Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
File:                     323830343a3133383a3a2f33322d3337203d3e203131343332.roa (raw, json)
Hash identifier:          4uRLMTObvXpzni/sCcxfR4Ek1GntCaUYIksTKFFY85E=
Subject key identifier:   D2:91:F3:A3:3E:F8:78:C5:4A:B8:5C:97:10:D7:04:CB:5A:8D:27:0B
Certificate issuer:       /CN=70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07
Certificate serial:       710D7347926A7BB0A325BF71510D92FA44870D99
Authority key identifier: 70:DA:72:42:E1:48:C2:B1:BB:EE:8A:A2:22:CA:F3:FE:B3:BC:DA:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
Signing time:             Wed 31 Jan 2024 15:50:02 +0000
ROA not before:           Wed 31 Jan 2024 15:45:02 +0000
ROA not after:            Wed 29 Jan 2025 15:50:02 +0000
asID:                     11432
IP address blocks:        2804:138::/32 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0d:73:47:92:6a:7b:b0:a3:25:bf:71:51:0d:92:fa:44:87:0d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07
        Validity
            Not Before: Jan 31 15:45:02 2024 GMT
            Not After : Jan 29 15:50:02 2025 GMT
        Subject: CN=D291F3A33EF878C54AB85C9710D704CB5A8D270B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:fa:ac:5e:ce:59:82:ef:46:7b:79:92:4b:
                    8d:d8:66:2a:01:7f:5c:ff:89:80:7a:95:81:74:86:
                    dd:2b:d0:b2:60:9a:b0:1d:09:9e:fe:30:8d:fc:c1:
                    de:41:b9:33:cf:92:6b:40:42:08:1e:5c:c0:cb:69:
                    da:67:7f:95:33:41:0f:ec:5d:74:9b:d7:fb:94:88:
                    c4:67:22:ac:08:6c:ef:ba:7f:b2:35:e0:62:9b:0b:
                    5d:26:cb:52:af:6b:00:f4:c9:d3:54:fc:cf:89:f4:
                    5f:65:a9:12:a5:85:c2:3a:e4:bc:c3:d1:52:28:7a:
                    18:06:c8:d3:df:23:e4:35:c5:fc:62:94:63:f4:63:
                    a4:f4:6a:3f:18:2d:22:ab:b1:22:5d:38:13:c2:d7:
                    06:b3:15:73:27:91:4b:8b:6e:10:c7:96:35:63:2b:
                    ac:1e:f2:af:80:3a:45:5b:8c:8c:7e:85:82:c5:34:
                    ae:c1:03:73:d3:48:8b:7b:02:2b:c1:75:a6:f8:4a:
                    78:c1:2e:a9:9f:5c:70:5c:3f:2c:6d:2c:98:fd:c1:
                    bd:94:97:ad:40:72:57:c7:2c:ac:ed:4a:db:20:94:
                    07:aa:1b:a5:13:04:e0:b1:bb:5e:12:c9:61:72:e5:
                    3c:36:34:13:e1:a0:a0:f4:de:04:0e:24:0c:18:7b:
                    87:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:91:F3:A3:3E:F8:78:C5:4A:B8:5C:97:10:D7:04:CB:5A:8D:27:0B
            X509v3 Authority Key Identifier:
                keyid:70:DA:72:42:E1:48:C2:B1:BB:EE:8A:A2:22:CA:F3:FE:B3:BC:DA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a3a2f33322d3337203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:138::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:20:10:e2:71:be:6d:f6:d3:87:fe:1a:f6:51:7e:7f:3a:ac:
         2a:0d:63:f5:59:59:00:47:d1:1f:a2:2e:f0:d2:61:ed:13:e6:
         04:ac:8e:1c:60:e7:b8:54:cf:a3:9e:5d:37:82:5b:0e:64:a9:
         68:e8:4b:8f:35:f3:a0:89:54:25:ed:7c:37:cf:7f:32:e0:e9:
         ee:8d:69:88:43:a1:42:34:84:c0:17:04:bb:ff:f3:cd:70:34:
         2d:97:92:95:bf:7f:e0:18:85:bd:25:b5:31:96:ce:8a:c5:9e:
         ce:61:97:2e:c2:7e:0e:e9:c7:b7:fa:78:74:9d:31:53:27:c8:
         b3:ee:e4:0d:26:a8:92:1e:f1:7e:d3:20:d0:0b:2a:a8:a6:3d:
         b2:1f:d7:96:1d:ce:70:72:65:7c:6e:03:e1:9e:9f:0e:58:e5:
         3f:c9:d1:e4:84:2b:ec:69:d4:78:ad:8b:0e:16:a7:bf:79:3d:
         23:9c:2f:f9:3c:c2:83:9d:5a:bd:c1:07:e4:f2:d0:64:10:cf:
         48:48:34:c6:28:b0:16:ee:b4:7a:80:da:9e:7b:01:72:e4:c7:
         82:61:d2:1b:0a:91:59:93:43:d2:77:a1:7a:0b:d5:e1:0c:54:
         c9:12:a9:a8:5c:84:8b:21:a6:8b:2a:08:a0:be:8d:67:92:69:
         36:f6:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----