Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a383030303a3a2f33342d3334203d3e20323731363132.roa
File:                     323830343a376534303a383030303a3a2f33342d3334203d3e20323731363132.roa (raw, json)
Hash identifier:          PXNcprHQ6mpv6LJQbUbR0twxMfZOxFUufh6blUpYfJI=
Subject key identifier:   3D:97:B1:73:B5:9A:3F:44:24:0C:42:20:B1:68:C1:B5:E2:D1:67:28
Certificate issuer:       /CN=365EB380D1AF8407FD93545D5B6D63209853804F
Certificate serial:       76B1F3D53F0C2FC7C62D73E5778CCF58D0970DE8
Authority key identifier: 36:5E:B3:80:D1:AF:84:07:FD:93:54:5D:5B:6D:63:20:98:53:80:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/365EB380D1AF8407FD93545D5B6D63209853804F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a383030303a3a2f33342d3334203d3e20323731363132.roa
Signing time:             Tue 06 Feb 2024 00:59:13 +0000
ROA not before:           Tue 06 Feb 2024 00:54:13 +0000
ROA not after:            Tue 04 Feb 2025 00:59:13 +0000
asID:                     271612
IP address blocks:        2804:7e40:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b1:f3:d5:3f:0c:2f:c7:c6:2d:73:e5:77:8c:cf:58:d0:97:0d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365EB380D1AF8407FD93545D5B6D63209853804F
        Validity
            Not Before: Feb  6 00:54:13 2024 GMT
            Not After : Feb  4 00:59:13 2025 GMT
        Subject: CN=3D97B173B59A3F44240C4220B168C1B5E2D16728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:07:f6:48:0e:5d:c6:97:8a:c2:b4:d0:09:
                    60:cb:e1:fb:01:28:80:67:f7:42:4c:00:7b:2e:cd:
                    80:93:54:19:36:d8:c8:ec:d2:fe:fb:66:89:3c:d4:
                    a0:24:8e:15:3c:f5:49:8f:2c:cb:2a:be:ed:12:22:
                    a1:6e:72:83:72:56:ee:02:41:2f:b5:0b:87:a2:78:
                    33:88:6a:c4:7a:87:a8:f9:ec:29:68:1a:52:ba:8b:
                    03:cf:4c:68:10:a8:0c:56:86:9c:f0:de:b6:f0:74:
                    ce:bf:71:14:0d:c7:00:f7:d6:eb:fe:d3:7b:1e:e0:
                    65:b2:e3:cf:59:4c:98:bf:b8:51:08:dc:f7:b1:21:
                    bc:58:66:99:94:60:42:3d:69:37:43:87:b2:05:a7:
                    38:57:3c:08:d0:a2:98:3f:85:42:9a:a6:1f:91:83:
                    d4:9f:f6:75:57:5b:46:ac:bf:a3:2d:d2:4c:1f:fc:
                    e8:d8:04:db:0a:f0:3c:9e:58:e0:ba:fd:52:6a:83:
                    b7:bf:25:6a:ad:dc:7e:fb:5e:75:9a:92:5d:3f:73:
                    31:d8:f2:c8:57:08:74:fa:bc:f1:c5:5d:c5:02:b0:
                    95:3b:51:e1:37:d7:a0:2b:86:c3:6a:f0:d8:ae:15:
                    bd:c3:53:6b:1c:51:2a:af:58:bf:3c:ea:d6:02:42:
                    0e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:97:B1:73:B5:9A:3F:44:24:0C:42:20:B1:68:C1:B5:E2:D1:67:28
            X509v3 Authority Key Identifier:
                keyid:36:5E:B3:80:D1:AF:84:07:FD:93:54:5D:5B:6D:63:20:98:53:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/365EB380D1AF8407FD93545D5B6D63209853804F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/365EB380D1AF8407FD93545D5B6D63209853804F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a383030303a3a2f33342d3334203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1e:c6:a2:0c:8a:a7:48:c5:ea:dd:5a:f8:fe:f4:e6:bb:b0:95:
         26:f1:32:9e:ad:3d:98:ed:7a:a6:67:47:2b:b0:bf:ec:93:53:
         e8:72:1f:b4:6c:a8:1e:46:27:75:4d:bb:ea:d9:79:a7:8d:4e:
         0b:42:60:ca:0e:be:f0:2a:67:f2:82:d1:6d:57:b1:e4:7a:82:
         60:23:c2:9b:74:b2:ab:c7:cc:c7:54:b2:46:76:f8:56:ea:f5:
         03:cc:b0:ad:c4:f4:89:07:bf:87:31:f6:d7:d4:d6:9a:17:89:
         d4:f3:22:9f:55:a9:7b:95:53:be:ad:ed:06:83:a5:a9:83:e7:
         ee:22:bf:0b:88:d2:ee:5e:b8:2e:a2:b7:3b:bd:51:03:7c:36:
         30:84:cd:21:20:30:ba:56:10:e9:8a:bb:c7:66:5d:11:75:27:
         c5:e0:d9:97:1f:96:bd:26:97:4d:ba:ef:aa:bd:37:89:3b:6b:
         33:17:59:c0:dc:44:05:e3:69:bc:69:81:67:bf:7a:29:68:dc:
         40:71:94:5e:8b:85:e3:37:ec:60:96:93:d8:f2:10:ec:e2:f2:
         cf:be:79:a4:ac:da:a9:57:36:c8:dd:23:14:da:78:17:f3:e9:
         bd:3e:77:b2:c8:ec:92:3a:d5:45:9a:ae:87:78:8c:b2:dd:4c:
         25:c9:67:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----