Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/323830343a373163343a3a2f33332d3333203d3e20323730383130.roa
File:                     323830343a373163343a3a2f33332d3333203d3e20323730383130.roa (raw, json)
Hash identifier:          EGJE1yYzSl0ym3qXOlUTbJbP5N7MQGqZ4Z3Wehl5Rac=
Subject key identifier:   2A:F6:57:A3:38:BD:B4:7A:D9:F0:DA:94:9F:9C:DC:1C:F2:0A:27:78
Certificate issuer:       /CN=AC5F91766846C4C6154EEF497DA9B6A46584AEB3
Certificate serial:       32EDBDAA357E4C1F74450ED442305FA149B24FF4
Authority key identifier: AC:5F:91:76:68:46:C4:C6:15:4E:EF:49:7D:A9:B6:A4:65:84:AE:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5F91766846C4C6154EEF497DA9B6A46584AEB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/323830343a373163343a3a2f33332d3333203d3e20323730383130.roa
Signing time:             Tue 19 Mar 2024 17:07:41 +0000
ROA not before:           Tue 19 Mar 2024 17:02:41 +0000
ROA not after:            Tue 18 Mar 2025 17:07:41 +0000
asID:                     270810
IP address blocks:        2804:71c4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ed:bd:aa:35:7e:4c:1f:74:45:0e:d4:42:30:5f:a1:49:b2:4f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC5F91766846C4C6154EEF497DA9B6A46584AEB3
        Validity
            Not Before: Mar 19 17:02:41 2024 GMT
            Not After : Mar 18 17:07:41 2025 GMT
        Subject: CN=2AF657A338BDB47AD9F0DA949F9CDC1CF20A2778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:89:5e:f6:b6:39:32:a4:74:5e:70:89:fc:
                    4d:74:fc:b0:e2:79:74:d3:8b:c7:93:3b:98:2f:34:
                    bd:ac:7a:34:13:2c:45:e0:c6:b2:f0:d1:53:35:bf:
                    72:9c:ee:2e:49:3e:13:80:b8:ad:30:2c:d4:ce:10:
                    bc:07:8f:52:44:77:10:88:da:ce:20:1e:5d:b4:2f:
                    2e:5f:ad:66:55:48:83:a3:35:67:98:b5:83:be:c8:
                    93:fa:cf:0a:a0:bd:03:fc:da:5f:0a:2d:39:5f:92:
                    18:46:b9:20:28:e4:e1:82:0d:14:e3:71:7c:9c:b3:
                    5a:6c:42:7d:c1:67:07:b6:42:e4:3a:54:28:74:59:
                    53:57:dd:f5:7d:2c:14:8d:e4:53:9f:4f:ab:c2:3e:
                    b7:1c:6d:54:8c:64:31:39:97:ad:9a:9b:34:f9:04:
                    d2:68:73:9c:5b:39:6e:c6:5d:7d:be:00:e1:c9:d5:
                    f1:d6:a6:da:e0:57:30:cd:d4:55:20:89:c5:7c:4b:
                    6f:c7:f5:51:2a:19:ff:52:31:14:f6:6e:86:f3:71:
                    fc:9b:81:48:6a:2e:cc:86:5a:5b:21:65:a1:eb:a4:
                    5a:bd:10:1f:a4:ab:bc:49:10:cc:ae:01:d3:36:77:
                    ea:1f:ce:c2:0b:99:f6:bd:83:ff:4c:9c:6e:c1:db:
                    f9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F6:57:A3:38:BD:B4:7A:D9:F0:DA:94:9F:9C:DC:1C:F2:0A:27:78
            X509v3 Authority Key Identifier:
                keyid:AC:5F:91:76:68:46:C4:C6:15:4E:EF:49:7D:A9:B6:A4:65:84:AE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/AC5F91766846C4C6154EEF497DA9B6A46584AEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5F91766846C4C6154EEF497DA9B6A46584AEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/323830343a373163343a3a2f33332d3333203d3e20323730383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71c4::/33

    Signature Algorithm: sha256WithRSAEncryption
         74:46:7d:aa:d4:8f:69:6f:bb:7d:00:5b:e8:ee:81:4b:c8:f0:
         48:ed:8a:b2:0d:0d:16:c8:f6:aa:00:b0:1e:9d:b5:61:71:e3:
         2b:81:43:3e:1b:9e:da:13:02:cc:ca:d3:27:5a:d3:b2:cf:2e:
         00:56:86:68:18:f2:01:7c:74:b8:4a:44:b4:0e:01:8f:fa:ac:
         bf:c5:64:2d:6e:27:eb:5d:95:7b:0f:36:f3:bc:56:60:b6:48:
         4c:94:99:c2:58:a1:f4:0e:bc:d1:9d:4a:ca:66:5c:d8:8b:d5:
         6e:76:90:c4:17:a3:d6:60:14:c3:2c:cf:d1:3a:28:c7:f5:5b:
         b5:c8:1f:4a:74:39:c8:13:a8:f1:6a:d1:c8:78:2b:9a:f8:43:
         54:e3:72:a8:e5:cd:f8:2f:64:3c:da:8e:64:19:b2:53:ed:d7:
         ba:6a:d0:5c:41:98:07:ce:09:69:ae:00:41:0c:c6:83:ed:b9:
         c5:59:14:2d:08:2b:9a:10:82:d5:b3:cd:d3:2f:fb:c5:43:6d:
         19:3f:d6:3c:f3:93:a3:91:d8:34:11:bc:14:15:8b:e8:90:2b:
         6f:1e:4e:20:e3:90:eb:05:09:bd:cc:a7:b8:ba:eb:f4:d2:38:
         eb:3e:2c:b5:d3:63:f5:a8:48:d2:b5:4d:61:92:4e:45:00:3c:
         1b:ac:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----