Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/323830343a343931343a3a2f33322d3438203d3e20323637313633.roa
File:                     323830343a343931343a3a2f33322d3438203d3e20323637313633.roa (raw, json)
Hash identifier:          gxvq3PmHX1IEcC5PGfxrZqr9W1Qn5iDJhStZVuQSovg=
Subject key identifier:   0B:25:F5:EA:0E:38:95:3F:72:1D:4F:E3:24:D6:79:3E:A0:B9:DE:D3
Certificate issuer:       /CN=16891515D0732DB1B361B42718F50E035993171B
Certificate serial:       6A21BAC55793A2FD346BC504587425E247BD960D
Authority key identifier: 16:89:15:15:D0:73:2D:B1:B3:61:B4:27:18:F5:0E:03:59:93:17:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16891515D0732DB1B361B42718F50E035993171B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/323830343a343931343a3a2f33322d3438203d3e20323637313633.roa
Signing time:             Fri 17 Nov 2023 19:15:04 +0000
ROA not before:           Fri 17 Nov 2023 19:10:04 +0000
ROA not after:            Fri 15 Nov 2024 19:15:04 +0000
asID:                     267163
IP address blocks:        2804:4914::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:21:ba:c5:57:93:a2:fd:34:6b:c5:04:58:74:25:e2:47:bd:96:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16891515D0732DB1B361B42718F50E035993171B
        Validity
            Not Before: Nov 17 19:10:04 2023 GMT
            Not After : Nov 15 19:15:04 2024 GMT
        Subject: CN=0B25F5EA0E38953F721D4FE324D6793EA0B9DED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:c4:bb:b0:5f:1a:c2:24:2b:88:45:96:40:
                    35:7a:d9:f2:9b:dd:a6:4c:9c:0d:b4:94:44:e0:4b:
                    3b:01:5f:c1:de:97:fb:72:27:3c:e8:f1:33:49:6a:
                    9b:02:ed:38:39:b1:10:ff:5b:e7:ca:34:90:27:22:
                    5a:f0:33:25:f8:7b:b3:ae:40:34:86:1b:c4:fd:ab:
                    6a:eb:98:53:66:0a:c4:00:e2:38:fb:32:f1:3d:de:
                    09:a1:3d:35:73:79:6b:42:fc:e5:55:5b:89:87:68:
                    35:c3:f4:76:9c:b5:d4:69:b7:7d:ea:7e:f6:c5:39:
                    d4:44:8c:bb:1e:d1:a5:f0:c0:13:64:cd:1c:26:5e:
                    ee:69:4e:11:81:89:80:a1:26:44:f6:45:d4:f6:ea:
                    f0:b4:64:a8:1b:be:87:f7:f8:d3:bb:b1:84:13:25:
                    3d:7b:14:29:9a:e8:2e:9d:3f:92:74:29:d1:fa:59:
                    08:50:19:fb:d3:7a:1f:f8:94:7d:25:99:b1:69:40:
                    e7:3c:47:e7:dd:40:66:c8:6a:f6:99:eb:3a:4e:f0:
                    6c:1b:59:35:34:56:18:77:d2:1d:55:51:66:4b:45:
                    4f:34:34:26:15:dc:9b:0d:56:ac:27:d6:08:ca:f8:
                    e8:e6:0f:68:36:f3:b1:13:1a:c3:08:2d:02:bc:5e:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:25:F5:EA:0E:38:95:3F:72:1D:4F:E3:24:D6:79:3E:A0:B9:DE:D3
            X509v3 Authority Key Identifier:
                keyid:16:89:15:15:D0:73:2D:B1:B3:61:B4:27:18:F5:0E:03:59:93:17:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/16891515D0732DB1B361B42718F50E035993171B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16891515D0732DB1B361B42718F50E035993171B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/323830343a343931343a3a2f33322d3438203d3e20323637313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4914::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:86:e4:87:45:0f:e3:97:ff:89:75:be:76:47:46:0d:5d:34:
         f5:31:e3:dc:5c:6c:f6:41:1d:87:00:0d:90:27:36:65:3d:42:
         60:ff:56:d6:71:e6:b0:c8:32:40:d7:a0:44:06:67:e6:fd:a5:
         99:93:9b:47:fd:fc:6d:5f:8e:4f:27:4e:56:5c:a8:81:a0:30:
         b6:04:8d:70:d3:b5:40:0c:d9:89:71:a0:63:99:5c:63:af:57:
         9b:3c:ca:5f:e5:9c:f5:ed:13:f6:7e:e6:42:77:14:73:e9:5b:
         0c:98:82:f1:51:ec:50:d7:97:29:59:30:d2:aa:f2:6b:39:25:
         69:99:db:d9:e2:68:58:ba:a7:a8:40:49:41:fb:56:96:99:1c:
         04:4b:fe:4f:2d:78:8e:84:5b:d9:14:2f:34:77:c4:16:9d:c5:
         22:2e:38:9e:3a:03:21:6c:44:a1:e2:1f:77:d6:35:90:11:b4:
         13:c2:61:64:50:9b:42:37:a3:a0:d7:65:21:e2:dd:ee:0b:d4:
         cf:a7:b0:52:98:db:7b:8d:87:30:17:a5:b0:e3:57:b8:92:c7:
         48:bb:02:e8:c5:42:3e:46:17:c3:87:58:d6:03:0a:13:62:ef:
         73:fe:45:f7:36:0e:d1:22:53:c3:c6:68:a2:9c:54:3d:cb:02:
         8c:51:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----