Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/323830343a343361303a3a2f33322d3335203d3e20323637353830.roa
File:                     323830343a343361303a3a2f33322d3335203d3e20323637353830.roa (raw, json)
Hash identifier:          2+h7fT4vXk+T9PdgR/o/vhW+m4zD/918zoG1GYFlO2U=
Subject key identifier:   CD:E6:0B:20:58:E8:46:CB:27:78:12:28:C4:FF:CC:3D:26:0C:BA:4D
Certificate issuer:       /CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
Certificate serial:       038FA6DF29A70A021E0A1E19810FB2ED18E0CDF7
Authority key identifier: F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/323830343a343361303a3a2f33322d3335203d3e20323637353830.roa
Signing time:             Thu 07 Mar 2024 16:57:24 +0000
ROA not before:           Thu 07 Mar 2024 16:52:24 +0000
ROA not after:            Thu 06 Mar 2025 16:57:24 +0000
asID:                     267580
IP address blocks:        2804:43a0::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8f:a6:df:29:a7:0a:02:1e:0a:1e:19:81:0f:b2:ed:18:e0:cd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
        Validity
            Not Before: Mar  7 16:52:24 2024 GMT
            Not After : Mar  6 16:57:24 2025 GMT
        Subject: CN=CDE60B2058E846CB27781228C4FFCC3D260CBA4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:e9:16:e3:30:20:9a:0c:8f:b1:9a:89:c0:
                    13:e0:1d:b3:8a:c0:2b:57:aa:ba:11:41:e0:87:77:
                    2e:19:3d:33:ae:79:9e:52:5f:a4:cc:9c:85:07:5a:
                    df:80:29:b4:09:8e:80:3a:c4:59:d1:1c:92:48:24:
                    28:3b:04:a4:df:b1:9f:a6:04:5e:0d:46:17:1f:c5:
                    cb:1e:e8:3a:92:4c:13:2d:16:e0:aa:13:0d:e6:c4:
                    ea:c3:6b:8e:50:48:30:10:93:f7:27:09:cd:80:15:
                    5c:3c:fb:b1:93:2e:df:1a:dc:d0:7e:8b:0d:d6:cf:
                    bb:4f:9b:98:fd:34:ce:a2:12:63:a7:99:eb:7b:3d:
                    22:5d:cc:c7:08:e8:46:81:fa:70:73:df:83:76:00:
                    40:31:f0:d7:c4:04:68:82:7d:25:73:3f:c3:ee:d3:
                    3c:82:11:c2:e0:c6:69:87:f7:64:46:d8:8e:79:6c:
                    bf:19:7b:fe:15:ee:59:91:a4:a3:ed:3f:e0:2b:24:
                    8d:e8:3b:0b:bd:c7:29:cb:57:bd:69:71:54:09:c1:
                    83:67:68:f6:73:aa:6f:f6:89:a4:1e:9b:11:c2:61:
                    a2:23:e2:27:a8:48:13:6b:37:77:f6:8d:99:17:28:
                    e5:74:c0:da:76:d3:e0:8c:00:4c:92:0e:eb:03:2c:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E6:0B:20:58:E8:46:CB:27:78:12:28:C4:FF:CC:3D:26:0C:BA:4D
            X509v3 Authority Key Identifier:
                keyid:F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/323830343a343361303a3a2f33322d3335203d3e20323637353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:e4:0e:41:b9:d6:10:c0:fb:b4:a4:32:6a:71:bb:41:e9:1a:
         1a:4f:6e:9a:51:2c:08:9d:76:b9:eb:6c:99:42:6d:c0:61:18:
         03:13:06:c9:26:5c:4d:1c:da:dd:81:b0:fd:29:3f:f1:f4:bc:
         fb:fc:10:a3:8f:5e:3f:df:57:80:39:54:67:f1:38:d9:b1:d4:
         0b:6b:3b:fb:6f:09:b1:58:47:8c:b4:b6:13:2a:31:a4:08:64:
         fe:b0:fe:d6:89:65:8d:b7:54:d3:73:5d:51:f1:b1:0f:df:f8:
         6f:26:9a:97:34:40:7f:fe:62:d1:f9:c7:1f:20:31:a0:3d:a4:
         f4:89:41:d4:20:b7:99:7a:06:50:0f:ba:31:e1:9b:86:cc:c5:
         ac:2f:39:46:6f:52:92:17:9a:97:77:a1:4a:3b:15:be:f2:9a:
         15:e3:56:ec:cd:55:6a:dd:28:cd:93:d5:cb:04:11:b5:d5:67:
         0a:d0:41:c1:17:a2:e4:31:45:35:44:34:98:54:b7:1d:3b:7f:
         1e:f5:42:82:b8:a7:90:d6:54:1f:78:5c:70:10:d5:93:60:40:
         b2:5e:42:5f:a7:ea:42:43:48:f5:93:ff:c4:09:f2:cd:12:4c:
         c2:19:3e:0c:26:4b:2a:d6:c0:19:0a:47:82:88:0a:cf:8c:7b:
         fb:9c:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----