Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/323830343a373365633a383030303a3a2f33332d3333203d3e20323730393436.roa
File:                     323830343a373365633a383030303a3a2f33332d3333203d3e20323730393436.roa (raw, json)
Hash identifier:          DWe8d+siQR5hWGdasmcJAF1zUfHM9cpknBB1F+4pp18=
Subject key identifier:   A3:87:2C:52:D6:98:40:D9:37:06:48:AA:40:69:4D:4A:AD:80:B8:40
Certificate issuer:       /CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
Certificate serial:       3ADF51DBB3173FB1DBFA84151DB4414692EF3A93
Authority key identifier: 87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/323830343a373365633a383030303a3a2f33332d3333203d3e20323730393436.roa
Signing time:             Sat 17 Feb 2024 05:23:53 +0000
ROA not before:           Sat 17 Feb 2024 05:18:53 +0000
ROA not after:            Sat 15 Feb 2025 05:23:53 +0000
asID:                     270946
IP address blocks:        2804:73ec:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:df:51:db:b3:17:3f:b1:db:fa:84:15:1d:b4:41:46:92:ef:3a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
        Validity
            Not Before: Feb 17 05:18:53 2024 GMT
            Not After : Feb 15 05:23:53 2025 GMT
        Subject: CN=A3872C52D69840D9370648AA40694D4AAD80B840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d3:7c:6c:04:be:60:9a:ee:fe:ad:5d:0b:cd:
                    24:a5:8d:3f:b3:ab:41:0b:93:ec:70:17:42:1d:84:
                    6c:7b:ad:c4:dd:7a:16:db:6d:7c:5d:1d:f1:e4:4b:
                    85:3f:48:48:1e:ec:98:32:6c:24:d1:7d:49:b5:9b:
                    d6:a0:02:7a:d2:29:67:03:1b:85:7e:6a:1d:2a:c6:
                    2e:e1:19:5a:2b:35:27:20:52:26:58:a4:3d:f0:0b:
                    74:8f:79:15:0d:9c:ba:b5:56:6c:25:dd:12:3e:74:
                    b0:fe:ff:6b:08:b6:b3:1e:d8:9d:7f:a8:fa:c6:5e:
                    2a:8c:81:56:b1:10:76:79:b3:a2:75:15:87:09:ca:
                    63:f8:da:88:09:b1:64:5f:d8:4b:f6:5a:3f:4d:b1:
                    2a:6a:f7:e0:71:19:ca:c0:6a:db:68:d5:22:9e:27:
                    5c:54:e3:87:4a:27:35:29:48:e2:f1:ee:69:9a:e9:
                    ef:b8:95:08:00:18:a2:20:10:2b:41:f2:04:53:7f:
                    6b:a7:bf:34:fb:90:8e:3f:78:e7:d1:3e:d8:c1:b4:
                    96:a2:5d:6a:28:7c:8d:b4:5a:26:02:7c:a0:ce:ec:
                    56:0e:38:c8:7a:4f:f3:8d:a2:39:df:6d:af:07:e9:
                    0c:ab:be:3d:e7:fe:6c:20:d5:45:3e:f2:9e:94:9f:
                    68:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:87:2C:52:D6:98:40:D9:37:06:48:AA:40:69:4D:4A:AD:80:B8:40
            X509v3 Authority Key Identifier:
                keyid:87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/323830343a373365633a383030303a3a2f33332d3333203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73ec:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5f:ed:f3:a2:4b:de:53:29:dd:8a:13:5e:5f:fd:ae:f1:4c:f5:
         4d:80:3a:36:59:ba:17:22:d6:57:8c:b2:5f:26:65:ba:d6:90:
         75:c8:fd:36:ce:e9:7f:da:16:b2:9c:40:ef:39:94:f6:d3:7b:
         5e:04:06:1a:da:2f:bf:03:3a:5a:4b:63:d4:14:99:83:8a:d7:
         da:94:f5:1b:f4:c6:e8:19:ce:cf:86:dd:d9:6c:9d:79:cb:50:
         3b:f6:79:b8:7b:37:bf:88:98:60:47:87:d2:76:63:5b:14:35:
         6c:c9:23:34:dc:7f:ad:ea:7c:5c:8e:33:c5:82:3d:7e:0f:b9:
         25:d7:45:e5:f2:46:3c:c4:bb:5f:41:5e:91:c6:23:a2:9a:ea:
         10:0a:ac:24:e6:26:d0:77:cf:43:29:45:b1:cd:21:94:aa:0d:
         12:81:fe:1c:e1:81:0c:28:21:b9:77:af:62:2f:c0:0e:59:a7:
         ee:18:92:82:f5:84:80:4f:65:49:4d:66:28:b2:7a:c6:b3:61:
         d1:32:ba:4d:c4:71:07:b3:29:4a:48:61:7e:fe:c5:10:98:81:
         4c:67:f9:11:00:c0:d8:86:ea:76:cd:2e:32:31:1a:0f:67:4c:
         41:45:bc:fb:79:0f:5a:d8:55:d1:af:66:78:f1:fb:de:2a:0b:
         2f:5d:b2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----