Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/323830343a356537383a3a2f33322d3438203d3e20323639303335.roa
File:                     323830343a356537383a3a2f33322d3438203d3e20323639303335.roa (raw, json)
Hash identifier:          Es0wVg41uEeIL4M2n0Ww5uzqZgT3zD+qe5FqWQ1HuQE=
Subject key identifier:   1D:77:BC:96:D4:2E:AD:33:E4:F9:B0:27:E6:49:A4:DE:2A:7F:8F:B7
Certificate issuer:       /CN=4EEC2CA8965609D2BD3D84A6ECA8A232C3B807C4
Certificate serial:       73C002CE2277152E8427BE8433B8D8F6CA2F3704
Authority key identifier: 4E:EC:2C:A8:96:56:09:D2:BD:3D:84:A6:EC:A8:A2:32:C3:B8:07:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EEC2CA8965609D2BD3D84A6ECA8A232C3B807C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/323830343a356537383a3a2f33322d3438203d3e20323639303335.roa
Signing time:             Thu 15 Feb 2024 20:47:15 +0000
ROA not before:           Thu 15 Feb 2024 20:42:15 +0000
ROA not after:            Thu 13 Feb 2025 20:47:15 +0000
asID:                     269035
IP address blocks:        2804:5e78::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c0:02:ce:22:77:15:2e:84:27:be:84:33:b8:d8:f6:ca:2f:37:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EEC2CA8965609D2BD3D84A6ECA8A232C3B807C4
        Validity
            Not Before: Feb 15 20:42:15 2024 GMT
            Not After : Feb 13 20:47:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cc:3a:17:f6:28:12:20:07:8d:40:c9:11:de:
                    88:1b:5a:56:38:62:c4:0d:ba:36:29:df:06:ee:ca:
                    77:a3:49:1f:36:e3:a5:33:58:e3:3e:ff:ee:d9:b7:
                    c9:3b:cc:54:bb:c4:e1:bd:0f:18:44:08:96:70:0d:
                    77:e8:ed:90:4a:b4:23:27:45:c8:46:08:67:00:77:
                    4e:3e:8c:df:99:f8:f1:d5:c9:ac:94:32:f5:f1:ed:
                    d0:0b:5a:94:a5:45:a1:a1:9a:1c:fb:ad:3b:84:b2:
                    55:84:20:e8:11:5a:13:1d:31:d2:92:79:13:94:7e:
                    d1:c2:6e:42:22:9e:04:57:ff:73:96:57:ce:18:6f:
                    d3:df:a7:1a:fc:d3:18:c1:b6:1c:09:47:6d:41:cc:
                    f3:b0:25:70:4d:b3:c8:88:b9:6d:90:bd:3b:ca:b7:
                    ef:f3:20:53:74:5d:ab:c6:cc:45:b5:c3:18:16:0f:
                    6b:da:8f:08:6b:46:5a:d1:13:68:40:95:01:b4:fe:
                    0a:89:57:af:1f:09:f2:2f:ce:e6:04:cb:49:d0:63:
                    d3:1d:8f:93:2b:a2:03:e0:ff:9b:57:3d:76:fb:bf:
                    2c:41:99:c0:8c:be:c4:7f:3a:cd:e1:6a:9c:01:48:
                    67:4f:e5:8f:83:9a:75:7a:2c:9a:19:0a:31:7e:ad:
                    f7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:77:BC:96:D4:2E:AD:33:E4:F9:B0:27:E6:49:A4:DE:2A:7F:8F:B7
            X509v3 Authority Key Identifier:
                keyid:4E:EC:2C:A8:96:56:09:D2:BD:3D:84:A6:EC:A8:A2:32:C3:B8:07:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/4EEC2CA8965609D2BD3D84A6ECA8A232C3B807C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EEC2CA8965609D2BD3D84A6ECA8A232C3B807C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/323830343a356537383a3a2f33322d3438203d3e20323639303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e78::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:e4:78:b1:ec:e9:0b:39:5c:d7:bd:de:a8:64:5a:32:aa:15:
         0b:bc:ca:3c:48:67:13:ef:cb:44:e4:98:e9:f2:49:bb:a3:5c:
         ed:5e:40:8c:44:6a:4a:6a:d3:a3:82:a5:c4:d7:25:99:b6:16:
         d3:1a:18:14:29:ff:53:a6:81:40:2d:71:65:a7:17:8e:8d:7f:
         11:3c:72:66:f4:75:6c:0e:31:39:b9:d7:e0:c4:04:04:c8:dc:
         ee:dd:46:b1:c4:92:35:0a:a8:ee:64:09:94:7f:40:19:63:72:
         dc:10:43:53:85:60:c5:43:71:8e:e3:a9:38:2f:4b:69:14:aa:
         55:90:c8:de:f3:00:95:2a:f8:14:f0:b6:f7:30:c7:11:69:5b:
         90:75:18:ad:c3:26:6c:38:8b:4a:1b:b0:a2:e4:5a:de:d0:e4:
         df:05:48:a4:8d:7d:1d:f2:47:d4:56:fa:2f:84:3d:6d:40:a3:
         56:cb:a5:48:15:f6:13:a5:8d:ab:44:7d:a5:14:44:52:61:3b:
         cd:8a:9c:6d:4d:60:05:f3:ad:c3:ee:77:3e:a5:72:28:1a:74:
         7f:72:ea:93:d0:34:32:37:2d:64:f1:51:6e:71:0f:15:26:2b:
         43:9e:86:50:87:91:b5:84:92:48:cb:8d:b6:2c:39:69:76:7c:
         8a:75:70:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----