Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa
File:                     323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa (raw, json)
Hash identifier:          1VDOVjT3Xb0Jjn8aPlbTsR9ZUbG8j2jp2HRAcuWEoP0=
Subject key identifier:   C7:22:56:96:3E:7D:44:A2:1D:E8:44:74:58:1E:2E:D7:F1:C8:A7:14
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       0F003E9214C6358ECFE2F92338ED96F38A5EC651
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:14:34 +0000
ROA not before:           Wed 06 Mar 2024 14:09:34 +0000
ROA not after:            Wed 05 Mar 2025 14:14:34 +0000
asID:                     262354
IP address blocks:        2804:828:c130::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:00:3e:92:14:c6:35:8e:cf:e2:f9:23:38:ed:96:f3:8a:5e:c6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:09:34 2024 GMT
            Not After : Mar  5 14:14:34 2025 GMT
        Subject: CN=C72256963E7D44A21DE84474581E2ED7F1C8A714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:62:44:41:33:3f:2c:c3:92:26:88:e7:fd:
                    18:87:ec:4d:b3:42:32:71:8f:d7:b2:9f:36:08:a0:
                    f5:da:82:14:2b:df:11:82:d0:09:30:0b:17:39:df:
                    87:7d:91:04:ab:5b:01:0c:bf:ac:7b:98:71:d5:25:
                    5c:75:10:b1:d6:29:3b:54:e5:bb:bd:dd:2f:02:fd:
                    a0:53:71:49:c2:66:e5:9c:6b:6c:5e:50:57:4e:da:
                    c1:c6:8c:ef:0b:6e:eb:31:ca:07:1c:9c:59:02:4e:
                    41:85:0c:29:ef:12:36:7c:67:13:86:df:64:64:2a:
                    b4:db:1d:08:2e:db:f7:45:26:7d:2e:97:67:01:fb:
                    7f:21:06:0c:e5:35:1b:dd:60:19:4d:d4:3f:b7:3a:
                    63:bc:27:e5:d5:ea:23:1c:e4:96:9a:71:e2:2a:93:
                    68:4e:ec:f7:16:a2:74:7b:85:9e:d1:84:6b:1b:c9:
                    e0:67:0b:a1:27:ae:38:36:9e:61:da:7c:3c:00:a3:
                    e4:be:ef:fc:c0:b4:63:0c:97:b4:29:37:5a:96:48:
                    b5:5c:3b:26:68:5a:45:dd:da:96:50:4c:1f:75:9d:
                    2e:01:67:f5:b4:99:60:ff:e3:35:da:0f:16:15:1a:
                    b6:23:6e:d7:19:90:13:15:76:eb:6c:2d:f4:6c:f9:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:22:56:96:3E:7D:44:A2:1D:E8:44:74:58:1E:2E:D7:F1:C8:A7:14
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:828:c130::/47

    Signature Algorithm: sha256WithRSAEncryption
         95:47:65:f6:df:34:50:de:63:24:f3:c5:31:fb:b1:2a:5f:4e:
         a8:f4:98:b8:be:95:d0:b4:e1:19:44:57:52:02:9f:d6:a6:4b:
         f7:9d:f2:f7:04:6b:f6:e1:4b:0c:5a:12:22:76:ab:9b:dc:97:
         fb:3e:9a:a0:cc:4c:58:68:03:ca:59:2d:00:18:ad:54:12:47:
         c3:3a:fc:a1:c1:51:c4:2d:06:5e:37:4b:59:23:ea:23:5b:f1:
         c7:23:d0:c8:47:9e:cb:16:4b:5f:8c:9b:bd:52:8a:a1:06:51:
         f6:ae:92:4e:7a:06:77:50:ee:4e:d6:b6:60:8e:c1:c4:50:1e:
         f9:32:1d:5d:81:7e:88:76:1c:19:88:3d:c7:4a:f4:ed:d1:2e:
         ee:1c:b3:6d:54:dd:96:42:4a:85:56:89:77:bd:fb:60:8f:88:
         d3:31:3e:b4:57:0f:d9:14:0f:56:8b:23:2e:28:8a:2a:19:46:
         93:58:ad:75:18:51:e6:68:7b:13:b4:dc:5e:dd:64:de:c0:97:
         bd:15:b1:58:67:7c:22:34:c5:b6:1c:e4:05:a0:5b:db:27:68:
         dc:b5:22:53:9e:1d:c8:c6:6f:d6:28:8d:e6:9e:10:d4:5a:ce:
         40:70:00:81:48:44:46:e4:73:f7:ac:2b:71:6b:9f:0d:fd:fd:
         24:c4:51:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----