Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a653030303a3a2f33352d3335203d3e20323633313436.roa
File:                     323830343a313737383a653030303a3a2f33352d3335203d3e20323633313436.roa (raw, json)
Hash identifier:          LKuNs25I69h5f5tlxpKIMWSG2L0m1oGkQpxLRYBn6jk=
Subject key identifier:   A0:60:A1:6B:6D:23:46:AE:90:E9:CB:25:1B:F3:D7:0C:9E:63:C4:78
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       79A53562502EAD8282C2E22C248195A6ADBF57
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a653030303a3a2f33352d3335203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:44 +0000
ROA not before:           Tue 27 Feb 2024 17:25:44 +0000
ROA not after:            Tue 25 Feb 2025 17:30:44 +0000
asID:                     263146
IP address blocks:        2804:1778:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a5:35:62:50:2e:ad:82:82:c2:e2:2c:24:81:95:a6:ad:bf:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:44 2024 GMT
            Not After : Feb 25 17:30:44 2025 GMT
        Subject: CN=A060A16B6D2346AE90E9CB251BF3D70C9E63C478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3e:dc:0e:e6:46:19:01:0a:c3:53:5e:4b:99:
                    15:99:e4:9d:5e:7b:d8:d3:61:df:49:81:a7:f9:1b:
                    c5:2a:4a:79:82:6c:c6:65:49:a3:f6:37:c1:14:43:
                    70:c0:af:cd:51:9a:c1:e3:70:12:d3:5b:1a:20:d6:
                    70:d1:48:de:6d:dd:ae:e3:a8:a7:72:d4:cc:8e:ea:
                    9f:2e:a8:02:ef:f5:ad:6e:87:14:71:4b:95:8e:06:
                    a0:69:5c:9f:fb:07:5f:18:e2:8b:ee:af:f4:3e:bf:
                    30:95:3e:08:f3:41:0c:d6:86:d3:a2:ab:0c:04:b8:
                    e3:b5:8a:8d:1d:8b:c6:58:07:9e:99:35:bc:76:6b:
                    ea:8c:a0:34:5b:21:b2:a4:91:ca:54:bb:3c:70:cc:
                    64:bb:cd:33:9e:50:00:c5:d2:00:a2:76:dd:5f:40:
                    5d:5e:e6:80:11:4a:21:8d:69:1b:21:3e:c7:dd:7d:
                    99:9f:d9:20:4d:aa:fc:87:00:76:38:41:e1:87:50:
                    cb:4d:cf:7c:4e:85:92:e9:16:70:7b:12:d2:ce:91:
                    11:1e:a6:65:d9:d9:05:79:d2:ea:8f:31:b8:8d:2e:
                    e1:3b:26:3c:60:10:ab:ec:9d:8f:ef:19:fc:63:80:
                    2b:5c:17:36:d1:10:21:7f:8e:7d:cd:5e:5a:5d:14:
                    4e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:60:A1:6B:6D:23:46:AE:90:E9:CB:25:1B:F3:D7:0C:9E:63:C4:78
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a653030303a3a2f33352d3335203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         3d:87:d7:27:0f:6e:7c:7e:58:06:f0:b4:ec:c0:f3:6d:df:f5:
         eb:6f:d5:35:d4:25:34:4c:f4:80:29:ca:fb:06:63:42:ea:2e:
         bb:ea:09:67:ac:4c:4c:bc:c6:77:1e:ac:64:d2:6b:f4:37:19:
         ef:89:0c:a0:6d:b0:9b:e5:8e:68:8d:c3:93:08:ad:92:27:05:
         f7:b0:e8:53:bb:a8:05:ba:f8:4a:f2:e9:20:16:98:10:f3:14:
         b0:9c:39:72:d5:f0:11:37:dc:60:ab:46:0e:ad:b1:84:67:71:
         ee:61:ca:69:54:84:0e:23:53:bc:95:68:38:82:c2:3b:72:f6:
         15:60:ef:e6:d2:59:91:3e:d0:38:c2:98:72:5a:00:f0:2d:5e:
         88:27:2c:0f:94:99:44:81:bd:84:b1:b9:55:96:7d:37:53:a9:
         4d:4c:59:f2:81:87:d2:ba:da:46:6f:94:89:46:f3:6b:05:8a:
         cd:3f:b9:47:92:c3:12:0b:b3:eb:fe:9d:40:bf:c1:be:00:09:
         62:d0:de:e8:d0:73:83:fa:5e:33:c8:c0:40:3a:57:81:35:2e:
         ad:ea:4d:89:06:1c:a1:10:86:23:cb:08:33:79:db:1a:c2:50:
         55:3c:b6:4e:6e:ab:85:0d:4c:71:89:50:6d:ea:41:a2:86:0f:
         39:e4:f0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----