Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030303a3a2f34362d3436203d3e20323730323636.roa
File:                     323830343a363936303a353030303a3a2f34362d3436203d3e20323730323636.roa (raw, json)
Hash identifier:          pq4WzsS9NjYcXjJnwVcONqG1RocLu99J/RItHtACqgc=
Subject key identifier:   79:89:0E:2E:FE:73:B3:0D:4E:E1:50:57:15:92:27:4C:A8:9A:1F:6F
Certificate issuer:       /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial:       0C6203C4BEB85B63B98DA1962A4BA81AD1E02109
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030303a3a2f34362d3436203d3e20323730323636.roa
Signing time:             Wed 03 Apr 2024 13:53:22 +0000
ROA not before:           Wed 03 Apr 2024 13:48:22 +0000
ROA not after:            Wed 02 Apr 2025 13:53:22 +0000
asID:                     270266
IP address blocks:        2804:6960:5000::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:62:03:c4:be:b8:5b:63:b9:8d:a1:96:2a:4b:a8:1a:d1:e0:21:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Validity
            Not Before: Apr  3 13:48:22 2024 GMT
            Not After : Apr  2 13:53:22 2025 GMT
        Subject: CN=79890E2EFE73B30D4EE150571592274CA89A1F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:32:7f:34:fd:2b:3d:b8:98:6a:46:bb:96:c7:
                    f5:71:64:91:2d:21:c6:f1:52:c9:6a:8f:7e:8f:58:
                    fd:28:72:a6:fc:6f:d5:71:5f:2b:49:e6:d2:3f:54:
                    37:1d:fe:9c:5d:b8:0c:a7:be:20:89:d8:1b:f1:33:
                    c9:69:27:c8:14:7d:ec:fc:47:e6:77:fd:c8:b6:61:
                    d5:12:07:23:98:f3:ac:19:99:03:c3:18:16:e0:12:
                    ea:f3:14:b1:5c:e9:c1:d1:21:85:92:7e:aa:e2:5c:
                    11:34:6f:d4:94:f5:e8:7a:b7:b6:7e:a6:b6:a3:db:
                    21:12:ea:89:aa:16:f2:76:f0:d7:ff:a9:a7:a1:d1:
                    fe:83:9d:1b:7e:9a:55:13:27:fc:c7:0b:8f:99:4d:
                    73:4a:e0:98:2b:bd:20:cc:e2:39:2b:dd:9e:9e:24:
                    b3:93:85:9b:27:c4:0b:b4:14:22:b2:9d:08:c6:d4:
                    21:0a:92:2d:6d:1c:1c:5f:37:db:30:a9:fc:39:04:
                    bd:3e:af:4a:ac:e9:bf:13:4e:45:8d:db:65:2f:fa:
                    e2:0c:42:fa:cd:dd:8c:32:16:ce:2a:b1:ed:1c:9d:
                    34:10:a6:e3:20:56:bc:79:f2:5a:90:99:b3:5e:03:
                    d3:00:55:c3:80:79:35:52:88:79:0f:23:af:c8:36:
                    d7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:89:0E:2E:FE:73:B3:0D:4E:E1:50:57:15:92:27:4C:A8:9A:1F:6F
            X509v3 Authority Key Identifier:
                keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030303a3a2f34362d3436203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:5000::/46

    Signature Algorithm: sha256WithRSAEncryption
         51:1b:35:92:3c:bf:84:3f:aa:e0:7b:5d:91:11:db:af:ba:b4:
         8e:d5:36:8f:78:bb:b7:fa:8f:df:d4:d5:58:05:3d:9f:de:92:
         07:5c:d2:31:4f:d2:f6:24:9f:ba:40:de:29:88:cd:fc:a1:7b:
         0c:9e:39:d6:ed:a3:dd:2f:06:8c:77:aa:3d:e1:87:87:2e:ff:
         79:84:fc:5f:35:18:0c:fa:c0:96:2f:86:2b:d5:c9:0d:8f:7c:
         57:b7:e5:ff:10:ae:6a:8a:2c:0e:8e:1f:0e:61:5e:51:e3:5d:
         d7:79:58:5d:2b:a7:a3:ae:f6:c4:2f:5c:9e:4c:14:ba:93:25:
         45:7c:74:12:c8:35:69:00:53:4c:d8:df:32:9c:15:32:b9:62:
         3c:95:80:98:5c:b3:2e:51:e1:d9:d2:90:e3:6c:ba:96:8d:aa:
         a9:ed:d6:9e:4a:22:58:76:10:50:b0:b7:db:3d:a2:9b:02:10:
         7e:82:3d:ae:fe:41:47:f9:82:5a:98:c8:47:5a:a2:f4:f6:24:
         6b:96:66:92:63:bb:f4:2a:6d:92:cb:0a:37:d6:2d:e0:68:67:
         94:7b:75:07:7c:4a:de:e6:4e:d2:a3:ab:c2:ca:5e:1b:fd:c8:
         73:de:ce:8f:b2:e1:d3:b7:86:74:1f:6c:df:29:6d:63:b7:b2:
         cf:44:d7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----