Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/323830343a373264303a3a2f33322d3332203d3e20323730383737.roa
File:                     323830343a373264303a3a2f33322d3332203d3e20323730383737.roa (raw, json)
Hash identifier:          aLGJZ0T2RtdQBoI6vmXOxT5zx32TKtAViElysTO7F2M=
Subject key identifier:   B8:48:95:A1:22:2A:1C:70:DD:58:24:56:EE:E0:32:9A:1B:A8:9C:60
Certificate issuer:       /CN=A731B275F45E256F64580D91E6FC778E5C57FBF8
Certificate serial:       63359C71A30BE72AF82F9C09A1C933D12E514B4E
Authority key identifier: A7:31:B2:75:F4:5E:25:6F:64:58:0D:91:E6:FC:77:8E:5C:57:FB:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/323830343a373264303a3a2f33322d3332203d3e20323730383737.roa
Signing time:             Tue 20 Feb 2024 14:12:08 +0000
ROA not before:           Tue 20 Feb 2024 14:07:08 +0000
ROA not after:            Tue 18 Feb 2025 14:12:08 +0000
asID:                     270877
IP address blocks:        2804:72d0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:35:9c:71:a3:0b:e7:2a:f8:2f:9c:09:a1:c9:33:d1:2e:51:4b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A731B275F45E256F64580D91E6FC778E5C57FBF8
        Validity
            Not Before: Feb 20 14:07:08 2024 GMT
            Not After : Feb 18 14:12:08 2025 GMT
        Subject: CN=B84895A1222A1C70DD582456EEE0329A1BA89C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4e:50:0a:ed:94:40:79:b8:12:27:53:ed:1c:
                    f9:bd:23:a7:43:30:5f:a6:1e:3a:c7:74:3e:28:13:
                    98:f4:0a:fd:96:a8:f1:92:b2:d9:3c:75:d4:48:7b:
                    61:98:1b:2f:e2:1e:c7:33:33:34:f4:2a:30:fb:a6:
                    95:3a:73:8c:f2:50:a3:08:61:12:8f:88:1d:61:f1:
                    ce:78:64:ee:75:a2:22:9e:62:90:4f:2d:cf:c8:bd:
                    3b:ad:1b:92:8c:85:f3:84:a4:99:93:39:16:a5:0e:
                    d1:0a:7b:1d:73:9d:cd:db:83:07:7f:ce:8f:ff:de:
                    a2:02:b2:2e:f0:16:6f:c2:94:f6:cb:3b:50:c3:ca:
                    ae:07:a2:82:b5:f4:9f:0a:dd:63:b0:f5:bc:af:9c:
                    b3:8c:79:f7:02:6f:b0:4f:da:bd:81:77:d4:47:15:
                    b0:7a:4a:86:d3:1c:d5:88:95:77:44:97:ea:b7:f4:
                    55:8c:ad:06:30:e2:d2:b6:32:06:f5:31:13:5e:4a:
                    36:06:2f:b3:3b:ec:76:f2:23:cf:0d:af:3c:09:5b:
                    6c:d4:c9:b3:fc:24:10:af:bd:cd:da:0d:f5:5e:59:
                    3e:63:20:89:4a:07:b8:e9:e2:c6:a8:ff:ee:2b:f0:
                    65:b0:01:ab:d7:c3:61:96:a7:99:7e:be:55:7f:ae:
                    04:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:48:95:A1:22:2A:1C:70:DD:58:24:56:EE:E0:32:9A:1B:A8:9C:60
            X509v3 Authority Key Identifier:
                keyid:A7:31:B2:75:F4:5E:25:6F:64:58:0D:91:E6:FC:77:8E:5C:57:FB:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/323830343a373264303a3a2f33322d3332203d3e20323730383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:b8:63:41:07:9f:bf:4c:0b:5e:84:da:2d:b6:f9:d5:25:0c:
         90:af:83:ee:c4:18:28:1e:f1:d6:f8:9c:ae:53:9e:af:3c:16:
         48:c0:cc:4e:28:ab:4c:54:24:e0:11:cb:bc:00:a0:38:7c:63:
         a2:79:37:35:71:bc:b8:02:8a:94:e3:18:1c:f1:6b:b2:88:71:
         a4:e0:57:a1:56:6b:d5:93:9a:04:af:33:65:d1:8a:9a:2b:28:
         74:b5:30:ce:af:a5:93:4f:66:a1:f9:f1:21:4a:33:ce:8f:ee:
         f3:44:a3:76:f6:9d:0b:b4:f4:06:27:fb:a2:2a:cb:c4:f6:bf:
         d7:1e:d6:f7:29:d9:9c:c2:d1:fe:67:80:a9:66:ad:15:e3:b2:
         71:55:3f:62:87:a4:5e:2b:b2:9b:c6:23:5e:32:5d:96:f5:19:
         e7:f8:fa:57:dd:7d:5f:1d:8b:ff:34:e1:e4:cb:9d:03:52:7a:
         92:93:65:cf:6b:6a:03:86:b4:70:f0:ba:1d:5d:fd:34:ce:86:
         2c:1e:34:69:0d:19:bb:f5:2f:a0:2a:a2:f9:dc:3d:62:f1:5d:
         18:20:f3:02:ff:e4:0b:45:ca:01:53:31:e3:90:27:52:1e:db:
         a3:7a:3c:aa:74:04:5f:7b:91:03:95:ed:97:f0:b8:f6:9e:4d:
         11:36:b6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----