Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/323830343a363461633a3a2f33322d3332203d3e20323639343431.roa
File:                     323830343a363461633a3a2f33322d3332203d3e20323639343431.roa (raw, json)
Hash identifier:          ZHAk7aNn6j/HQzxmjJeVk7QuAjj6UdIxxiQbmKZ3KCc=
Subject key identifier:   72:B1:E7:78:EF:3E:72:89:C3:D4:FA:4B:7B:78:90:F5:86:1A:A6:31
Certificate issuer:       /CN=00FFFF94E89C12D2D266ECF9ACD62277C894680B
Certificate serial:       6C031F149538A0468B39E1E6876B45DDF88DB445
Authority key identifier: 00:FF:FF:94:E8:9C:12:D2:D2:66:EC:F9:AC:D6:22:77:C8:94:68:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/323830343a363461633a3a2f33322d3332203d3e20323639343431.roa
Signing time:             Fri 01 Mar 2024 23:33:58 +0000
ROA not before:           Fri 01 Mar 2024 23:28:58 +0000
ROA not after:            Fri 28 Feb 2025 23:33:58 +0000
asID:                     269441
IP address blocks:        2804:64ac::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:03:1f:14:95:38:a0:46:8b:39:e1:e6:87:6b:45:dd:f8:8d:b4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00FFFF94E89C12D2D266ECF9ACD62277C894680B
        Validity
            Not Before: Mar  1 23:28:58 2024 GMT
            Not After : Feb 28 23:33:58 2025 GMT
        Subject: CN=72B1E778EF3E7289C3D4FA4B7B7890F5861AA631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:4c:60:1d:60:58:d8:84:b5:e0:a0:92:aa:
                    7a:fd:a9:3e:7d:29:6c:56:50:09:14:c2:94:b5:60:
                    47:02:a8:2d:c9:a1:05:f1:cc:8e:d8:35:3c:89:4e:
                    58:62:a9:39:5b:db:df:98:56:cc:0e:f2:9d:15:36:
                    c7:6b:ee:64:c7:0b:b4:aa:78:be:0f:00:24:3a:09:
                    52:49:c4:72:92:6d:07:99:18:ed:8e:2f:1c:a7:f2:
                    1b:00:df:e3:c7:2f:d1:32:21:ad:eb:cc:be:c3:a1:
                    3e:fe:71:95:e3:41:2b:d9:3f:e4:1a:64:28:34:02:
                    92:f6:3b:02:82:9e:79:1d:b0:79:50:25:55:9e:c5:
                    82:82:06:cc:22:60:0a:5c:3a:f0:1a:4f:4b:10:a6:
                    35:9c:4b:24:70:d1:9f:94:86:58:3c:bb:c2:fc:64:
                    b4:5b:69:6c:a8:60:02:d8:d9:58:22:f7:aa:54:78:
                    e0:57:db:66:82:e3:86:b3:ea:e9:71:ca:9b:98:3b:
                    6d:4b:cc:22:05:e3:9d:23:2a:83:d6:d7:c5:84:9f:
                    c3:b7:2d:97:20:40:6c:5d:53:fe:fa:1d:aa:1c:a6:
                    5b:29:43:68:3f:3f:36:25:56:81:f9:ce:0e:fc:65:
                    5a:8f:c8:7e:7c:6d:05:53:cf:01:39:2c:87:53:b8:
                    5f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B1:E7:78:EF:3E:72:89:C3:D4:FA:4B:7B:78:90:F5:86:1A:A6:31
            X509v3 Authority Key Identifier:
                keyid:00:FF:FF:94:E8:9C:12:D2:D2:66:EC:F9:AC:D6:22:77:C8:94:68:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/323830343a363461633a3a2f33322d3332203d3e20323639343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:c9:15:a1:c0:33:6f:f7:06:74:55:92:79:bd:10:62:8e:63:
         f7:d3:75:9a:bf:08:fb:57:d5:a4:73:61:d2:fe:27:df:96:04:
         27:99:6a:bc:be:26:5d:bd:b2:8c:35:39:3e:e5:e5:ef:4c:9b:
         a3:1b:8e:2f:8c:6f:9f:85:89:81:77:32:2e:57:6c:1c:49:93:
         ae:77:d2:26:ed:c6:b2:bc:ee:7c:1c:2d:5e:67:35:da:5c:f0:
         71:ea:a3:e8:51:f8:05:07:6b:2a:69:25:72:b7:4e:40:dd:19:
         6b:12:47:94:47:79:45:f4:da:8b:3a:fc:fa:17:cd:d5:09:36:
         d6:db:18:35:d4:8b:08:cd:7b:ed:74:aa:7f:bf:0b:9d:e6:e1:
         c1:02:5a:36:8f:fc:0a:f0:fd:cb:76:69:ec:48:90:d6:b7:61:
         23:cb:bd:35:cd:48:8c:50:f6:c2:00:a1:a5:83:33:0a:75:64:
         a0:19:f3:91:d3:44:0c:69:cf:1b:08:fb:eb:03:73:ee:9b:de:
         a3:2a:45:1b:95:5e:4e:ed:31:f4:e1:49:6b:6a:da:43:31:f0:
         13:aa:3c:fc:b4:93:5d:df:42:e8:34:11:ad:f7:fe:8d:a4:a4:
         ee:52:a9:a3:24:d0:ba:5d:e5:dc:5a:07:a4:0d:f4:03:f2:24:
         6b:eb:7a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----