Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a3a2f33332d3334203d3e20323638313036.roa
File:                     323830343a353831383a3a2f33332d3334203d3e20323638313036.roa (raw, json)
Hash identifier:          x1au+IO9/0Dem6hXnkk1GJg6C/QGhifBBTlWYlk+REU=
Subject key identifier:   89:17:AC:45:42:88:DA:F7:9D:83:C1:F8:FE:78:90:0A:F0:CD:68:7C
Certificate issuer:       /CN=48DFE379FC64C3F50512033477F929291FC10CF2
Certificate serial:       07FBAEE9D220DF2A6A7CF34CF9D177F396628C5A
Authority key identifier: 48:DF:E3:79:FC:64:C3:F5:05:12:03:34:77:F9:29:29:1F:C1:0C:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48DFE379FC64C3F50512033477F929291FC10CF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a3a2f33332d3334203d3e20323638313036.roa
Signing time:             Fri 08 Mar 2024 19:48:28 +0000
ROA not before:           Fri 08 Mar 2024 19:43:28 +0000
ROA not after:            Fri 07 Mar 2025 19:48:28 +0000
asID:                     268106
IP address blocks:        2804:5818::/33 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fb:ae:e9:d2:20:df:2a:6a:7c:f3:4c:f9:d1:77:f3:96:62:8c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DFE379FC64C3F50512033477F929291FC10CF2
        Validity
            Not Before: Mar  8 19:43:28 2024 GMT
            Not After : Mar  7 19:48:28 2025 GMT
        Subject: CN=8917AC454288DAF79D83C1F8FE78900AF0CD687C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:b2:8b:81:64:5f:23:62:42:9a:10:e1:91:
                    14:e8:f6:65:d8:01:38:d2:f8:61:d7:07:d5:2f:ee:
                    6e:18:19:84:4f:b2:e3:13:fb:60:2b:23:3a:1c:41:
                    fe:0b:ca:32:f0:f0:14:3e:40:62:9d:5c:e2:f4:0c:
                    03:21:c1:c1:0f:d2:3d:bd:4f:ea:61:28:12:da:56:
                    87:23:6a:63:26:c9:14:d1:30:13:e8:b9:fb:b2:48:
                    58:b2:4a:7e:75:78:82:f5:d8:56:9e:18:7a:74:d9:
                    dc:4c:09:c5:29:76:05:8d:5d:4c:fb:42:f1:5c:ba:
                    2d:2a:b2:d9:eb:32:a8:6a:9b:35:8e:b2:89:f9:81:
                    01:bb:d3:0a:9e:97:6d:33:e3:7f:7b:db:92:d8:c1:
                    c2:c8:01:ba:39:6d:7d:9e:e1:27:91:9b:87:d4:e9:
                    9e:3b:5e:be:d0:03:d7:bc:83:06:ba:72:0e:ff:c4:
                    66:a8:9c:40:e8:6e:03:66:9b:b2:59:9d:68:05:50:
                    7f:3c:f8:26:ec:47:86:dc:b9:4f:b0:2b:c0:46:21:
                    b6:28:ed:91:4f:1f:77:1e:f2:f5:c3:0e:41:ea:ca:
                    ab:d0:25:0b:dd:ac:7b:a2:a5:7d:d7:f6:cc:34:7d:
                    04:95:8a:b5:3c:2a:59:02:26:ab:6c:94:6b:16:7c:
                    ff:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:17:AC:45:42:88:DA:F7:9D:83:C1:F8:FE:78:90:0A:F0:CD:68:7C
            X509v3 Authority Key Identifier:
                keyid:48:DF:E3:79:FC:64:C3:F5:05:12:03:34:77:F9:29:29:1F:C1:0C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/48DFE379FC64C3F50512033477F929291FC10CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48DFE379FC64C3F50512033477F929291FC10CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a3a2f33332d3334203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5818::/33

    Signature Algorithm: sha256WithRSAEncryption
         98:63:f9:e9:bf:9d:f2:ea:d6:c8:c9:00:9c:ca:35:eb:30:38:
         dc:f1:48:f7:25:f4:1e:44:a0:aa:1b:39:05:51:c6:fa:d9:b7:
         22:29:2d:f2:11:4a:79:89:67:12:fe:0f:f9:d1:42:d4:86:7f:
         bb:1a:74:0d:2c:fd:9b:ee:9e:48:1a:f4:8d:55:0f:86:9e:39:
         53:37:e6:6a:4d:09:2c:bf:11:4d:86:f4:20:52:32:8e:41:11:
         5f:f8:6d:a1:cb:62:cd:0a:01:fd:85:c7:78:16:45:70:41:64:
         6e:c3:67:3e:93:93:c1:bc:3b:3b:af:49:45:76:67:b9:f4:4d:
         b2:b1:1a:8d:80:0f:1c:15:e4:58:08:7d:64:fc:00:3d:d1:89:
         0c:c8:4e:4c:41:b9:3c:18:1e:c9:b6:08:45:ca:50:ae:f3:ab:
         2b:ff:2f:3d:5e:67:bc:34:fe:b8:db:e3:ac:61:94:ec:c6:ed:
         b5:77:da:9c:1b:9b:e6:86:ac:5b:cc:bb:52:b5:04:31:fb:7b:
         12:93:1c:79:fb:10:a7:f6:31:90:fd:f1:29:cf:d3:30:6f:fa:
         ae:25:37:6a:8b:be:a6:62:c2:5e:44:44:b3:2e:96:0f:65:20:
         16:7c:93:a5:68:cc:ff:1f:d0:f3:ec:41:27:90:58:df:f6:b5:
         00:17:9f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----