Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a383030303a3a2f33332d3333203d3e20323733363036.roa
File:                     323830343a383937383a383030303a3a2f33332d3333203d3e20323733363036.roa (raw, json)
Hash identifier:          atFsbOrHUVUGqqmv8JeNPqJ0gTmVF+c9UsPyUbbYJ8o=
Subject key identifier:   A8:A3:CF:C3:E0:F8:63:1E:86:8A:04:0F:10:00:87:66:FC:A6:7D:47
Certificate issuer:       /CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
Certificate serial:       69341319DEA486D919CBB5A23164B41D5A898F53
Authority key identifier: AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a383030303a3a2f33332d3333203d3e20323733363036.roa
Signing time:             Sat 24 Feb 2024 03:41:54 +0000
ROA not before:           Sat 24 Feb 2024 03:36:54 +0000
ROA not after:            Sat 22 Feb 2025 03:41:54 +0000
asID:                     273606
IP address blocks:        2804:8978:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:34:13:19:de:a4:86:d9:19:cb:b5:a2:31:64:b4:1d:5a:89:8f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
        Validity
            Not Before: Feb 24 03:36:54 2024 GMT
            Not After : Feb 22 03:41:54 2025 GMT
        Subject: CN=A8A3CFC3E0F8631E868A040F10008766FCA67D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:13:55:9d:f5:e9:5d:77:86:bd:42:68:64:
                    dc:47:42:fa:ee:01:93:f4:9f:12:54:f1:22:05:20:
                    6e:8e:ba:df:4d:4f:50:2e:14:23:8b:6b:89:30:de:
                    b8:74:1e:4b:76:c3:db:29:fb:4b:94:20:0f:1e:55:
                    5e:e9:4f:c7:70:4d:0d:20:3c:01:4e:9e:77:4c:fd:
                    6b:9c:9b:5a:28:a5:e0:fa:f1:55:a1:bf:e6:dc:ab:
                    61:d2:04:8f:91:d9:33:42:ef:09:f4:b5:e7:50:50:
                    f8:e0:03:85:26:2f:f4:ae:23:dd:6e:d1:db:48:bb:
                    e5:aa:d8:d7:fb:80:43:b8:24:46:bb:9d:d9:db:f3:
                    fd:65:fd:5a:15:4b:e5:83:97:8c:fd:16:23:c2:cb:
                    9f:2b:8f:68:a4:f6:ba:5a:5a:e0:5b:48:e9:6b:97:
                    aa:32:a5:3c:88:e5:f8:a9:d7:1a:57:c2:f3:64:5f:
                    c9:a0:16:76:8a:38:d6:c9:be:bf:fc:d4:40:6b:90:
                    c4:ee:5d:bf:9e:a3:87:7e:cd:d9:33:c1:b8:14:2d:
                    55:9f:e8:35:b6:58:50:bc:f8:12:eb:1a:86:25:70:
                    68:89:13:5d:0d:ca:31:61:24:05:72:1b:b5:a9:3d:
                    58:ca:fe:22:24:eb:c2:45:63:ee:e3:b8:d4:15:14:
                    48:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A3:CF:C3:E0:F8:63:1E:86:8A:04:0F:10:00:87:66:FC:A6:7D:47
            X509v3 Authority Key Identifier:
                keyid:AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a383030303a3a2f33332d3333203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         14:34:ff:68:3f:b1:55:4a:09:dd:82:72:23:2d:38:0d:8e:01:
         d1:f4:c3:9c:fc:67:8a:10:d9:0d:71:2a:08:fb:84:be:1f:ff:
         8c:94:f9:68:58:10:61:ef:34:fc:3e:81:16:6a:65:ef:75:d2:
         d2:34:a3:95:dd:73:08:e7:82:51:f5:e8:2a:93:0c:d2:76:48:
         2a:0c:10:6a:94:3a:93:5d:10:11:fc:31:c0:55:be:b6:b2:00:
         fa:22:3d:17:72:67:0d:b6:4c:64:ac:80:63:21:c0:e6:08:bf:
         30:ae:8b:d3:fb:ce:0c:70:82:70:77:49:8f:02:67:b2:83:bb:
         84:7e:e2:0d:ad:c4:39:c2:44:1d:5d:e3:fd:b2:f3:d2:37:2a:
         bb:4e:f2:19:2d:80:ab:56:f4:15:70:56:1a:d9:89:85:b3:7f:
         94:a7:f2:e8:e1:0b:17:f4:f7:b4:0e:4e:7b:32:47:69:da:cd:
         a5:43:2d:4b:1f:2f:84:f2:02:96:c4:8e:c0:76:00:06:68:ab:
         bf:7b:a5:51:92:01:b8:5c:a7:26:cc:39:df:0c:a9:73:f9:a2:
         9b:88:4c:04:b5:0a:49:42:89:23:85:1b:2e:a9:8a:2b:26:5d:
         ee:73:84:79:50:0e:e3:83:77:f6:b1:29:d4:dc:5b:f0:c3:2c:
         b6:ec:b3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----