Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a3a2f33322d3438203d3e20323638333230.roa
File:                     323830343a346635343a3a2f33322d3438203d3e20323638333230.roa (raw, json)
Hash identifier:          E5eAbmA+Y2AcNRY6OP0NRfVN7tWUEVJi/9cFGmFiX74=
Subject key identifier:   BD:24:F7:4F:D8:28:D0:16:7B:FF:A2:37:CD:A0:8D:72:B4:0F:C9:42
Certificate issuer:       /CN=D0436FEA91781D055687421CAEF481A6EC223F53
Certificate serial:       772E65054CEE09C4DD9BEC7121E3EBBF754441A1
Authority key identifier: D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a3a2f33322d3438203d3e20323638333230.roa
Signing time:             Mon 04 Mar 2024 15:16:49 +0000
ROA not before:           Mon 04 Mar 2024 15:11:49 +0000
ROA not after:            Mon 03 Mar 2025 15:16:49 +0000
asID:                     268320
IP address blocks:        2804:4f54::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2e:65:05:4c:ee:09:c4:dd:9b:ec:71:21:e3:eb:bf:75:44:41:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0436FEA91781D055687421CAEF481A6EC223F53
        Validity
            Not Before: Mar  4 15:11:49 2024 GMT
            Not After : Mar  3 15:16:49 2025 GMT
        Subject: CN=BD24F74FD828D0167BFFA237CDA08D72B40FC942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:37:38:3f:e1:ef:73:b6:37:0e:ad:9d:fc:
                    c0:39:f3:fb:24:1b:cf:6e:83:2a:6f:c2:d5:cf:22:
                    7f:b5:13:65:e0:ff:3c:94:75:18:29:cd:c3:0b:8a:
                    0a:17:11:b3:24:54:33:89:6c:f3:c7:48:95:c0:44:
                    b9:b7:d5:8f:f9:45:70:cc:7f:1f:be:9e:79:6e:06:
                    dc:c7:15:a8:07:a9:48:45:32:0d:81:3f:db:52:22:
                    f9:be:6a:7b:ae:f5:64:35:c5:6d:d3:2e:20:73:4a:
                    7d:9e:5b:fe:bc:fb:a1:81:82:46:c0:9f:50:75:65:
                    ab:1d:1b:59:95:e8:d9:86:04:ee:76:ae:14:f0:9e:
                    8d:44:60:cf:15:37:74:0f:fe:f1:16:60:a0:a2:6b:
                    14:e8:72:8b:82:ae:92:3b:bd:b1:d3:77:0b:2b:82:
                    1a:74:27:ae:48:5c:e4:97:58:fe:3b:7e:a3:10:f5:
                    73:fa:93:af:0e:e9:be:12:01:71:60:a6:4a:f4:6c:
                    d9:5b:ad:e0:77:73:8d:58:39:3b:60:46:44:fc:94:
                    10:8e:1c:dc:0c:30:96:56:97:56:1c:56:99:a1:12:
                    82:24:d3:4c:24:5e:75:09:d7:14:5c:e1:b5:df:14:
                    a3:5e:4c:2a:e1:0b:3c:98:99:f3:e2:43:04:b0:92:
                    34:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:24:F7:4F:D8:28:D0:16:7B:FF:A2:37:CD:A0:8D:72:B4:0F:C9:42
            X509v3 Authority Key Identifier:
                keyid:D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/D0436FEA91781D055687421CAEF481A6EC223F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a3a2f33322d3438203d3e20323638333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:8e:88:c9:dc:d2:0d:99:94:44:a2:c4:e4:9c:33:e5:8a:02:
         77:9d:e4:42:e2:93:ba:15:e7:e0:89:1f:eb:99:c2:2e:c2:65:
         5e:2a:af:fc:7f:13:2e:40:fb:21:fe:e5:e2:df:a6:6f:2b:1d:
         dc:e5:34:37:25:81:34:93:d5:aa:84:15:f7:7c:7d:b8:a5:35:
         a3:93:01:fc:5d:fc:34:a9:f5:59:64:53:14:13:a7:1b:0d:c0:
         78:95:29:87:b8:13:79:71:21:3f:86:bb:17:64:10:4f:89:f8:
         81:33:9d:c1:1f:17:0e:74:e6:44:26:7e:33:e9:04:d2:73:78:
         c4:6c:bd:8c:d4:19:28:b0:63:f5:3c:e3:c7:ef:6f:73:5f:40:
         33:d0:1d:41:a5:74:c4:1c:9b:bf:59:4c:63:83:33:b6:e8:03:
         17:e4:c1:de:4d:35:ef:33:3a:16:b4:6a:df:c9:cc:be:27:93:
         c5:3b:a7:b7:fe:32:b4:31:07:8d:72:f1:ff:67:0e:bf:90:0e:
         08:15:62:78:dd:4e:31:86:95:9d:37:8e:b9:e7:7c:80:ea:5c:
         0b:26:21:33:cb:74:52:ad:80:06:54:8b:f6:56:97:be:e1:11:
         b2:30:04:1b:f4:71:0a:28:50:52:19:ab:1c:14:00:67:6a:95:
         60:4f:c9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----