Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a323a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a336437343a323a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          b8UutfeYimR8A7lRmLX5WRf2PBlL5lmi2JqGvpU5zuA=
Subject key identifier:   F9:EE:AE:C2:7D:C6:8E:B2:2E:A3:BB:8C:A4:A0:D4:5E:B9:FE:E2:B0
Certificate issuer:       /CN=97E394FE854613CE9784B1D64D805ABFF0DF922C
Certificate serial:       2FB853A6C9AE0D9212427A305CAADAB8211071D5
Authority key identifier: 97:E3:94:FE:85:46:13:CE:97:84:B1:D6:4D:80:5A:BF:F0:DF:92:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a323a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Tue 24 Jan 2023 18:27:48 +0000
ROA not before:           Tue 24 Jan 2023 18:22:48 +0000
ROA not after:            Tue 23 Jan 2024 18:27:48 +0000
asID:                     262617
IP address blocks:        2804:3d74:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b8:53:a6:c9:ae:0d:92:12:42:7a:30:5c:aa:da:b8:21:10:71:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97E394FE854613CE9784B1D64D805ABFF0DF922C
        Validity
            Not Before: Jan 24 18:22:48 2023 GMT
            Not After : Jan 23 18:27:48 2024 GMT
        Subject: CN=F9EEAEC27DC68EB22EA3BB8CA4A0D45EB9FEE2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:d3:95:e6:cc:4d:14:71:c2:71:b2:bc:9e:
                    8a:61:20:16:70:9d:2c:4b:fc:3b:94:ed:c2:36:dd:
                    c9:63:be:93:7a:60:08:fc:15:90:0c:a1:20:0c:da:
                    c9:d7:d0:77:85:c4:c8:1f:bc:2f:60:99:7d:36:ad:
                    34:33:8a:09:66:be:4a:9c:0e:30:c6:3e:01:c2:07:
                    0b:93:30:0c:6f:4b:ce:7c:50:66:8c:e3:17:3c:7d:
                    b9:c9:39:c6:38:a7:0f:9c:0b:65:37:f2:c5:20:be:
                    d2:7a:1f:bf:ac:5b:31:56:59:21:a2:16:89:6d:83:
                    a8:51:57:1d:91:6c:46:aa:1e:69:7c:63:09:ef:8f:
                    6e:16:ab:93:e0:4c:d6:41:94:0c:8a:ed:49:7c:57:
                    b4:51:eb:c5:e8:2b:1e:be:79:77:63:df:30:67:37:
                    f7:09:5b:8a:e2:b3:ac:d4:fb:76:a7:3e:ca:0d:ce:
                    ed:e8:9d:a0:f5:09:af:08:9a:ee:a8:a3:a8:90:b8:
                    dd:51:39:91:db:5f:d8:99:68:44:47:4b:60:69:a7:
                    aa:db:f0:f3:cf:ab:be:62:5b:da:70:49:21:b8:d3:
                    fd:4b:d5:9d:0f:73:60:2c:ad:21:fc:81:3c:f1:16:
                    9e:12:b0:58:b8:d2:2c:67:f5:6d:3d:53:53:04:54:
                    16:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EE:AE:C2:7D:C6:8E:B2:2E:A3:BB:8C:A4:A0:D4:5E:B9:FE:E2:B0
            X509v3 Authority Key Identifier:
                keyid:97:E3:94:FE:85:46:13:CE:97:84:B1:D6:4D:80:5A:BF:F0:DF:92:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a323a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:4f:b0:b7:7b:b7:49:d1:24:55:95:e6:aa:78:30:f1:02:b5:
         9f:e1:4a:97:58:c1:07:ed:24:59:70:4d:a5:29:65:41:a9:ee:
         0e:ec:42:3a:9b:ce:c4:e1:93:9b:66:90:fe:c4:95:13:75:54:
         7f:06:6b:e0:c7:b0:f1:38:62:86:f8:19:2f:f7:44:54:20:51:
         6c:e2:fb:65:9e:ce:df:43:b9:4b:68:33:d2:8c:76:9a:26:93:
         23:12:28:eb:c7:f1:f5:01:59:79:4b:bc:ee:51:96:d1:c5:39:
         2c:89:b1:6c:11:d6:42:55:6f:91:63:4e:4f:0d:4f:da:5c:bf:
         31:d6:0a:28:3c:66:03:24:40:2c:c1:93:54:ff:13:4b:9c:53:
         2a:61:2c:8a:32:2d:06:6c:3a:c4:63:81:c0:cb:0d:0d:39:90:
         c4:1e:9d:01:b3:34:a9:23:87:40:ce:5d:19:ea:c5:a9:ef:8f:
         e0:54:ea:5a:c3:37:9f:aa:2b:52:21:6b:fd:2b:9a:ac:54:76:
         9d:54:48:4e:96:a5:22:5b:27:24:20:e9:ec:3f:08:63:8f:58:
         82:10:48:49:29:da:98:25:72:75:84:d8:aa:c7:c1:bb:79:35:
         40:1e:7a:0b:62:32:57:50:3f:5b:4b:36:fd:ac:df:e2:80:76:
         e0:85:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----