Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/323830343a6665633a37313a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a37313a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          8MYPBLMp0gnCZd/N1s/+UNakr2PpnznBbfWG5Pz4MQU=
Subject key identifier:   60:23:D4:27:BB:89:47:A9:5A:14:56:F9:8B:1C:C7:58:CC:93:3B:83
Certificate issuer:       /CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
Certificate serial:       415528A3B297FD71CD86931D1E6D03D56494974F
Authority key identifier: 6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/323830343a6665633a37313a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Sun 14 Apr 2024 02:05:43 +0000
ROA not before:           Sun 14 Apr 2024 02:00:43 +0000
ROA not after:            Sun 13 Apr 2025 02:05:43 +0000
asID:                     262493
IP address blocks:        2804:fec:71::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:55:28:a3:b2:97:fd:71:cd:86:93:1d:1e:6d:03:d5:64:94:97:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Validity
            Not Before: Apr 14 02:00:43 2024 GMT
            Not After : Apr 13 02:05:43 2025 GMT
        Subject: CN=6023D427BB8947A95A1456F98B1CC758CC933B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:2f:53:d6:3a:32:79:84:1a:ab:92:6e:5d:
                    87:f1:cf:5f:01:ed:0a:39:35:17:96:af:37:07:c8:
                    f4:04:0d:db:9f:2d:02:73:52:52:1d:55:1f:4b:86:
                    a3:77:a4:72:c4:9c:31:c1:79:47:4b:c9:0c:4e:48:
                    86:ff:2f:94:82:e5:d4:21:a9:26:98:59:19:e0:33:
                    6b:1f:74:8c:37:9a:79:c0:16:97:24:ac:41:08:c0:
                    48:75:ea:c9:c4:8f:43:70:ff:52:54:18:19:87:9d:
                    0d:2f:f7:e1:bf:ef:91:be:49:5e:70:2f:b7:4d:bd:
                    d1:08:cd:47:6f:75:4e:54:52:dd:e5:f7:66:51:91:
                    3a:b6:a5:96:56:7c:bd:d5:f4:a7:79:c6:5e:87:74:
                    da:ed:35:89:62:5e:03:42:8c:2a:53:ff:de:e8:b6:
                    37:7f:a8:32:f2:b9:d8:94:70:95:d1:f2:3b:1b:0b:
                    19:7b:2c:2a:7f:2f:06:0a:07:37:d0:05:3e:55:83:
                    3f:f8:00:32:3e:a2:99:0b:f1:47:34:38:9a:5d:3e:
                    ed:67:f6:2f:dc:3d:f9:23:b3:f4:63:cf:0a:37:f3:
                    4a:bd:22:17:e6:10:75:02:7d:04:ad:d6:83:ec:9d:
                    2a:ee:26:29:40:1f:d9:8b:b4:92:6b:3a:68:28:91:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:23:D4:27:BB:89:47:A9:5A:14:56:F9:8B:1C:C7:58:CC:93:3B:83
            X509v3 Authority Key Identifier:
                keyid:6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/323830343a6665633a37313a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:71::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:ca:7b:9e:75:86:69:cb:69:de:bf:79:c1:8d:bb:33:3b:29:
         ef:fb:c9:52:50:09:c9:2f:65:ac:d7:4a:4e:48:26:6a:8f:8d:
         50:db:27:84:d0:b1:ca:53:15:0d:af:bd:8b:03:bb:e7:33:dc:
         a8:8c:4b:9b:90:41:43:48:1a:c4:7e:f8:c9:2d:fb:41:d2:51:
         d0:48:77:ab:79:5c:61:09:aa:51:24:85:74:75:6d:c0:df:eb:
         4c:16:2c:19:5e:b2:da:ff:b8:f7:f7:13:cc:1e:31:a5:47:29:
         22:b5:fb:07:3d:27:9b:eb:1d:f2:a8:5f:c9:1f:03:18:38:a9:
         2d:b9:92:f8:12:ea:c0:9f:1c:a3:00:42:97:3b:d5:5f:4b:77:
         09:5a:e7:ac:b1:3b:e1:bc:34:1c:33:c6:72:65:84:75:ec:41:
         74:63:77:c5:21:cf:ca:2b:27:1f:64:a7:bf:a9:10:9b:e1:10:
         54:11:a9:c4:75:f7:d8:52:37:84:e8:ba:eb:0d:81:03:fb:2f:
         8b:80:d7:85:30:a3:15:db:a7:80:52:43:a0:85:b7:f5:a9:63:
         27:cc:a6:8e:b9:f1:8a:96:1d:b5:3a:1d:8d:1d:db:60:7b:22:
         44:49:ea:89:9b:d0:e1:7f:b4:7f:10:ed:a4:d0:b7:ba:63:5e:
         38:60:41:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----