Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/323830343a343564343a383030303a3a2f33332d3333203d3e20323636393532.roa
File:                     323830343a343564343a383030303a3a2f33332d3333203d3e20323636393532.roa (raw, json)
Hash identifier:          SCAr5POvxidpePN9gb0bbIR91Prx23LE9bzDtAyF0jo=
Subject key identifier:   BE:87:66:4F:04:B7:7A:0A:27:47:E4:A9:9A:20:7A:FD:F0:95:62:79
Certificate issuer:       /CN=67C9B36E52F1BDDD88B130F32B29E9230A0FAD43
Certificate serial:       4F263254DD67738B8466BA157C162190BC3E6B6C
Authority key identifier: 67:C9:B3:6E:52:F1:BD:DD:88:B1:30:F3:2B:29:E9:23:0A:0F:AD:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/323830343a343564343a383030303a3a2f33332d3333203d3e20323636393532.roa
Signing time:             Mon 08 Apr 2024 16:22:39 +0000
ROA not before:           Mon 08 Apr 2024 16:17:39 +0000
ROA not after:            Mon 07 Apr 2025 16:22:39 +0000
asID:                     266952
IP address blocks:        2804:45d4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:26:32:54:dd:67:73:8b:84:66:ba:15:7c:16:21:90:bc:3e:6b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67C9B36E52F1BDDD88B130F32B29E9230A0FAD43
        Validity
            Not Before: Apr  8 16:17:39 2024 GMT
            Not After : Apr  7 16:22:39 2025 GMT
        Subject: CN=BE87664F04B77A0A2747E4A99A207AFDF0956279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:87:08:62:17:23:a1:bb:13:a5:96:7a:af:
                    a9:49:30:a8:9e:69:fd:f1:39:b6:90:21:d6:02:9b:
                    8f:20:69:d8:00:35:62:36:bc:07:db:59:3b:29:ff:
                    4f:8e:e8:5f:ff:99:63:fc:22:52:80:dc:2e:9a:5c:
                    03:28:18:70:4d:1a:44:31:ca:5d:45:2d:c7:4f:77:
                    04:6c:3b:77:8b:2a:8b:8d:e8:3e:d0:9a:8e:46:32:
                    13:7a:15:8f:64:b8:65:e8:fd:7b:34:8a:c1:74:3a:
                    b2:f9:06:56:29:f5:1d:9d:39:b6:df:9a:12:8f:1f:
                    9c:eb:ac:21:80:a7:55:a2:a1:65:91:86:d0:10:d2:
                    f2:a9:35:3c:bd:c0:53:1e:a7:f8:c4:e1:00:32:bf:
                    24:b4:3c:8e:11:eb:ba:79:c5:4c:2c:4d:7d:96:29:
                    8f:1c:42:8f:d2:34:81:3d:da:b6:4d:ed:ab:a4:b5:
                    20:2a:fa:eb:0e:31:ba:77:7f:d3:76:51:55:fb:71:
                    0f:2d:d9:3c:6a:40:7e:d8:ae:f6:26:49:5f:44:35:
                    bc:a5:d7:2a:ea:5e:7f:24:a1:7b:7b:cc:8c:4f:a8:
                    a1:bd:4f:d9:7a:73:f9:bb:66:3c:b2:91:ae:7e:27:
                    63:93:92:e1:30:88:5d:69:87:2d:71:73:75:bf:e3:
                    7f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:87:66:4F:04:B7:7A:0A:27:47:E4:A9:9A:20:7A:FD:F0:95:62:79
            X509v3 Authority Key Identifier:
                keyid:67:C9:B3:6E:52:F1:BD:DD:88:B1:30:F3:2B:29:E9:23:0A:0F:AD:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/323830343a343564343a383030303a3a2f33332d3333203d3e20323636393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45d4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8d:bd:f6:30:5e:7a:86:0a:08:95:98:f2:98:b0:70:7e:66:1c:
         06:aa:d2:28:ff:d2:5f:4a:e1:1b:02:18:9b:71:ca:b7:92:05:
         8d:79:cc:1d:8f:13:7b:f7:e8:0b:81:86:6d:21:ce:3c:25:7e:
         e1:c1:56:bb:f9:0c:74:43:0e:87:ac:7c:41:31:5f:42:b0:6f:
         0b:a7:e7:30:e4:40:0e:de:25:f9:bd:de:d8:23:12:f4:53:61:
         a2:a2:08:1f:ee:60:6e:ab:a4:9c:a2:c0:8c:70:bb:c8:fe:aa:
         88:36:0a:41:e1:dc:6e:9a:f1:8b:66:75:54:fd:f8:e3:16:00:
         19:92:90:df:d7:85:e9:81:24:73:00:19:05:0d:d9:ec:6c:c7:
         da:3f:cb:e6:d3:14:1e:5f:4a:46:d3:4c:75:04:20:dd:da:d4:
         c6:2e:11:5a:48:03:aa:a6:c3:2f:22:84:79:2b:d3:cc:6b:c9:
         fc:de:de:5c:97:79:d7:56:e9:b4:47:54:13:7e:71:c1:8f:ff:
         2d:63:78:40:d3:c8:7f:09:86:6c:9c:08:56:1c:b1:f4:94:e6:
         06:33:36:5a:ee:b0:63:77:82:85:68:29:b1:ea:e8:f1:af:c0:
         cc:a1:5d:32:d5:cb:23:a6:10:bd:26:74:c4:a3:f9:db:c0:14:
         2e:2c:13:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----