Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/323830343a363165343a3a2f33322d3438203d3e20323639323633.roa
File:                     323830343a363165343a3a2f33322d3438203d3e20323639323633.roa (raw, json)
Hash identifier:          I0eAOu5S/wKJOdO+JKaGccP7Xd+fJsCNGVb5lxxqJEM=
Subject key identifier:   53:C3:AD:F3:DD:66:1D:39:98:28:17:1A:81:38:D4:AE:BD:37:94:37
Certificate issuer:       /CN=DD62A3383874568E020CAEECF2AB516AAF7172D9
Certificate serial:       5F7200F89FC1EFA4267D2105C1BD7F45956585AC
Authority key identifier: DD:62:A3:38:38:74:56:8E:02:0C:AE:EC:F2:AB:51:6A:AF:71:72:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62A3383874568E020CAEECF2AB516AAF7172D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/323830343a363165343a3a2f33322d3438203d3e20323639323633.roa
Signing time:             Thu 15 Feb 2024 15:54:19 +0000
ROA not before:           Thu 15 Feb 2024 15:49:19 +0000
ROA not after:            Thu 13 Feb 2025 15:54:19 +0000
asID:                     269263
IP address blocks:        2804:61e4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:72:00:f8:9f:c1:ef:a4:26:7d:21:05:c1:bd:7f:45:95:65:85:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD62A3383874568E020CAEECF2AB516AAF7172D9
        Validity
            Not Before: Feb 15 15:49:19 2024 GMT
            Not After : Feb 13 15:54:19 2025 GMT
        Subject: CN=53C3ADF3DD661D399828171A8138D4AEBD379437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bc:68:26:21:63:22:1f:a1:1a:75:15:f5:7b:
                    90:a4:d8:4d:81:7f:da:dc:74:58:f9:81:50:82:a2:
                    a7:07:46:a6:97:65:d3:ed:1c:a0:a9:83:cd:27:e5:
                    9d:99:dc:39:7f:3f:f9:17:f7:70:64:10:94:10:1f:
                    18:4d:69:b8:1e:67:4f:d5:0e:95:a5:a1:29:75:dd:
                    f7:9d:26:4a:5c:45:50:2c:1a:9a:5f:e0:eb:7c:3e:
                    eb:64:e1:5c:f0:8f:46:70:25:9a:cd:6c:ce:e6:ed:
                    19:94:b1:76:00:23:7a:29:74:85:02:df:21:8b:93:
                    3e:ff:65:3b:5c:0d:4f:2a:ba:a5:a4:df:51:4e:b2:
                    84:f5:b6:63:56:e6:8e:ca:2b:19:14:63:b8:c7:ac:
                    ff:ef:ae:7c:88:69:29:5e:1f:2d:3d:1c:77:e7:cf:
                    99:9a:56:73:bd:58:e2:53:cb:d3:7d:62:3f:73:eb:
                    23:fe:1f:a2:51:2a:82:94:c1:0d:e2:50:36:e4:10:
                    b5:71:83:13:94:5f:64:f5:ea:33:1f:1e:7c:72:4f:
                    08:47:c9:36:06:a6:bf:dc:5c:bd:85:49:41:a9:43:
                    e3:77:25:0e:72:4d:5b:63:5e:1d:d5:65:51:45:5a:
                    cf:c9:8e:ef:f2:a5:fc:4d:2f:67:65:90:fb:84:32:
                    be:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C3:AD:F3:DD:66:1D:39:98:28:17:1A:81:38:D4:AE:BD:37:94:37
            X509v3 Authority Key Identifier:
                keyid:DD:62:A3:38:38:74:56:8E:02:0C:AE:EC:F2:AB:51:6A:AF:71:72:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/DD62A3383874568E020CAEECF2AB516AAF7172D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62A3383874568E020CAEECF2AB516AAF7172D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/323830343a363165343a3a2f33322d3438203d3e20323639323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:f5:8f:b3:e0:91:24:a7:ac:d3:8b:17:9b:3d:d5:ae:dc:15:
         3d:5c:39:06:49:20:39:50:30:4b:9a:9e:09:5f:33:89:87:14:
         ce:2b:d5:9c:a9:f3:39:c6:f4:55:83:19:f4:48:a8:0c:54:c6:
         2c:5a:0a:89:d1:0e:2f:97:f6:e0:bd:38:14:ee:ca:6a:fa:8a:
         3f:3e:7d:bd:35:74:a9:b1:d3:25:62:78:68:b5:1c:aa:eb:ec:
         d2:4a:c5:f1:8d:e1:e1:b3:f3:3d:36:92:b1:38:60:6f:e9:5b:
         ef:45:f0:32:a9:1e:4c:06:06:ae:54:0b:18:68:6f:b2:fc:92:
         c2:33:01:3d:0b:14:42:bb:37:5d:6c:51:9d:cc:6f:64:62:6f:
         8a:a6:55:80:df:02:46:e2:7d:56:de:f2:2e:93:90:70:a0:05:
         0d:60:01:12:c1:8d:0a:59:80:b6:01:40:36:fa:65:97:86:c7:
         6a:72:05:96:34:2b:ec:0c:b9:86:63:e5:e0:11:ae:59:08:b2:
         71:21:83:31:08:3d:96:5d:9d:3d:2e:ec:3c:63:e9:65:13:fe:
         46:86:07:7e:cb:97:62:14:07:20:85:a1:0a:ee:9c:c2:e5:3b:
         d2:93:5f:65:d3:93:ef:fe:7c:22:4e:a8:42:1e:d1:20:fd:d9:
         08:f2:37:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----