc:7e:78:04:b4:
         9c:3a:81:91:19:6c:2a:16:61:dd:bc:8d:8d:57:f5:8b:ce:db:
         c4:68:fb:1d:b2:b1:c2:a9:20:61:27:1a:53:2a:25:3c:a1:88:
         c3:2c:5e:87:6b:14:e6:bb:73:40:6a:ae:92:c3:59:97:1c:f3:
         43:36:2d:52:49:69:d4:a4:d1:e7:73:7d:12:8a:31:28:ea:2f:
         a3:7a:51:68:8b:97:48:04:c3:0f:2b:1d:44:73:64:fb:53:08:
         c9:ef:41:39:4d:9e:fd:49:5a:e8:3d:71:0b:e3:14:40:a4:c4:
         3b:81:dd:27:04:7d:93:fa:7c:a6:22:1b:e7:66:76:92:be:8f:
         a1:1b:96:c8:38:c7:d6:07:48:5a:ed:b0:4c:9f:20:7b:7c:b1:
         54:d4:5c:cb:48:df:34:86:0e:e2:ff:7e:14:95:f5:d0:9e:f3:
         fa:21:f3:64:ee:e9:73:48:94:ac:e4:5c:7f:83:25:a6:47:bd:
         1e:c9:2e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----