Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0/323830343a373962303a3a2f33322d3438203d3e20323731333231.roa
File:                     323830343a373962303a3a2f33322d3438203d3e20323731333231.roa (raw, json)
Hash identifier:          dFYUrugaX0bkYkqPcwjMAxIePQXI+rc+2td5fYK3zKE=
Subject key identifier:   C8:20:DB:37:8C:BB:1C:5B:43:10:2F:26:F6:83:37:D9:6B:59:C1:22
Certificate issuer:       /CN=EB3A64DF8C582A21481B7978AB002615ADCB5DFE
Certificate serial:       2F9BB7E762E50E8F42418FD96E5F32F527723AE6
Authority key identifier: EB:3A:64:DF:8C:58:2A:21:48:1B:79:78:AB:00:26:15:AD:CB:5D:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB3A64DF8C582A21481B7978AB002615ADCB5DFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0/323830343a373962303a3a2f33322d3438203d3e20323731333231.roa
Signing time:             Fri 17 Nov 2023 19:15:05 +0000
ROA not before:           Fri 17 Nov 2023 19:10:05 +0000
ROA not after:            Fri 15 Nov 2024 19:15:05 +0000
asID:                     271321
IP address blocks:        2804:79b0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9b:b7:e7:62:e5:0e:8f:42:41:8f:d9:6e:5f:32:f5:27:72:3a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB3A64DF8C582A21481B7978AB002615ADCB5DFE
        Validity
            Not Before: Nov 17 19:10:05 2023 GMT
            Not After : Nov 15 19:15:05 2024 GMT
        Subject: CN=C820DB378CBB1C5B43102F26F68337D96B59C122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:e2:da:f8:74:85:d5:70:df:9f:a5:bf:aa:
                    bc:77:57:c1:31:bd:7d:6b:73:82:cf:7a:13:81:69:
                    76:e6:eb:8f:41:da:73:6e:d3:97:72:24:74:e6:12:
                    08:7c:14:2a:38:fd:c8:bf:cf:56:ee:c9:05:db:db:
                    c8:2b:1b:cb:6f:b8:33:ff:98:b8:48:8c:21:8c:8f:
                    3d:e1:49:bd:68:21:95:89:e6:e3:1d:b5:65:b3:5f:
                    c6:92:54:98:1e:12:31:f5:81:f4:eb:82:a5:9c:fd:
                    71:bf:c1:ad:b0:04:f1:7d:fb:5b:77:51:e0:49:14:
                    54:ff:b3:35:e8:40:ed:8d:13:f4:02:b5:d2:a5:05:
                    8c:8a:2a:fd:e9:3c:3d:1d:f4:2f:aa:68:81:52:f9:
                    68:e6:e4:8d:4e:04:01:9a:c7:48:cc:6a:ad:e8:84:
                    35:a0:b8:bd:45:6c:41:da:7c:44:5e:4f:95:43:58:
                    75:67:7c:e5:30:5c:3e:5b:d5:f0:a2:58:4b:d5:11:
                    73:e9:6f:0b:ef:88:34:cf:3c:d6:bf:a5:70:75:62:
                    ac:ac:75:d5:0d:32:25:2e:3b:d7:69:37:1e:f9:6c:
                    f1:e1:0b:e0:5f:e4:1c:3f:b5:e3:38:2b:3e:59:f5:
                    a5:61:3a:5b:ff:d5:33:ac:58:91:73:d2:6f:6a:05:
                    79:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:20:DB:37:8C:BB:1C:5B:43:10:2F:26:F6:83:37:D9:6B:59:C1:22
            X509v3 Authority Key Identifier:
                keyid:EB:3A:64:DF:8C:58:2A:21:48:1B:79:78:AB:00:26:15:AD:CB:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0/EB3A64DF8C582A21481B7978AB002615ADCB5DFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB3A64DF8C582A21481B7978AB002615ADCB5DFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0/323830343a373962303a3a2f33322d3438203d3e20323731333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:ae:f6:f1:5b:80:31:f6:75:db:e7:0f:a1:3e:11:76:66:f6:
         00:2f:43:93:c8:75:73:52:e2:aa:52:f2:34:de:51:ee:85:b6:
         d7:3d:24:0e:0a:e3:b2:45:ac:f8:ed:91:56:1f:55:23:cd:44:
         09:da:c1:f2:2b:0f:19:2f:da:ad:50:b8:9b:f8:ff:b8:d1:6b:
         8c:5b:d3:ca:76:82:82:67:5b:36:f0:96:a6:b6:0e:f6:cd:69:
         6b:47:ce:13:d9:f3:16:93:2e:30:7f:3b:df:79:06:5f:fb:c8:
         1f:9b:cf:40:0f:3d:87:e2:e1:7b:14:45:ed:53:f4:cb:ab:ff:
         33:dd:9f:1e:a8:0b:f7:68:9f:5a:c8:80:9f:0f:2b:56:e3:83:
         30:2e:9c:87:0e:e2:f5:49:5c:88:78:b8:93:ce:d0:56:70:b8:
         44:4d:70:af:85:1c:dc:73:13:33:d5:35:de:31:4e:6a:bf:3d:
         ef:f0:9d:a0:9b:83:ee:af:e6:c7:67:54:f5:c3:77:47:e3:e3:
         69:68:cb:1e:42:ea:e2:dc:f2:8b:09:7d:90:40:d0:ce:0b:d8:
         e6:94:83:b5:ef:84:4d:cb:15:ad:51:69:7f:7b:14:6f:82:f5:
         92:9e:9b:6e:04:6a:5d:d0:71:40:29:ce:a8:e6:0d:c6:05:5b:
         75:26:3a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----