Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a353a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a336437343a353a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          DjuTt+BVgnB1XPABSQKByXNQfempXjLKCeoggjvQkhU=
Subject key identifier:   B8:E1:E3:59:48:E3:FA:15:85:58:B7:B1:8B:50:D0:29:0C:12:C7:58
Certificate issuer:       /CN=97E394FE854613CE9784B1D64D805ABFF0DF922C
Certificate serial:       53904EABB23CB4A3F805D89D0B9FFFBEE82E87F2
Authority key identifier: 97:E3:94:FE:85:46:13:CE:97:84:B1:D6:4D:80:5A:BF:F0:DF:92:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a353a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Tue 24 Jan 2023 18:27:58 +0000
ROA not before:           Tue 24 Jan 2023 18:22:58 +0000
ROA not after:            Tue 23 Jan 2024 18:27:58 +0000
asID:                     262617
IP address blocks:        2804:3d74:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:90:4e:ab:b2:3c:b4:a3:f8:05:d8:9d:0b:9f:ff:be:e8:2e:87:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97E394FE854613CE9784B1D64D805ABFF0DF922C
        Validity
            Not Before: Jan 24 18:22:58 2023 GMT
            Not After : Jan 23 18:27:58 2024 GMT
        Subject: CN=B8E1E35948E3FA158558B7B18B50D0290C12C758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:9c:3d:eb:74:a1:1b:23:96:99:8c:12:e7:
                    e0:a5:b7:d5:73:dc:6e:3d:bd:82:44:22:02:99:9c:
                    bd:4d:d3:94:4d:e8:6c:bb:5c:86:3b:20:2d:d3:d2:
                    95:c5:d3:3e:b2:0f:c2:22:e2:6d:fb:97:ad:dc:20:
                    e9:2c:20:38:44:4c:d5:ed:bd:62:4d:78:b2:ac:c5:
                    1e:48:37:59:e5:d8:d6:49:52:5f:b0:2f:b8:27:f1:
                    9d:b2:ff:ea:47:e6:3d:fd:f1:d0:88:70:c0:1d:16:
                    18:d1:6f:0d:be:d7:97:b0:11:60:16:86:a2:24:20:
                    fc:ed:bb:a3:5d:32:63:0e:be:a9:23:3f:64:8e:12:
                    02:58:da:d5:32:be:4c:5a:97:ca:19:50:d6:37:c9:
                    6a:15:05:12:99:76:c0:b9:ce:b6:0a:c7:6f:f8:f0:
                    c9:84:a2:17:e5:08:d8:5a:cb:bf:07:c8:07:87:1a:
                    13:88:74:09:3e:cc:28:91:a4:92:db:a1:5d:e1:db:
                    ac:2b:b1:e2:8b:cf:ce:bc:cf:14:ed:f4:a6:58:e5:
                    9b:4c:f7:fe:2c:ac:10:c9:0b:55:9d:e9:f3:48:12:
                    7b:a8:79:b5:3a:b2:10:0e:c7:73:27:79:78:7a:cd:
                    4c:a6:98:f8:6f:e4:ec:a9:f6:b8:9a:a0:82:ec:60:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E1:E3:59:48:E3:FA:15:85:58:B7:B1:8B:50:D0:29:0C:12:C7:58
            X509v3 Authority Key Identifier:
                keyid:97:E3:94:FE:85:46:13:CE:97:84:B1:D6:4D:80:5A:BF:F0:DF:92:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a353a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:93:d6:f5:12:ce:bb:d9:59:de:01:8f:a9:fc:c6:b4:03:11:
         28:f7:6e:97:18:34:3c:6c:78:6d:57:54:2e:ad:68:75:c1:20:
         9d:da:3c:04:4f:5e:a2:7c:9f:7a:c7:0b:c3:e9:11:b8:39:95:
         a7:68:f4:9e:ec:3d:e1:74:e7:dd:9c:8a:52:88:49:a7:83:dd:
         db:26:0c:f7:e2:7c:53:80:5e:cf:bf:f2:03:63:25:fb:de:44:
         08:04:98:f2:c4:83:89:5a:b6:b8:6c:79:7e:d4:96:3e:16:5c:
         28:9e:fd:d9:86:75:39:7e:b9:db:1a:e7:16:8c:f1:aa:ab:72:
         fe:f8:a1:b4:eb:b5:e7:8f:78:c9:74:6d:d9:6e:da:15:48:35:
         c7:73:fb:d4:a7:1d:73:0a:f3:ba:b3:ba:70:55:6c:4c:3b:e7:
         14:98:18:90:68:12:fd:d9:61:02:e8:93:f4:07:2d:18:dc:b6:
         75:a1:d4:0e:b0:28:2a:eb:dd:8f:a5:95:bd:8b:4d:c8:e2:4d:
         6f:5e:e1:32:49:2f:54:af:55:be:1e:2c:0e:89:b8:f8:42:9c:
         68:c6:18:19:50:5c:60:d9:cc:0b:c7:a8:7a:f8:5a:2f:09:c9:
         1d:c5:65:f4:48:29:34:b9:21:c0:a0:76:41:8c:e6:29:c2:24:
         c3:5d:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----