Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a3a2f33322d3438203d3e20323633393234.roa
File:                     323830343a323764343a3a2f33322d3438203d3e20323633393234.roa (raw, json)
Hash identifier:          FlEksGfh4bsjJh0Wex1PIe5+5SmEMZv+AZld9XqOYGs=
Subject key identifier:   AD:8F:BB:D5:06:71:C3:AA:56:B2:BA:47:62:60:F6:52:74:89:0A:99
Certificate issuer:       /CN=8C2C77205EE6970E9E8839D552B00BD6F1128E95
Certificate serial:       5D647ADF9005B2D88380498E2E039C8E96A5CC9F
Authority key identifier: 8C:2C:77:20:5E:E6:97:0E:9E:88:39:D5:52:B0:0B:D6:F1:12:8E:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a3a2f33322d3438203d3e20323633393234.roa
Signing time:             Mon 11 Mar 2024 20:41:38 +0000
ROA not before:           Mon 11 Mar 2024 20:36:38 +0000
ROA not after:            Mon 10 Mar 2025 20:41:38 +0000
asID:                     263924
IP address blocks:        2804:27d4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:64:7a:df:90:05:b2:d8:83:80:49:8e:2e:03:9c:8e:96:a5:cc:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2C77205EE6970E9E8839D552B00BD6F1128E95
        Validity
            Not Before: Mar 11 20:36:38 2024 GMT
            Not After : Mar 10 20:41:38 2025 GMT
        Subject: CN=AD8FBBD50671C3AA56B2BA476260F65274890A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:11:9a:98:06:20:c2:1e:55:6c:fe:68:d0:
                    ea:4c:3d:ce:ff:81:9a:cf:65:3a:be:08:30:8a:92:
                    b5:48:ef:de:87:46:bb:76:c7:a1:63:0b:e1:8b:7f:
                    8c:13:71:21:e1:d2:a7:34:72:f9:1a:ff:04:6b:de:
                    55:ea:03:1c:a2:c0:17:f7:a4:59:66:5b:de:89:47:
                    a3:0f:ae:9b:ae:8e:1a:4c:5e:7d:2e:90:05:87:25:
                    b6:e3:de:bb:45:0e:e1:aa:26:57:0a:4b:64:7f:53:
                    9c:93:38:05:c2:c7:04:1e:c1:d9:28:9d:76:b2:7e:
                    31:bf:8a:0c:08:81:da:c0:51:3c:d8:c8:18:3e:86:
                    d3:7e:40:c7:30:f6:7d:80:f2:a5:95:7c:2b:7f:06:
                    2a:f4:36:f0:a0:19:09:16:7d:d9:b7:e1:ae:ef:6b:
                    8d:ce:fd:54:f1:89:09:15:2f:fb:ed:e9:f1:73:6b:
                    62:d5:bd:b6:5e:fe:7a:70:93:9f:5c:09:f0:d2:2b:
                    50:86:18:58:ec:81:4f:89:97:ef:be:82:14:24:7e:
                    e6:21:e2:42:7e:96:3b:e3:26:98:6d:f3:29:95:33:
                    59:40:c6:73:6c:46:24:c9:bf:33:a7:61:09:80:a6:
                    9d:8f:cd:58:a5:fb:ed:c6:40:cd:5c:07:ab:cb:54:
                    ce:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8F:BB:D5:06:71:C3:AA:56:B2:BA:47:62:60:F6:52:74:89:0A:99
            X509v3 Authority Key Identifier:
                keyid:8C:2C:77:20:5E:E6:97:0E:9E:88:39:D5:52:B0:0B:D6:F1:12:8E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a3a2f33322d3438203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:62:8a:18:6f:1e:00:14:8f:2e:2a:9a:de:d0:32:b0:7e:0f:
         c4:8f:7f:a6:fd:44:96:1c:6b:3f:b5:53:46:8a:4b:b0:b4:d4:
         67:51:5d:b8:07:54:4e:87:77:59:24:75:34:ae:12:36:b4:6e:
         72:84:a5:d8:98:39:3d:97:19:36:88:fd:1a:e6:45:9e:d7:51:
         93:2f:3f:9e:d7:82:11:4d:48:e8:d2:23:39:29:db:9e:d8:05:
         96:a1:29:e9:69:ee:db:0e:95:0e:40:e0:81:9b:60:61:83:51:
         60:ce:1b:9f:c9:a4:05:63:e4:dd:5d:27:25:0c:7d:1a:c7:69:
         24:15:ab:d2:6d:33:51:6e:8e:82:f9:aa:ae:fd:8a:f6:d6:b1:
         65:4b:e6:38:6e:4f:81:d4:29:7b:20:75:69:87:b5:fe:83:35:
         30:77:15:ad:91:2b:5a:cb:9a:ad:15:0b:1f:55:c2:2c:ca:23:
         79:67:7b:bf:48:a9:fe:fb:91:d2:57:c0:a6:26:de:95:58:54:
         58:a4:fe:79:fe:e3:18:41:c1:6e:f7:32:f6:ed:1f:06:95:c7:
         4b:57:45:b8:97:2e:12:0a:1b:96:83:16:af:86:6d:88:cb:a1:
         33:17:61:50:fd:bb:6d:00:ae:a0:56:66:f8:1b:23:fb:a9:47:
         d9:a1:d1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----