Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/323830343a363035343a383030303a3a2f33342d3334203d3e20323639313630.roa
File:                     323830343a363035343a383030303a3a2f33342d3334203d3e20323639313630.roa (raw, json)
Hash identifier:          vrYJPV3C+3Bd6WDET7QznOQP6v582ig+tKc4MxRgyqo=
Subject key identifier:   54:DF:59:D7:4A:28:01:C5:AE:82:57:F5:98:78:2D:0E:E4:C9:A9:97
Certificate issuer:       /CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
Certificate serial:       7955CD44110886CD4D2F904DF51E8F35668675
Authority key identifier: 72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/323830343a363035343a383030303a3a2f33342d3334203d3e20323639313630.roa
Signing time:             Thu 11 Apr 2024 13:56:38 +0000
ROA not before:           Thu 11 Apr 2024 13:51:38 +0000
ROA not after:            Thu 10 Apr 2025 13:56:38 +0000
asID:                     269160
IP address blocks:        2804:6054:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:55:cd:44:11:08:86:cd:4d:2f:90:4d:f5:1e:8f:35:66:86:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
        Validity
            Not Before: Apr 11 13:51:38 2024 GMT
            Not After : Apr 10 13:56:38 2025 GMT
        Subject: CN=54DF59D74A2801C5AE8257F598782D0EE4C9A997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:02:c9:ba:1b:e6:64:bf:1c:93:1b:cd:16:
                    81:73:35:5b:24:db:56:07:51:a2:d3:43:84:94:91:
                    bd:12:ad:d0:4e:0a:d8:42:8c:0f:83:33:47:8f:4d:
                    fc:fe:d1:7d:13:46:61:4d:05:b1:25:47:01:64:1e:
                    4b:cb:eb:14:15:e3:29:5e:e7:7d:12:d4:af:cb:c5:
                    66:a5:8a:3f:4d:f8:c3:c4:ea:74:25:a0:84:90:7f:
                    b8:54:0a:c6:ba:b8:13:b2:da:35:49:ff:50:25:b6:
                    39:23:af:46:12:f2:2d:db:f7:46:9e:73:f7:10:79:
                    fb:4d:a4:a3:6a:db:73:40:e4:56:4f:9f:df:e6:0f:
                    eb:fc:b9:99:6f:e2:76:9f:4e:1d:cd:6b:e2:df:08:
                    13:50:25:2d:86:62:af:38:a3:4d:11:ff:42:5b:f7:
                    bf:af:a5:aa:32:b2:38:8c:f7:fb:99:46:32:1a:2c:
                    f0:b1:19:63:03:ec:cb:70:26:9e:ab:f0:0e:97:29:
                    32:16:9b:61:1b:24:3a:e4:f5:3b:61:e5:08:a4:1a:
                    fd:85:77:2f:dc:e8:99:18:90:e5:d5:ef:06:af:6f:
                    41:24:18:bb:12:12:fc:06:b5:7f:74:06:6f:96:0c:
                    99:52:86:46:a7:35:8c:5c:32:e0:3b:5a:6e:bb:9d:
                    f9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DF:59:D7:4A:28:01:C5:AE:82:57:F5:98:78:2D:0E:E4:C9:A9:97
            X509v3 Authority Key Identifier:
                keyid:72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/323830343a363035343a383030303a3a2f33342d3334203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6054:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         28:41:45:b7:4a:83:d2:ad:ae:cd:b4:c2:d9:41:1c:26:e4:e1:
         b8:03:66:b6:6b:29:5c:fe:98:dd:1e:1d:4e:d3:50:ea:9f:16:
         7e:e9:5b:c6:47:2c:87:af:a5:8b:a7:07:b8:19:be:81:2f:36:
         48:ac:f9:45:da:98:e4:e3:a7:8c:a6:dc:ef:c7:e5:8c:41:61:
         c7:52:18:18:b1:9b:15:5a:bd:84:52:a6:63:53:66:e6:0c:ad:
         11:42:00:84:a5:5e:e7:d3:1c:77:82:9b:df:69:94:d1:50:a4:
         57:6c:ff:53:ca:b7:43:76:2f:38:08:00:62:8f:d5:57:41:d7:
         39:ad:e3:aa:49:30:b2:b1:21:47:40:8f:0e:63:b5:4d:81:bb:
         d9:81:48:50:66:98:2e:92:a9:6e:c9:ff:e3:3e:42:25:dd:b9:
         b0:7a:67:f7:9a:f4:33:3d:26:0d:cf:bf:9f:09:d3:d8:bc:53:
         76:82:ad:50:bb:06:0a:39:b7:d1:84:c2:48:b6:e5:5c:d3:29:
         fb:67:94:ba:2e:58:ad:7d:8c:a8:6c:79:5c:a6:1e:d8:35:45:
         a8:fa:1c:9f:81:9b:e0:1e:77:08:5f:9c:79:e7:4d:f5:3d:50:
         c7:ae:19:18:f0:d0:b0:17:f6:6c:58:b2:82:ed:b5:3b:62:c5:
         12:56:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----