Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a3a2f33382d3338203d3e203532393136.roa
File:                     323830343a326231303a3a2f33382d3338203d3e203532393136.roa (raw, json)
Hash identifier:          ii5LdGgQAVJngR0tW6I072dZ6akGNQSp1NBPA8yknUU=
Subject key identifier:   BD:61:35:EF:0A:7E:A4:B9:93:8C:CA:2B:FC:E3:B5:9E:E4:C5:40:AA
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       4B83F713366CFCA5B53B120A2A276CAF892CBA7A
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a3a2f33382d3338203d3e203532393136.roa
Signing time:             Tue 12 Mar 2024 12:30:50 +0000
ROA not before:           Tue 12 Mar 2024 12:25:50 +0000
ROA not after:            Tue 11 Mar 2025 12:30:50 +0000
asID:                     52916
IP address blocks:        2804:2b10::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:83:f7:13:36:6c:fc:a5:b5:3b:12:0a:2a:27:6c:af:89:2c:ba:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Mar 12 12:25:50 2024 GMT
            Not After : Mar 11 12:30:50 2025 GMT
        Subject: CN=BD6135EF0A7EA4B9938CCA2BFCE3B59EE4C540AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:2e:2d:3c:1d:2f:58:13:8d:6b:df:3b:39:
                    8a:ff:7e:e3:93:2b:cb:33:20:4c:f6:7e:d7:a4:37:
                    39:04:7f:7c:e0:b4:fd:58:a5:bc:f4:0e:2f:50:82:
                    8f:41:c7:08:72:6b:62:90:49:5a:4e:18:07:cf:02:
                    42:c0:bf:7f:85:ae:06:ad:7c:e1:f3:c5:d3:1c:89:
                    11:eb:d2:31:a4:80:c8:df:bd:6c:4b:a0:b6:38:33:
                    e6:87:60:be:d4:6e:c3:d5:37:1c:15:1b:88:00:c1:
                    bc:cb:26:02:77:d9:4c:03:1d:31:45:07:d8:02:9b:
                    c0:cf:cd:b3:2c:41:46:7a:1b:41:8d:83:f4:da:37:
                    41:16:7f:e6:37:8d:d4:81:82:92:56:f0:e1:0e:65:
                    9a:ac:ce:49:b6:7b:ca:84:9d:38:a5:24:58:2b:a0:
                    d2:c0:6b:23:97:0d:8f:cf:cb:fc:9c:3d:1e:ff:98:
                    2d:cb:df:f5:3d:ea:ca:f4:65:70:98:1c:f7:75:47:
                    27:10:fa:46:ef:63:2f:3b:9c:6b:7a:1a:f9:03:8b:
                    6f:67:e8:8a:38:b7:b9:77:dd:7a:5f:63:da:3f:cb:
                    53:b4:c7:2b:a5:2f:74:17:39:00:3c:ab:54:bb:60:
                    5d:32:44:69:1e:83:ad:7f:35:26:46:ae:b6:c0:3c:
                    d1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:61:35:EF:0A:7E:A4:B9:93:8C:CA:2B:FC:E3:B5:9E:E4:C5:40:AA
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a3a2f33382d3338203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10::/38

    Signature Algorithm: sha256WithRSAEncryption
         bf:df:81:3c:a6:37:8b:cf:ed:a5:27:f3:bb:3a:08:b4:eb:63:
         bf:75:c2:99:27:d6:21:a3:56:f1:fd:90:41:ae:39:1c:c4:08:
         30:d3:27:a2:3d:b5:f4:de:b7:b3:a6:70:12:e7:d5:4e:5b:f5:
         81:bf:2c:f3:27:f8:71:db:9c:87:31:c7:1d:7e:42:fa:d1:b9:
         5a:7c:d3:82:7e:ad:17:19:2b:24:72:86:ee:f4:55:47:f4:85:
         b0:3f:22:fc:57:12:ce:12:70:c4:f6:1e:01:55:67:01:e2:75:
         07:0d:a0:db:c6:8d:1d:0c:bb:e9:2f:8b:30:43:b5:bb:b5:ad:
         85:35:b6:fb:64:eb:5c:f9:d9:06:17:26:4d:94:76:1d:bd:73:
         80:2e:a8:68:7d:01:bb:c8:02:52:d6:31:10:8f:3b:29:31:74:
         f4:eb:8b:36:8b:c0:56:00:19:4d:34:d8:a3:8f:1f:18:bb:f4:
         a5:c9:99:88:27:e2:3e:b7:11:f5:88:42:70:c1:9c:d6:e3:91:
         2c:38:86:e6:40:d1:9d:93:38:45:55:5c:17:c0:d1:b4:38:6e:
         db:a0:c1:c7:fb:fd:8d:9c:31:ae:e9:18:69:6f:5a:8a:4f:87:
         4c:38:be:29:dc:a5:79:75:78:f6:77:e0:a9:7b:f2:01:fb:9c:
         c1:ce:6b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----