Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383239383a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383239383a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          8SbQIMxdRra1amFuplbIR+9YrvG10kcLDYP/F5r6xu8=
Subject key identifier:   15:77:4C:46:17:8E:35:BD:32:A8:8E:BC:C3:D1:3A:0D:6D:20:AF:39
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       34CD668D51F5214D9D82BF33A60B8660866DA122
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383239383a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Fri 22 Mar 2024 14:00:00 +0000
ROA not before:           Fri 22 Mar 2024 13:55:00 +0000
ROA not after:            Sat 22 Mar 2025 14:00:00 +0000
asID:                     262494
IP address blocks:        2804:ad8:8298::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:cd:66:8d:51:f5:21:4d:9d:82:bf:33:a6:0b:86:60:86:6d:a1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Mar 22 13:55:00 2024 GMT
            Not After : Mar 22 14:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:39:ff:72:ea:d1:10:c0:49:56:cb:a5:2c:
                    5b:d8:74:65:27:7a:52:c1:a7:ed:99:af:50:aa:54:
                    50:15:e3:82:a9:94:34:08:aa:01:5e:57:75:4a:5f:
                    68:d8:94:80:64:5d:a4:b3:b8:15:b6:4e:3d:1a:07:
                    0f:db:c6:12:85:60:4b:2b:b3:ba:c3:31:c0:89:0c:
                    b6:21:22:10:5f:e1:d8:9a:22:cb:1d:bf:0b:5c:a0:
                    91:d7:e1:f9:36:a5:a4:87:d6:ca:12:79:89:4d:7b:
                    7b:f7:fe:8b:f4:27:3e:bc:1e:f5:94:ae:45:87:57:
                    4a:f1:8e:f2:85:f8:eb:40:da:80:76:93:fb:c7:f1:
                    7b:0f:12:36:57:58:8e:ab:48:95:9c:94:7b:01:0b:
                    e8:13:04:d1:09:df:df:79:30:e5:b4:d6:4d:b4:2e:
                    f7:f7:ee:e8:c9:13:55:10:11:ea:70:70:5d:3b:73:
                    c8:d0:ed:76:51:28:6d:8f:88:9d:8e:14:a5:d7:cc:
                    59:5d:cd:4b:ad:84:74:ae:00:a4:ff:79:4c:ad:92:
                    0d:c2:95:97:d1:22:d3:5b:b7:a9:71:d4:6d:e1:99:
                    a8:51:8d:78:7d:99:bf:bb:be:77:f0:c3:f0:60:08:
                    9b:aa:0e:ab:f3:2f:b5:3e:d8:f7:e9:d2:7f:05:fd:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:77:4C:46:17:8E:35:BD:32:A8:8E:BC:C3:D1:3A:0D:6D:20:AF:39
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383239383a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:8298::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:65:e7:41:08:bc:d8:72:9a:0c:51:9d:51:cb:0c:49:38:d9:
         34:c7:68:3d:ac:7b:bd:11:a4:da:63:00:69:ac:72:a0:12:ed:
         77:6f:db:9e:2b:00:e7:f7:6e:02:e9:e3:38:15:cd:5b:0e:2f:
         1c:df:1e:79:06:51:b8:56:4f:7d:fd:a9:6d:ee:7b:0d:19:02:
         45:c0:95:9c:05:3b:5a:45:0c:00:fe:cf:11:f0:98:bf:98:38:
         18:85:fc:36:12:02:a5:a0:10:55:6c:cd:68:9f:b5:e6:a8:e3:
         ae:e2:48:15:2c:af:03:92:fd:97:5a:a5:b6:a5:b5:96:c7:83:
         5c:d2:76:1e:30:94:38:f9:37:31:79:c8:a9:0e:6d:36:1d:b9:
         27:2b:47:a4:6d:65:3d:29:5a:3f:d8:80:36:30:11:1f:66:a6:
         c4:de:ff:45:81:60:ef:36:74:f7:28:a5:99:d5:39:6b:c5:cb:
         f7:19:27:e7:c2:da:b1:0e:ea:c0:89:33:bf:f9:10:ba:76:c3:
         8d:50:29:7f:2f:ce:26:16:74:9d:b0:e3:fe:bf:c1:52:10:85:
         8d:53:c7:ff:dc:6a:d0:52:65:a6:b6:a1:14:42:bc:05:9c:c4:
         0f:1d:18:5c:86:90:f9:e9:21:f0:c0:80:9f:17:c0:27:4d:88:
         2c:b1:94:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----