Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a343030303a3a2f33342d3334203d3e20323635333238.roa
File:                     323830343a326532383a343030303a3a2f33342d3334203d3e20323635333238.roa (raw, json)
Hash identifier:          jkiXpGEJq7S04GX6fQPxB9PTjjVYXv1/qj6v9ookUZA=
Subject key identifier:   F6:B3:FF:10:A9:EF:E3:E7:3F:4D:CF:07:05:04:F0:0D:17:05:40:F0
Certificate issuer:       /CN=77947C88DBADADCA74224F342BBB9D3AE9B34D31
Certificate serial:       1BDD3B80CB7B5CF3D8556268BD9C3E64143DFD93
Authority key identifier: 77:94:7C:88:DB:AD:AD:CA:74:22:4F:34:2B:BB:9D:3A:E9:B3:4D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77947C88DBADADCA74224F342BBB9D3AE9B34D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a343030303a3a2f33342d3334203d3e20323635333238.roa
Signing time:             Fri 29 Sep 2023 17:19:14 +0000
ROA not before:           Fri 29 Sep 2023 17:14:14 +0000
ROA not after:            Fri 27 Sep 2024 17:19:14 +0000
asID:                     265328
IP address blocks:        2804:2e28:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:dd:3b:80:cb:7b:5c:f3:d8:55:62:68:bd:9c:3e:64:14:3d:fd:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77947C88DBADADCA74224F342BBB9D3AE9B34D31
        Validity
            Not Before: Sep 29 17:14:14 2023 GMT
            Not After : Sep 27 17:19:14 2024 GMT
        Subject: CN=F6B3FF10A9EFE3E73F4DCF070504F00D170540F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:03:59:68:10:e2:95:fd:3c:3c:60:bc:86:00:
                    84:a1:86:0c:6f:e2:57:89:38:56:00:72:a7:66:1c:
                    e6:d0:ca:4a:e5:8e:8a:36:1e:fb:f3:59:80:ad:89:
                    78:b0:a9:75:eb:19:48:d2:13:b2:c7:cb:42:5c:ca:
                    5d:84:cc:7e:15:1e:fc:d3:81:6c:9d:b4:99:d6:d4:
                    1e:96:d3:d2:58:04:b7:5c:0b:4e:55:6d:33:8d:61:
                    be:f2:91:89:b1:e3:20:36:4f:82:82:17:d3:52:5e:
                    a0:80:3d:5c:5f:92:a8:81:b9:c7:a7:fb:0f:9b:21:
                    37:ea:f0:7b:9c:6c:98:37:f9:b3:a3:df:c3:a4:8a:
                    be:ef:04:06:78:d8:25:f9:22:90:e5:54:3b:11:48:
                    3e:67:3d:7f:c5:d8:03:2a:60:db:01:0f:1c:7f:f7:
                    db:c6:ce:88:51:ec:8e:82:56:c6:26:62:55:3a:a0:
                    7c:31:15:2b:3b:f6:7b:25:7b:dd:3a:de:ab:96:02:
                    80:2b:bb:7d:e3:45:b4:c6:3a:96:fb:51:eb:90:c3:
                    a9:e4:20:ba:f8:00:8d:c0:a9:a5:d3:fd:bd:db:ba:
                    5a:e0:ec:24:22:fe:ad:42:16:b2:67:de:ca:9e:f7:
                    bd:71:14:19:d0:eb:ab:de:96:ea:49:e0:a3:70:38:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B3:FF:10:A9:EF:E3:E7:3F:4D:CF:07:05:04:F0:0D:17:05:40:F0
            X509v3 Authority Key Identifier:
                keyid:77:94:7C:88:DB:AD:AD:CA:74:22:4F:34:2B:BB:9D:3A:E9:B3:4D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/77947C88DBADADCA74224F342BBB9D3AE9B34D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77947C88DBADADCA74224F342BBB9D3AE9B34D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a343030303a3a2f33342d3334203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e28:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         14:2f:ef:93:bd:79:f3:9f:5f:c5:04:a4:f9:4f:54:8a:ba:cf:
         e8:d4:ad:c1:3e:51:ed:8b:b3:e0:4b:dd:d0:3d:e8:08:5b:f0:
         ec:ec:59:56:cd:45:ea:9f:a0:75:5b:0f:64:c9:4a:9d:ab:30:
         72:a9:8f:4d:27:c4:96:22:c9:69:31:88:7a:76:17:e4:7e:e8:
         1c:5e:0e:fc:9a:cc:68:53:36:c6:18:53:e6:e9:a6:dd:cf:65:
         61:3d:4d:33:17:69:b5:e9:d0:fb:5f:09:91:f5:83:bd:4e:7c:
         c4:e8:14:12:ae:53:3e:a8:92:68:bc:b7:1b:20:62:14:e6:25:
         7a:73:98:36:5d:03:e5:3c:3b:0a:4c:58:d0:d7:a4:66:06:03:
         57:17:a3:fd:ac:0c:ec:ea:30:88:5e:ce:71:e4:6f:bd:4d:60:
         e8:aa:a7:60:fe:70:6c:b9:28:53:27:18:65:8f:40:30:8b:b3:
         45:54:d7:20:e1:7f:b2:8f:02:83:66:26:6b:67:a8:25:4e:02:
         19:42:0b:f4:e2:12:09:02:00:26:16:c2:f2:f2:6c:f2:93:c8:
         31:b0:57:1b:3b:4b:2a:48:f9:35:2e:fb:b0:8a:c6:c4:9c:b8:
         f0:8f:20:9c:bb:96:7b:63:12:22:26:ce:a7:ef:4e:96:ab:9f:
         a6:1f:21:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----