Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/323830343a373439303a3a2f33322d3332203d3e20323730393839.roa
File:                     323830343a373439303a3a2f33322d3332203d3e20323730393839.roa (raw, json)
Hash identifier:          T4FRzSuEn6oPev3oeUMaWhQtVZfsm/h3Vb6wsuH2mgA=
Subject key identifier:   55:BA:29:B3:BF:8E:BD:8E:B2:D9:CD:27:06:F2:5E:1E:6E:3A:48:05
Certificate issuer:       /CN=692E5389B43EC82E803E641336341B3122E298F3
Certificate serial:       13CF82C89371793C4712F3605BF8A2F276D6BE1A
Authority key identifier: 69:2E:53:89:B4:3E:C8:2E:80:3E:64:13:36:34:1B:31:22:E2:98:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/692E5389B43EC82E803E641336341B3122E298F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/323830343a373439303a3a2f33322d3332203d3e20323730393839.roa
Signing time:             Wed 17 Jan 2024 14:28:04 +0000
ROA not before:           Wed 17 Jan 2024 14:23:04 +0000
ROA not after:            Wed 15 Jan 2025 14:28:04 +0000
asID:                     270989
IP address blocks:        2804:7490::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:cf:82:c8:93:71:79:3c:47:12:f3:60:5b:f8:a2:f2:76:d6:be:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=692E5389B43EC82E803E641336341B3122E298F3
        Validity
            Not Before: Jan 17 14:23:04 2024 GMT
            Not After : Jan 15 14:28:04 2025 GMT
        Subject: CN=55BA29B3BF8EBD8EB2D9CD2706F25E1E6E3A4805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:16:26:71:5b:bb:9c:02:38:04:ae:d2:6e:45:
                    bd:d0:a2:1a:23:95:9d:ea:56:75:a7:bc:08:16:5d:
                    b7:98:fa:53:ec:7e:04:61:ed:de:66:0e:db:c0:3f:
                    17:75:a8:df:8f:1d:69:28:0f:e5:3a:db:d4:18:4e:
                    32:1f:33:18:db:07:78:57:af:6e:30:d8:22:28:d2:
                    76:5d:ca:89:b4:54:2a:66:e3:6e:d0:1f:1f:5d:bd:
                    86:03:b8:3c:89:08:40:6c:13:d3:90:09:f7:31:b8:
                    ec:af:e0:74:4d:39:11:27:0a:62:af:cf:22:aa:3d:
                    84:6a:79:2b:b5:39:4d:9c:82:31:97:e3:a8:88:a5:
                    28:38:e2:64:43:cb:40:c7:fe:ef:ec:9e:b8:c3:4d:
                    6b:a3:56:9d:2b:ad:31:ee:23:ae:fc:57:3b:fb:5c:
                    d7:ff:83:8c:f5:1c:39:3a:f0:04:5f:b3:ed:3f:b6:
                    b0:7e:8d:8c:3c:82:0c:64:00:84:99:b5:0c:50:f8:
                    10:77:39:f7:ce:b6:83:6b:71:78:8e:11:08:61:bf:
                    49:5e:6f:45:79:fc:b7:1f:22:3c:b6:0e:96:40:d2:
                    26:14:73:48:7d:89:67:55:a7:1c:59:41:09:2a:ab:
                    39:ec:c0:34:26:79:39:b5:c6:b2:42:59:10:c3:8d:
                    dd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BA:29:B3:BF:8E:BD:8E:B2:D9:CD:27:06:F2:5E:1E:6E:3A:48:05
            X509v3 Authority Key Identifier:
                keyid:69:2E:53:89:B4:3E:C8:2E:80:3E:64:13:36:34:1B:31:22:E2:98:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/692E5389B43EC82E803E641336341B3122E298F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/692E5389B43EC82E803E641336341B3122E298F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/323830343a373439303a3a2f33322d3332203d3e20323730393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7490::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:59:ce:77:bb:82:2a:54:f1:f5:1d:15:66:57:49:50:92:df:
         1b:bf:68:73:32:1e:d5:51:a3:c6:e5:29:4e:44:a2:d6:cf:ae:
         62:90:6f:48:e0:6a:58:1f:53:9f:05:b4:81:c3:f2:ab:1d:69:
         c8:d5:45:79:6b:6e:6c:43:1e:9c:01:5c:e1:5a:11:25:cd:60:
         74:bd:68:a5:c2:34:37:c3:48:06:0f:db:69:9d:00:c2:1d:e4:
         bd:7a:3e:fa:e8:ed:dd:85:bc:35:d7:7c:53:03:5b:ad:57:ce:
         cf:07:1b:25:e4:cf:1b:88:bb:30:34:ae:25:3f:4c:eb:33:a7:
         86:d5:e4:f1:46:df:2f:49:02:6e:3d:b8:7b:19:0b:f8:02:27:
         a3:08:53:2c:60:71:08:04:2e:f9:71:b8:a4:cc:9a:97:5d:d8:
         ef:56:90:d2:ee:90:c4:13:65:50:2e:e1:8c:27:87:d4:28:36:
         dd:7c:7f:52:5e:b4:70:0d:98:91:6b:68:e6:4a:61:3c:f1:31:
         f0:a6:bf:12:f2:d4:b1:4d:06:df:12:75:5d:81:25:6d:79:0e:
         40:71:07:71:4d:38:cd:39:e9:5b:5b:d2:50:35:6c:b7:33:73:
         88:81:06:8b:2b:73:16:e0:b3:fb:85:bc:37:be:72:d7:01:e4:
         d4:5f:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----