Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/323830343a316536343a3a2f3332203d3e20323634343236.roa
File:                     323830343a316536343a3a2f3332203d3e20323634343236.roa (raw, json)
Hash identifier:          Mh1x+Zebypf92lB9n3YChigWZGgHrQHNYwqEFFd8MK0=
Subject key identifier:   F1:2C:C5:05:0E:3A:D3:CB:B8:47:B0:17:4D:E8:49:D8:FD:D9:1A:F6
Certificate issuer:       /CN=2E7EF3D46EA1FA859183A72D9264A4F76D5C0707
Certificate serial:       7EA03F4096B03E953A7001F44A36558AB808D484
Authority key identifier: 2E:7E:F3:D4:6E:A1:FA:85:91:83:A7:2D:92:64:A4:F7:6D:5C:07:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/323830343a316536343a3a2f3332203d3e20323634343236.roa
Signing time:             Mon 15 Jan 2024 23:00:00 +0000
ROA not before:           Mon 15 Jan 2024 22:55:00 +0000
ROA not after:            Wed 15 Jan 2025 23:00:00 +0000
asID:                     264426
IP address blocks:        2804:1e64::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a0:3f:40:96:b0:3e:95:3a:70:01:f4:4a:36:55:8a:b8:08:d4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7EF3D46EA1FA859183A72D9264A4F76D5C0707
        Validity
            Not Before: Jan 15 22:55:00 2024 GMT
            Not After : Jan 15 23:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:75:e6:3f:c1:2d:fa:db:31:40:ea:b6:a2:b1:
                    a5:44:52:f7:96:12:a9:a3:cb:d9:80:10:9e:f0:07:
                    9f:b2:cf:5d:ac:dc:55:35:4b:16:41:2b:39:36:48:
                    40:5a:1e:c9:8c:fc:18:d8:5e:6b:c1:14:f0:4d:14:
                    e6:3a:ee:77:2d:b4:0d:cd:d4:8e:4b:fa:44:90:28:
                    ca:eb:a3:63:b2:ae:e9:3a:6c:f1:8e:0d:27:a5:0b:
                    dd:35:39:40:2c:7f:11:7d:44:35:34:35:3a:6e:7a:
                    be:de:78:02:8b:26:84:68:b2:0e:04:27:bd:e6:a0:
                    e6:8a:d4:ae:a0:f8:a6:49:12:70:3c:11:45:cd:92:
                    ca:d2:89:e8:43:29:d4:bd:85:5f:fb:12:cb:84:e9:
                    f5:79:96:ba:bd:97:7c:fc:0a:05:7a:91:f6:69:18:
                    d4:dc:3d:c9:d9:cb:5c:8a:27:a1:59:86:25:14:d7:
                    c0:84:20:54:39:bf:22:8e:36:94:41:f1:73:bc:67:
                    bf:df:f2:9e:ea:64:3d:01:99:12:c5:f1:41:b4:ff:
                    d1:0b:da:f6:49:fe:f0:9d:10:41:f6:37:d3:26:d6:
                    2a:fb:83:7b:36:5e:e9:1e:49:2a:7d:eb:79:6b:c6:
                    3f:bd:83:da:a3:b5:7f:0f:75:c6:40:30:af:11:dc:
                    97:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2C:C5:05:0E:3A:D3:CB:B8:47:B0:17:4D:E8:49:D8:FD:D9:1A:F6
            X509v3 Authority Key Identifier:
                keyid:2E:7E:F3:D4:6E:A1:FA:85:91:83:A7:2D:92:64:A4:F7:6D:5C:07:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/323830343a316536343a3a2f3332203d3e20323634343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e64::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:60:dc:ee:be:93:c3:17:51:4e:bc:b3:e2:29:7f:0d:a4:67:
         89:94:c1:53:12:29:36:93:d7:44:09:57:e8:d0:06:9f:f6:97:
         9e:10:35:2a:53:5f:25:c3:b3:35:c1:bb:4a:00:7c:cd:8c:16:
         5e:2a:55:a5:79:92:e6:0a:88:f5:e9:cf:7d:38:4e:a9:9d:a6:
         56:4b:e6:6f:02:a7:85:b5:58:8a:f7:35:37:2b:69:3f:f4:41:
         61:3f:df:fa:98:e3:f2:16:ee:d4:62:91:8b:5a:b2:37:41:c0:
         29:46:03:49:72:d3:f5:b5:1e:36:78:f2:0e:d1:3f:4e:bb:ac:
         96:23:1d:f4:93:87:33:0c:5c:54:13:8c:ed:68:92:71:f6:2a:
         dc:4f:5f:91:91:f6:36:0d:ac:a3:b6:f2:1d:1f:59:50:83:53:
         96:b2:b3:3b:02:36:4e:58:61:36:c3:d1:ef:07:ad:7d:ef:84:
         c3:08:75:1b:d4:fd:e4:bd:f6:39:f5:4b:05:a4:d3:27:8f:f7:
         02:f9:48:d9:b0:61:e1:db:53:35:e7:c9:70:97:e9:8d:68:de:
         fe:d3:7d:32:52:9a:08:ce:fa:c4:71:45:55:b4:38:66:66:bf:
         f4:13:a1:cd:63:d3:46:ec:30:7b:83:ee:cb:c2:a9:bb:00:39:
         9b:d9:5b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----