Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/323830343a333763343a3a2f33322d3438203d3e20323636343335.roa
File:                     323830343a333763343a3a2f33322d3438203d3e20323636343335.roa (raw, json)
Hash identifier:          BMZ+oKB1krTkMjAjnSZ8+g/J5kmMk1p2JQMZ+RwBPOI=
Subject key identifier:   EC:E2:53:84:6D:DB:18:BD:38:17:18:8B:3B:72:D1:F4:2A:77:39:A1
Certificate issuer:       /CN=98BB84CC473634554A0B9F54BAEC3ED50E8A000F
Certificate serial:       253FB7231B8E49B677FC90418DFC65B5C2E26560
Authority key identifier: 98:BB:84:CC:47:36:34:55:4A:0B:9F:54:BA:EC:3E:D5:0E:8A:00:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98BB84CC473634554A0B9F54BAEC3ED50E8A000F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/323830343a333763343a3a2f33322d3438203d3e20323636343335.roa
Signing time:             Mon 29 Jan 2024 13:20:44 +0000
ROA not before:           Mon 29 Jan 2024 13:15:44 +0000
ROA not after:            Mon 27 Jan 2025 13:20:44 +0000
asID:                     266435
IP address blocks:        2804:37c4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3f:b7:23:1b:8e:49:b6:77:fc:90:41:8d:fc:65:b5:c2:e2:65:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98BB84CC473634554A0B9F54BAEC3ED50E8A000F
        Validity
            Not Before: Jan 29 13:15:44 2024 GMT
            Not After : Jan 27 13:20:44 2025 GMT
        Subject: CN=ECE253846DDB18BD3817188B3B72D1F42A7739A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c8:98:bd:0a:53:22:bc:7a:78:41:1e:ca:78:
                    53:18:9f:6c:2c:a2:15:c6:fb:34:4b:6d:b8:0d:37:
                    99:84:5e:ce:75:ac:de:76:dd:71:1e:86:26:54:a5:
                    4a:95:aa:4e:7e:60:3c:48:22:4b:66:27:9a:1f:51:
                    06:be:a0:77:a3:4b:26:4e:25:62:03:ae:87:76:33:
                    a8:1f:50:bc:e0:b6:72:c1:ef:1d:42:2d:53:45:e8:
                    75:da:c5:d9:99:bd:d2:b0:81:0d:43:c6:0c:3f:e3:
                    39:65:0d:aa:93:b6:bc:9e:10:ff:00:56:ca:33:2d:
                    08:59:76:0e:ed:eb:4a:0c:28:2a:eb:d8:98:f7:41:
                    9e:2e:2b:0d:92:82:3f:9c:2f:e2:9a:95:ee:ed:27:
                    39:df:83:2a:bf:10:d3:d2:de:06:b3:30:0f:bf:be:
                    cc:9a:30:bb:8b:d1:ae:39:ee:0f:ca:10:38:ae:13:
                    bb:c1:44:1b:16:d5:00:67:f0:93:f1:3b:6b:cb:9b:
                    72:64:ba:a7:e1:83:8d:5f:fd:83:38:a8:a1:74:8b:
                    95:31:8a:55:72:02:23:b8:92:3e:4a:63:08:9c:1b:
                    6b:68:07:3f:86:73:ca:26:57:1f:65:47:24:51:d3:
                    79:0c:ba:5a:8e:78:1d:47:b5:40:4b:8a:81:bc:57:
                    8a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E2:53:84:6D:DB:18:BD:38:17:18:8B:3B:72:D1:F4:2A:77:39:A1
            X509v3 Authority Key Identifier:
                keyid:98:BB:84:CC:47:36:34:55:4A:0B:9F:54:BA:EC:3E:D5:0E:8A:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/98BB84CC473634554A0B9F54BAEC3ED50E8A000F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98BB84CC473634554A0B9F54BAEC3ED50E8A000F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/323830343a333763343a3a2f33322d3438203d3e20323636343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:0c:be:05:f8:0a:2f:66:af:9d:fa:ea:e2:df:65:53:b0:00:
         23:85:fd:6b:9a:ff:fe:48:e1:6c:aa:38:dc:8c:95:1e:98:ca:
         23:f8:19:3b:9e:83:e8:f8:60:35:b2:fd:75:b5:07:39:4c:e0:
         7e:ce:28:87:72:7a:41:23:84:0f:30:83:05:50:51:e0:35:8e:
         62:d1:ae:53:e2:1d:e9:57:b6:bd:79:39:d9:c7:1e:f9:c9:e3:
         f2:28:c8:3c:7b:2a:dc:1d:66:cf:f5:bb:0b:34:e1:c4:05:2c:
         07:ef:ad:d8:05:d0:e7:52:47:8c:29:b2:a5:7c:53:d8:9a:30:
         3c:26:08:4a:cf:12:72:df:b8:5d:d6:21:96:4f:6c:2b:a1:e8:
         ae:ab:8a:a2:8e:ae:1b:ad:30:08:ed:b3:98:ec:8b:76:c9:5c:
         f9:2c:f2:84:8e:64:46:a8:2a:39:c6:f5:db:79:0e:23:0f:76:
         6b:95:b6:38:4a:62:ff:c6:be:76:6a:01:45:40:fe:62:c4:af:
         d3:6d:01:a3:9e:7a:68:1d:d4:39:02:53:d6:e6:73:7b:ac:d2:
         63:c8:03:36:dd:b1:a2:1e:b1:8c:fc:8c:60:21:c9:77:4d:ea:
         5d:46:ee:38:ae:0f:8a:53:00:e1:40:fc:17:bf:46:92:7f:bb:
         3c:cf:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----