Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/0/323830343a343832633a3a2f33322d3438203d3e20323637313032.roa
File:                     323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (raw, json)
Hash identifier:          fbHDwZwI9OQCBTErEl4No1GXl2sgXUhclFamYz7lyCk=
Subject key identifier:   3C:C6:F0:AD:1C:F1:3A:E6:2E:99:86:FD:63:6A:36:93:66:43:85:0E
Certificate issuer:       /CN=61899AD0EC3326682A4273F840DCED9B527E138A
Certificate serial:       068392838C48B0A03376A23F982DB7C46E8425B7
Authority key identifier: 61:89:9A:D0:EC:33:26:68:2A:42:73:F8:40:DC:ED:9B:52:7E:13:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61899AD0EC3326682A4273F840DCED9B527E138A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/0/323830343a343832633a3a2f33322d3438203d3e20323637313032.roa
Signing time:             Thu 11 Apr 2024 19:00:37 +0000
ROA not before:           Thu 11 Apr 2024 18:55:37 +0000
ROA not after:            Thu 10 Apr 2025 19:00:37 +0000
asID:                     267102
IP address blocks:        2804:482c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:83:92:83:8c:48:b0:a0:33:76:a2:3f:98:2d:b7:c4:6e:84:25:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61899AD0EC3326682A4273F840DCED9B527E138A
        Validity
            Not Before: Apr 11 18:55:37 2024 GMT
            Not After : Apr 10 19:00:37 2025 GMT
        Subject: CN=3CC6F0AD1CF13AE62E9986FD636A36936643850E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:8d:a7:af:50:63:e7:ed:b8:c8:01:f0:1d:
                    6f:a5:d1:de:8e:b0:09:51:77:29:91:a4:54:fd:8c:
                    9d:92:0e:37:70:fd:8c:8e:75:84:32:8b:0a:76:b2:
                    50:f9:54:90:57:25:6b:c7:85:8f:be:80:79:66:fd:
                    60:82:3c:2e:d8:50:3e:42:c1:c3:5b:df:69:11:c8:
                    82:b8:79:2f:20:bd:c8:86:7d:cf:99:ea:ad:d8:92:
                    3a:27:17:2c:44:b6:90:6b:02:bd:78:d3:c8:11:2d:
                    2e:89:7c:17:00:ca:c6:e8:d7:ce:51:32:86:fd:2d:
                    f4:d2:9e:d0:8a:43:be:36:53:20:3d:8a:50:08:cd:
                    89:15:dc:b1:1f:3f:be:46:05:53:d8:a9:01:3c:7c:
                    95:37:6b:68:b9:90:bc:8b:16:f5:90:8a:9c:26:d6:
                    3f:5e:da:3b:d9:12:6d:89:29:17:ed:89:9b:4d:c2:
                    c4:f5:ee:b4:0a:90:c0:a3:ae:b8:31:41:ba:69:d7:
                    e9:84:c2:a7:2f:40:9b:cd:87:63:3e:c9:8a:d0:ee:
                    f7:1a:bb:44:b4:d8:93:95:81:9f:04:0f:29:2f:de:
                    9f:e4:5b:20:e1:cb:21:22:da:17:db:e2:2c:4c:45:
                    ca:e1:ad:6a:74:46:97:88:c1:30:1c:50:1b:3f:3d:
                    e7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C6:F0:AD:1C:F1:3A:E6:2E:99:86:FD:63:6A:36:93:66:43:85:0E
            X509v3 Authority Key Identifier:
                keyid:61:89:9A:D0:EC:33:26:68:2A:42:73:F8:40:DC:ED:9B:52:7E:13:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/0/61899AD0EC3326682A4273F840DCED9B527E138A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61899AD0EC3326682A4273F840DCED9B527E138A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/0/323830343a343832633a3a2f33322d3438203d3e20323637313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:482c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:a0:cb:02:8d:d1:49:a7:d5:c9:36:92:46:53:42:37:cf:e9:
         d8:f0:4c:ee:e7:44:1f:c8:b8:ec:ee:93:35:c7:e7:8c:76:23:
         20:d4:88:b3:d6:dc:83:eb:e7:17:46:41:a2:46:59:15:c1:45:
         a2:33:db:0a:1d:b9:ce:bd:d4:f8:ed:e7:84:bc:14:0f:35:43:
         69:cb:63:30:12:96:06:fb:47:67:54:ee:a8:df:3a:2f:50:b5:
         25:a8:ae:13:cc:e2:fc:80:d7:e7:80:d7:87:76:1f:10:f5:fc:
         35:d2:b5:73:85:d2:0b:c8:1b:89:6e:56:c4:d3:1f:60:54:e2:
         63:e9:7f:ce:28:97:1f:66:35:84:64:77:c4:16:01:db:78:97:
         57:70:07:72:25:8f:d0:bd:18:a3:0d:80:6b:5b:8f:44:3d:cd:
         f5:ef:69:48:fd:d0:fb:df:52:13:f5:55:ef:cc:43:b4:1d:af:
         c2:eb:0a:21:20:40:f7:2f:2b:b5:25:e2:22:fe:5b:56:fc:de:
         23:e9:34:97:ad:86:bd:c8:f3:93:d5:c1:10:d0:b7:ab:4c:fc:
         f0:af:e2:6e:cb:4c:c2:ec:64:35:7d:56:e4:36:35:21:ed:37:
         cd:f7:5a:cd:03:a9:b6:00:d2:e6:f7:e7:c3:d6:3d:d4:e3:02:
         96:f5:ba:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----