Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/323830343a363765343a3a2f33322d313238203d3e20323639363537.roa
File:                     323830343a363765343a3a2f33322d313238203d3e20323639363537.roa (raw, json)
Hash identifier:          WFE8MN8A+LW62NChU09ZN01ElCK8M7VYL1LiXLmT9aA=
Subject key identifier:   F2:35:C5:46:F5:BE:47:43:95:45:12:D6:54:1C:4C:6D:87:F5:79:5A
Certificate issuer:       /CN=79EE627B7BDC29280A0ACD52E3CAB055E99AD07D
Certificate serial:       0F3794F86814F297DAB6B662D639E9CEA1BF2B06
Authority key identifier: 79:EE:62:7B:7B:DC:29:28:0A:0A:CD:52:E3:CA:B0:55:E9:9A:D0:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79EE627B7BDC29280A0ACD52E3CAB055E99AD07D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/323830343a363765343a3a2f33322d313238203d3e20323639363537.roa
Signing time:             Fri 01 Mar 2024 12:55:27 +0000
ROA not before:           Fri 01 Mar 2024 12:50:27 +0000
ROA not after:            Fri 28 Feb 2025 12:55:27 +0000
asID:                     269657
IP address blocks:        2804:67e4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:37:94:f8:68:14:f2:97:da:b6:b6:62:d6:39:e9:ce:a1:bf:2b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79EE627B7BDC29280A0ACD52E3CAB055E99AD07D
        Validity
            Not Before: Mar  1 12:50:27 2024 GMT
            Not After : Feb 28 12:55:27 2025 GMT
        Subject: CN=F235C546F5BE4743954512D6541C4C6D87F5795A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:94:b9:11:60:52:2c:fa:0a:d7:c1:6f:81:
                    2f:cf:55:6f:a0:64:84:0b:fb:67:4a:73:47:d6:e4:
                    f6:21:5b:eb:2c:97:79:00:f0:85:1e:5a:d9:29:ad:
                    a3:10:4f:d2:ec:35:53:16:0f:93:e1:60:3b:46:76:
                    f7:99:43:b9:57:ca:ee:43:4a:7d:66:13:2d:29:56:
                    36:4e:a3:cc:d6:0f:45:7c:02:fe:73:37:88:ab:39:
                    50:fe:a0:81:67:6b:9f:f6:3e:e6:1a:f0:74:af:46:
                    fd:69:7a:0a:48:e9:dc:19:41:66:30:44:ef:49:48:
                    ab:77:e8:ec:c1:c2:bc:b6:ec:96:50:cb:6a:8d:89:
                    f1:63:74:5d:a0:fb:e2:ad:02:4c:99:b3:cd:0f:18:
                    ee:84:d6:11:a7:4a:b9:3d:b9:81:a4:1a:d5:25:33:
                    b6:84:a5:c9:d8:bc:9c:55:ab:38:7e:a4:95:6e:16:
                    a4:4d:c2:5d:a9:7e:c1:fa:6b:11:e6:8e:8a:dd:ef:
                    4b:8b:85:ab:78:f9:96:42:c6:c1:33:1f:6a:5f:24:
                    36:54:62:4e:64:54:41:c7:34:99:e5:0b:83:94:12:
                    c4:df:cf:e5:5a:4b:91:0f:38:4e:bf:3a:a3:ce:80:
                    8f:f4:3d:dd:d5:a4:93:e7:e0:dc:97:f7:20:e2:f3:
                    9b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:35:C5:46:F5:BE:47:43:95:45:12:D6:54:1C:4C:6D:87:F5:79:5A
            X509v3 Authority Key Identifier:
                keyid:79:EE:62:7B:7B:DC:29:28:0A:0A:CD:52:E3:CA:B0:55:E9:9A:D0:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/79EE627B7BDC29280A0ACD52E3CAB055E99AD07D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79EE627B7BDC29280A0ACD52E3CAB055E99AD07D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/323830343a363765343a3a2f33322d313238203d3e20323639363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:ab:d6:e7:ae:42:4e:f4:59:c7:7b:3a:68:fb:8c:a6:16:a0:
         a2:b0:9c:ce:37:69:7b:f5:0e:1b:2a:ab:10:0e:90:ba:dc:d6:
         66:51:4f:d4:cf:27:f6:bc:d5:69:bf:6c:ff:75:fe:f2:b0:11:
         af:2f:8c:fe:38:4f:8d:d4:39:eb:fd:56:74:61:54:e0:65:6c:
         ed:34:a6:58:0f:61:d6:3d:ff:05:a8:48:a9:d6:81:ae:f4:bc:
         dd:6e:da:f6:97:32:4c:a6:d1:0e:f1:f0:13:97:e4:cc:fc:4d:
         d4:5b:2c:9f:ab:06:47:a1:60:99:2c:c7:46:9e:d4:3e:01:f3:
         86:a7:03:c6:2e:e4:29:55:67:89:7f:2e:e0:3f:24:29:ad:ec:
         e6:86:39:65:68:de:54:8a:c8:6c:47:42:11:d9:2c:cc:a6:dc:
         61:42:dd:4d:17:2d:b1:d9:86:65:88:00:07:df:e7:bd:09:e2:
         a9:8f:21:21:17:4b:b2:a4:0c:fa:0a:08:51:e1:fb:fc:a4:d4:
         28:49:b4:36:d6:10:80:43:29:54:4c:a2:0f:00:7e:57:5f:6f:
         e5:cf:df:4d:10:52:af:f1:3b:89:0e:34:7b:01:6a:0d:c3:6c:
         73:74:98:9c:22:6e:03:33:43:88:d2:fe:6d:a8:5d:c6:fc:7c:
         14:e3:66:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----