Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33332d3333203d3e20323639313735.roa
File:                     323830343a316634633a3a2f33332d3333203d3e20323639313735.roa (raw, json)
Hash identifier:          Vbge4CyA+mEjBxoswEDdy6t38hNjgm/LJLVBn04y8f4=
Subject key identifier:   74:CF:09:36:62:A9:B3:D3:53:E5:A2:F3:87:62:BA:97:09:0B:25:87
Certificate issuer:       /CN=E3E0BE7F45FADF2C1604B1DD7C195996B74858E9
Certificate serial:       1F0ADFB9F2A36EF38366315E1EF3FD5C41383760
Authority key identifier: E3:E0:BE:7F:45:FA:DF:2C:16:04:B1:DD:7C:19:59:96:B7:48:58:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33332d3333203d3e20323639313735.roa
Signing time:             Mon 26 Feb 2024 14:58:31 +0000
ROA not before:           Mon 26 Feb 2024 14:53:31 +0000
ROA not after:            Mon 24 Feb 2025 14:58:31 +0000
asID:                     269175
IP address blocks:        2804:1f4c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0a:df:b9:f2:a3:6e:f3:83:66:31:5e:1e:f3:fd:5c:41:38:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0BE7F45FADF2C1604B1DD7C195996B74858E9
        Validity
            Not Before: Feb 26 14:53:31 2024 GMT
            Not After : Feb 24 14:58:31 2025 GMT
        Subject: CN=74CF093662A9B3D353E5A2F38762BA97090B2587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:f8:e8:75:0d:69:7f:3a:0e:81:f5:89:bc:
                    89:48:dc:de:ab:7b:57:3b:53:75:22:f6:d7:a1:ff:
                    19:ff:32:47:10:75:41:0a:f9:df:c1:72:e7:1a:4d:
                    73:68:0e:36:48:8a:1c:0c:51:ff:04:44:43:00:89:
                    b7:36:39:aa:67:37:85:00:61:4f:c2:34:21:dc:3f:
                    a8:18:10:7d:3a:d6:ff:fa:98:24:54:69:e2:66:e4:
                    37:a6:7e:c8:dc:83:3f:7f:b7:24:18:bb:4e:de:e3:
                    83:aa:d9:88:88:14:98:db:56:1e:45:8c:88:40:49:
                    bf:2b:0b:a4:5d:aa:e1:38:f1:de:e8:f8:b5:c4:6e:
                    68:dc:0b:a7:e5:ff:9c:12:9d:c0:b6:5e:77:9b:82:
                    fd:34:fc:bc:d7:7d:34:85:3f:30:f3:e9:49:82:ce:
                    24:4d:7f:05:f1:d3:da:d6:0b:76:af:96:92:06:fd:
                    85:e4:0c:3c:e1:eb:54:a6:19:68:06:b3:92:c0:56:
                    41:16:38:a2:0c:d4:33:12:36:9d:86:df:12:4d:ee:
                    2a:05:64:36:42:9a:26:54:09:c8:0d:a2:4e:65:e8:
                    1e:2d:2f:85:ea:aa:2b:71:6c:7a:17:bf:a2:f8:62:
                    b1:87:cf:07:33:15:b4:c5:79:fa:0c:58:a0:f5:d8:
                    3a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CF:09:36:62:A9:B3:D3:53:E5:A2:F3:87:62:BA:97:09:0B:25:87
            X509v3 Authority Key Identifier:
                keyid:E3:E0:BE:7F:45:FA:DF:2C:16:04:B1:DD:7C:19:59:96:B7:48:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33332d3333203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f4c::/33

    Signature Algorithm: sha256WithRSAEncryption
         4b:2f:bd:a8:5c:fe:81:45:8b:2f:ed:ff:38:95:b0:2b:df:77:
         28:e3:f7:0a:c3:30:43:15:1a:88:9f:58:1d:39:93:6c:2a:4e:
         73:8d:40:06:d2:d8:59:7c:45:5b:bb:a9:6b:08:9f:28:2f:64:
         5f:59:42:bc:53:73:a0:9a:15:44:29:f9:d0:d0:52:c2:52:4b:
         c8:24:83:d6:97:fc:ad:9c:ed:5f:06:4c:1c:5c:ef:9e:f5:f4:
         99:6c:ab:3f:00:ff:ef:65:fe:3a:5c:6f:76:e6:a5:d8:de:8e:
         f0:fa:e0:82:02:5c:80:31:d7:bf:6e:85:9c:c3:c6:77:03:a0:
         2c:67:73:d4:ed:a8:ef:1b:7b:2c:64:c9:62:21:d0:d8:33:9d:
         91:bf:f1:18:8c:c5:3a:b4:d8:f9:00:b6:d8:92:03:1d:37:df:
         a8:32:4c:ec:43:d8:66:18:de:01:0f:b7:12:18:b3:23:b2:1c:
         e6:ae:64:1a:39:21:cf:1f:03:f6:52:04:3a:f2:8a:26:93:38:
         ac:b0:ae:61:72:60:c9:92:cf:27:3b:06:e1:0a:ce:e4:df:16:
         b6:e0:d0:b6:f2:25:a2:e7:6a:ee:e0:c9:10:69:6d:92:3e:5f:
         c4:1f:4e:a4:a3:23:29:10:5f:a7:7c:6d:a0:4f:a5:3f:7d:ec:
         3c:77:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----