Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a383030303a3a2f33332d3333203d3e20323731353939.roa
File:                     323830343a376530633a383030303a3a2f33332d3333203d3e20323731353939.roa (raw, json)
Hash identifier:          8oL9AgvNVbwEQMTCy1SZk9tCqsVSfaMsoZIacLiOVdc=
Subject key identifier:   F8:F1:FC:F4:48:70:8A:A5:F2:E9:33:E1:15:49:BD:6D:53:9F:7B:A3
Certificate issuer:       /CN=3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5
Certificate serial:       68C303403933CC1A9D0E49254ED727133D5271C0
Authority key identifier: 3C:E5:9A:22:55:B0:F6:DB:40:FE:D1:C9:7D:0E:B3:93:55:0A:FA:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a383030303a3a2f33332d3333203d3e20323731353939.roa
Signing time:             Thu 28 Mar 2024 22:04:54 +0000
ROA not before:           Thu 28 Mar 2024 21:59:54 +0000
ROA not after:            Thu 27 Mar 2025 22:04:54 +0000
asID:                     271599
IP address blocks:        2804:7e0c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c3:03:40:39:33:cc:1a:9d:0e:49:25:4e:d7:27:13:3d:52:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5
        Validity
            Not Before: Mar 28 21:59:54 2024 GMT
            Not After : Mar 27 22:04:54 2025 GMT
        Subject: CN=F8F1FCF448708AA5F2E933E11549BD6D539F7BA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:29:d9:34:bc:be:91:30:e9:e6:29:79:a4:
                    f8:f5:47:fd:e7:29:d8:2b:87:e7:58:1d:cb:c7:d8:
                    53:fb:34:e8:1c:fe:c6:9b:e9:15:1d:03:92:15:39:
                    6e:c6:e7:78:4d:df:9d:1d:8d:2d:2a:40:3e:c4:45:
                    ca:40:06:b1:1d:c4:0b:a2:93:e7:75:9e:a5:1a:6a:
                    ab:d7:a4:c0:7e:ba:45:eb:0f:96:95:0a:f0:fa:d7:
                    83:0e:13:20:29:5f:dd:73:6b:51:44:3a:3d:8d:77:
                    cd:ad:ad:95:36:ed:46:eb:9f:9f:40:4f:3e:09:1d:
                    99:10:a6:e9:2b:bc:fa:3f:e8:72:93:b9:c1:15:51:
                    f3:89:89:3b:80:14:82:5e:19:eb:19:b8:e6:ad:b3:
                    ee:e1:a8:4f:8a:d7:0c:89:b4:d8:0a:29:06:c8:09:
                    a0:03:cb:5d:4a:5b:67:b4:82:c2:01:a9:c9:ab:74:
                    64:13:62:4b:55:c1:5b:00:75:5e:84:cd:93:d0:51:
                    5b:27:03:6a:59:23:a6:e4:3b:a4:0f:4f:cf:82:5d:
                    16:f2:4c:9b:1a:ae:1d:b7:ad:e2:aa:45:7b:f0:be:
                    e6:6d:2f:4f:5f:46:b8:bb:ad:44:78:05:72:9c:3e:
                    0b:c7:26:ec:d6:1b:be:c2:0d:63:42:9e:2b:2c:3c:
                    f2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F1:FC:F4:48:70:8A:A5:F2:E9:33:E1:15:49:BD:6D:53:9F:7B:A3
            X509v3 Authority Key Identifier:
                keyid:3C:E5:9A:22:55:B0:F6:DB:40:FE:D1:C9:7D:0E:B3:93:55:0A:FA:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a383030303a3a2f33332d3333203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e0c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         32:70:26:31:88:b4:41:b3:a5:62:4b:f2:2a:9f:b5:0e:1f:de:
         3d:df:32:22:20:ac:37:5f:b4:58:53:d6:29:3c:4b:cd:0f:1b:
         b7:d2:9f:ba:ea:ae:16:35:f4:ef:b7:d1:d7:72:c5:b0:53:88:
         2f:48:fb:9a:59:48:2c:9d:3d:80:24:63:3b:c7:cf:fa:1b:3f:
         2c:cb:20:c7:75:5d:f1:92:e7:3d:e7:3a:83:0a:54:1d:61:d4:
         0e:30:6d:1e:d2:a4:61:b7:37:e0:a3:ec:a0:6c:c0:3a:4e:d2:
         06:6f:f0:58:81:81:0b:e9:f1:71:a7:17:3a:74:80:03:76:ea:
         2f:6c:63:2f:0f:3a:62:53:da:e4:d1:45:4e:c5:c3:8d:42:ba:
         f8:b2:4f:ad:39:ab:61:51:17:c1:ba:0e:31:7c:52:e5:d2:a4:
         51:1e:f1:9d:9d:bb:56:7a:28:b3:f5:8d:0d:9c:fd:cb:c6:d5:
         96:70:48:7c:3e:43:ea:0c:51:67:6a:13:57:66:f4:e9:e4:6c:
         54:3b:05:63:32:5b:49:cf:a7:f3:bc:a2:2a:3a:f6:59:d8:38:
         53:a6:e0:83:32:b1:31:6e:aa:4f:03:e4:60:fe:72:16:75:53:
         38:41:8d:e7:dd:bd:18:52:33:24:fd:b0:a5:2e:58:cb:75:ce:
         c9:e9:b2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----