Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a383030303a3a2f33342d3334203d3e20323731353536.roa
File:                     323830343a376435633a383030303a3a2f33342d3334203d3e20323731353536.roa (raw, json)
Hash identifier:          8CCctxTpRXm8gEsPebjGGhuAXRYAhO4VrOFOSlVe/uE=
Subject key identifier:   F8:49:74:4E:3E:60:E3:1F:D4:22:8F:8D:40:92:8F:1E:F0:3F:53:6E
Certificate issuer:       /CN=849EDC8B01488DAA924378D7A31D412647B39B67
Certificate serial:       3D32807D92FC1054DFFB7DC6F6ABABFAC63701FC
Authority key identifier: 84:9E:DC:8B:01:48:8D:AA:92:43:78:D7:A3:1D:41:26:47:B3:9B:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/849EDC8B01488DAA924378D7A31D412647B39B67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a383030303a3a2f33342d3334203d3e20323731353536.roa
Signing time:             Mon 04 Mar 2024 23:29:37 +0000
ROA not before:           Mon 04 Mar 2024 23:24:37 +0000
ROA not after:            Mon 03 Mar 2025 23:29:37 +0000
asID:                     271556
IP address blocks:        2804:7d5c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:32:80:7d:92:fc:10:54:df:fb:7d:c6:f6:ab:ab:fa:c6:37:01:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849EDC8B01488DAA924378D7A31D412647B39B67
        Validity
            Not Before: Mar  4 23:24:37 2024 GMT
            Not After : Mar  3 23:29:37 2025 GMT
        Subject: CN=F849744E3E60E31FD4228F8D40928F1EF03F536E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f8:90:48:92:75:4c:0b:ec:de:68:b1:b8:d9:
                    fa:b3:00:c1:19:f3:d0:3c:1b:46:a5:44:89:0a:e7:
                    c6:a5:9b:68:2c:1f:00:6e:47:cc:e1:81:58:58:87:
                    3d:62:e0:3a:18:f5:7f:8a:19:15:23:7d:fe:1c:4e:
                    11:4c:a2:26:1c:81:85:dd:44:9a:b3:07:74:c3:bd:
                    8d:28:31:c5:2c:ee:cf:ea:33:3f:7f:e0:b6:1f:88:
                    a0:3f:3c:7a:9f:64:be:2a:d1:52:e8:45:95:eb:22:
                    a8:68:02:07:28:13:c7:d0:a5:f3:8f:28:f6:9e:c4:
                    f2:a7:cb:a0:78:8f:e9:d1:a7:f7:41:50:9c:ec:b7:
                    5c:f4:32:4b:48:26:83:cf:10:73:82:e1:ba:82:34:
                    05:2c:a7:25:59:82:8e:16:cc:83:aa:f6:6c:05:ce:
                    ee:48:95:6d:b1:1c:11:69:23:d4:15:d0:75:d4:a0:
                    b5:78:b4:fa:a6:1e:03:58:b8:44:75:3c:2a:2f:3d:
                    fe:d2:95:77:a5:65:1a:9f:8b:02:e5:02:02:9a:5b:
                    07:fa:6d:84:46:28:51:d2:f5:d7:b4:0f:29:28:37:
                    c6:db:5a:33:af:c2:e8:9a:ed:e2:8b:5b:46:90:b5:
                    6d:f8:02:f3:c5:6e:61:e6:77:3d:60:be:46:18:bb:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:49:74:4E:3E:60:E3:1F:D4:22:8F:8D:40:92:8F:1E:F0:3F:53:6E
            X509v3 Authority Key Identifier:
                keyid:84:9E:DC:8B:01:48:8D:AA:92:43:78:D7:A3:1D:41:26:47:B3:9B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/849EDC8B01488DAA924378D7A31D412647B39B67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/849EDC8B01488DAA924378D7A31D412647B39B67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a383030303a3a2f33342d3334203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d5c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2f:9b:1c:44:8c:b8:ad:6e:49:17:03:01:09:45:50:6a:f1:df:
         42:88:b3:f4:f0:f2:78:4a:54:fd:48:2c:40:d1:99:cb:e5:ef:
         52:20:b9:77:15:f9:ed:47:ce:2c:1d:05:03:46:1a:b4:6e:da:
         8b:10:33:9f:c9:fb:06:2b:dc:12:54:bb:36:ff:2a:1e:df:4e:
         4b:d8:61:0f:d4:99:3b:22:76:56:59:d6:3f:8b:d9:a9:d1:15:
         0f:ef:1f:f4:93:cb:fb:c1:49:42:17:b9:a7:a6:32:fe:8b:be:
         c5:f5:07:13:ab:c1:5e:bd:ad:6c:3c:d3:0f:c8:3f:ef:37:21:
         44:4c:32:4d:de:9b:98:3f:12:c4:fd:65:3c:1a:6c:df:57:59:
         1d:aa:30:10:cf:a6:19:e8:b1:a5:ee:72:25:89:e6:61:ee:47:
         be:35:53:f0:b5:ce:d8:1e:15:55:6e:dc:3d:b3:da:8f:03:ad:
         73:1b:0a:af:3d:73:08:bf:59:99:fc:fe:54:43:66:3c:68:d8:
         e7:26:08:ee:0e:0d:1f:3c:96:1b:c5:53:37:21:ed:fe:7a:fb:
         52:c8:69:11:17:e7:6c:f3:67:a1:df:e6:e9:6f:66:52:b7:ae:
         9c:86:4f:63:6a:f5:70:09:2c:49:cf:7c:bd:b6:44:c1:d0:bc:
         00:16:ef:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----