Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/323830343a373938383a3a2f33322d3332203d3e20323731333131.roa
File:                     323830343a373938383a3a2f33322d3332203d3e20323731333131.roa (raw, json)
Hash identifier:          C6IkJBB+RVzIB6jLZopHpgz6dIMVqRx9jvdamuIjK0g=
Subject key identifier:   3B:F4:B4:5C:34:7A:1D:04:6C:FD:47:9B:3E:11:31:AD:EF:28:DA:F9
Certificate issuer:       /CN=9C212610E4B3678AE5982482A8BB9594A109BDE1
Certificate serial:       66D959B2A77C5EF66B86F4808C81BF50B2132B83
Authority key identifier: 9C:21:26:10:E4:B3:67:8A:E5:98:24:82:A8:BB:95:94:A1:09:BD:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/323830343a373938383a3a2f33322d3332203d3e20323731333131.roa
Signing time:             Wed 20 Mar 2024 11:45:35 +0000
ROA not before:           Wed 20 Mar 2024 11:40:35 +0000
ROA not after:            Wed 19 Mar 2025 11:45:35 +0000
asID:                     271311
IP address blocks:        2804:7988::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d9:59:b2:a7:7c:5e:f6:6b:86:f4:80:8c:81:bf:50:b2:13:2b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C212610E4B3678AE5982482A8BB9594A109BDE1
        Validity
            Not Before: Mar 20 11:40:35 2024 GMT
            Not After : Mar 19 11:45:35 2025 GMT
        Subject: CN=3BF4B45C347A1D046CFD479B3E1131ADEF28DAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:bd:7b:59:ab:e0:8a:a9:b6:e1:95:18:c7:
                    f5:21:96:cc:e5:c9:5f:3a:52:35:a6:50:e7:a4:84:
                    f9:c3:6f:fb:b0:41:1c:49:ee:fd:67:ae:b2:6c:1d:
                    a2:12:91:86:46:08:6a:33:e8:3d:94:1a:55:82:25:
                    cf:18:8d:e0:87:f4:3f:35:d6:4a:5f:83:35:d9:4a:
                    2a:61:7a:82:e9:9d:b2:71:d7:1d:64:63:84:0e:30:
                    5f:fb:34:7b:14:f4:68:df:3e:db:a6:57:7f:a5:4d:
                    2d:ce:d5:45:67:c0:c6:ca:f1:f0:b6:f7:21:9f:91:
                    60:5b:6b:bd:23:3d:31:5a:ab:ca:3d:5f:4f:46:5f:
                    ef:9d:1b:26:40:a3:3c:54:ad:8c:72:4d:63:c4:12:
                    67:83:51:75:85:c8:8a:8d:06:9c:2a:bf:be:ea:67:
                    f1:b1:dd:a9:72:8b:7d:06:86:8b:b6:31:00:26:ad:
                    58:bb:a3:5c:47:eb:4d:0c:39:06:49:58:a3:8e:7b:
                    59:9f:aa:a3:a2:84:09:6d:e7:5f:3f:1d:fa:2d:38:
                    78:c1:e5:ba:74:5a:1e:bc:65:f3:70:c7:c4:f3:1f:
                    33:1c:7b:29:f2:84:58:58:0c:ed:5d:da:73:64:00:
                    6c:19:84:ff:f8:bb:db:56:09:c7:44:5e:61:f4:bf:
                    fa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F4:B4:5C:34:7A:1D:04:6C:FD:47:9B:3E:11:31:AD:EF:28:DA:F9
            X509v3 Authority Key Identifier:
                keyid:9C:21:26:10:E4:B3:67:8A:E5:98:24:82:A8:BB:95:94:A1:09:BD:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/323830343a373938383a3a2f33322d3332203d3e20323731333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7988::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:8a:ac:ff:a3:4e:34:a3:cc:0d:d9:9d:d5:00:1e:c4:b2:47:
         79:cb:0f:9b:34:d6:24:9b:a1:2e:dd:47:69:e3:8e:77:d7:65:
         e0:6a:dc:e8:43:9d:ed:e7:7b:85:01:2c:ac:d1:8e:2f:00:a8:
         ea:eb:8b:19:5b:46:4f:5d:2f:86:57:25:9e:a1:53:b9:60:0b:
         f2:ca:df:ac:10:00:62:bf:71:78:6e:d4:43:a5:26:fb:99:88:
         3e:68:e6:61:ee:8a:e9:e3:a7:b3:26:4f:61:6f:cc:7a:ca:e1:
         6b:7c:7d:82:d1:66:f6:fd:fa:da:3b:04:53:6f:56:74:40:68:
         7d:b7:a1:1c:88:07:fb:2d:e2:9c:4c:6c:12:4a:0c:04:2f:48:
         9b:61:a3:5c:0f:9b:b6:c8:6c:5f:3e:bc:49:a1:9b:40:ed:6c:
         df:22:be:36:94:e7:9d:2e:78:e1:4b:86:aa:20:62:cc:3c:bd:
         6e:bf:a7:cc:22:1b:45:8d:e3:14:a4:36:96:82:c9:32:30:aa:
         aa:ae:b7:2a:88:17:f5:df:9a:21:8f:a6:f2:29:2c:59:ae:73:
         a4:26:85:0c:fc:be:e7:52:70:9f:2c:f8:dc:39:3c:63:04:49:
         1e:73:e5:19:87:8e:30:d9:1f:fd:2f:97:54:a3:98:cc:3e:2a:
         d5:62:05:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----