Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a3a2f33332d3333203d3e20323731333039.roa
File:                     323830343a373938303a3a2f33332d3333203d3e20323731333039.roa (raw, json)
Hash identifier:          3YQAWVx0W9fogZxY1hRt4TVtsS0HqSZ/QQ++sAmRR7w=
Subject key identifier:   27:8E:09:E0:9C:BF:E6:8C:98:02:82:EC:5D:66:95:17:19:57:58:3D
Certificate issuer:       /CN=443A05DE457DA61030C50B71D655B381CE793C73
Certificate serial:       272E08BC56C4287BF843D45B14980056995457C8
Authority key identifier: 44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a3a2f33332d3333203d3e20323731333039.roa
Signing time:             Mon 11 Mar 2024 17:38:23 +0000
ROA not before:           Mon 11 Mar 2024 17:33:23 +0000
ROA not after:            Mon 10 Mar 2025 17:38:23 +0000
asID:                     271309
IP address blocks:        2804:7980::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2e:08:bc:56:c4:28:7b:f8:43:d4:5b:14:98:00:56:99:54:57:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443A05DE457DA61030C50B71D655B381CE793C73
        Validity
            Not Before: Mar 11 17:33:23 2024 GMT
            Not After : Mar 10 17:38:23 2025 GMT
        Subject: CN=278E09E09CBFE68C980282EC5D6695171957583D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:43:a1:1c:b0:96:2c:56:85:1e:95:9e:d8:35:
                    d8:76:07:09:6f:0e:54:81:0f:b3:39:13:3c:7b:7a:
                    07:35:49:f9:a6:31:7d:9d:ab:4d:31:4b:d1:dd:39:
                    ff:bd:55:47:6d:16:e0:11:24:a3:ec:4e:f5:9b:9a:
                    a3:0a:d3:3e:72:9f:dd:2b:c6:71:a4:ba:26:25:c4:
                    8d:6b:8e:e7:d5:96:0d:e6:fb:bc:cd:05:25:61:41:
                    a7:0e:1e:3f:25:8d:4b:23:68:65:cd:10:83:5d:20:
                    f1:0f:31:87:45:f4:10:5c:46:a5:59:05:33:c8:32:
                    91:34:75:af:d7:c2:a7:b3:2d:c9:7a:6e:58:c1:8c:
                    0f:fb:ad:55:f5:da:fd:25:be:13:23:42:ac:7e:1c:
                    08:0b:53:9d:b2:fa:24:2a:c8:28:de:6b:e9:4e:f2:
                    c2:dd:3c:17:71:09:c7:1c:1a:ef:fd:0b:e5:fc:6c:
                    1d:2c:49:96:a2:c2:22:60:99:90:b4:c8:ba:b3:25:
                    75:fb:58:1d:66:cd:5f:15:85:91:1c:b0:2a:bc:d5:
                    5e:07:36:f7:53:0b:4e:85:c1:a4:7d:c7:3f:44:bd:
                    fa:b6:e7:84:22:28:01:27:7a:c1:3b:e8:78:16:58:
                    5f:3d:08:96:b1:0d:c2:be:ef:83:64:47:0f:6a:df:
                    a7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8E:09:E0:9C:BF:E6:8C:98:02:82:EC:5D:66:95:17:19:57:58:3D
            X509v3 Authority Key Identifier:
                keyid:44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/443A05DE457DA61030C50B71D655B381CE793C73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a3a2f33332d3333203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7980::/33

    Signature Algorithm: sha256WithRSAEncryption
         37:f0:a4:69:c8:9b:66:2e:7e:f0:5f:85:ee:f3:d6:a0:1c:7b:
         57:e9:50:d8:4b:09:4b:70:c5:2e:f5:e2:b1:73:3b:12:bf:52:
         3b:f1:99:03:7a:7d:03:04:9e:48:df:0e:e3:bc:31:d4:25:bc:
         a7:79:33:0b:af:8d:8e:30:b0:15:69:41:fc:d3:1a:d0:e9:48:
         7c:07:c5:71:f5:d0:3a:97:5e:37:4f:ef:da:3a:cd:d2:77:53:
         0b:75:c9:70:64:5a:ea:b8:a4:12:32:20:36:33:a3:07:0f:32:
         91:24:9d:35:1d:f4:a6:d5:47:ac:5a:ab:a1:fb:2a:f7:39:f1:
         17:b6:0e:e8:53:09:ca:8e:16:03:63:a0:dd:4e:c0:79:bb:91:
         d1:15:7e:91:e3:fd:29:94:33:d7:04:4a:32:5d:f3:94:d5:be:
         0a:f2:3c:81:4a:e2:31:b4:04:71:dc:29:d2:1f:e4:3f:f0:20:
         a7:bf:b6:11:aa:fe:a7:cb:1d:59:b2:3a:54:9d:0a:ee:bc:5d:
         c5:22:16:81:0c:28:a7:65:61:63:9a:3e:de:40:e0:c0:09:b9:
         57:2b:7b:b3:98:47:ec:53:c8:19:0b:25:25:d7:ff:d0:fc:79:
         3c:4e:67:0e:0b:b8:56:4d:cf:e1:4f:85:25:f7:8e:d4:bd:c7:
         25:fc:3a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----