Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33322d313238203d3e20323730383738.roa
File:                     323830343a373264343a3a2f33322d313238203d3e20323730383738.roa (raw, json)
Hash identifier:          +Qm4gsb3a0ZYmO+8iHeIggyKA4sglzYDvTfyzCB8x0M=
Subject key identifier:   5B:95:67:04:5A:93:F9:9A:FB:B2:8F:68:FC:BC:A7:D3:87:7E:AE:42
Certificate issuer:       /CN=5D1C01661F76337C537B616528DEE8BDB3C55925
Certificate serial:       7D82B33F45E8D2C37BA90C2721DF0650F001B34A
Authority key identifier: 5D:1C:01:66:1F:76:33:7C:53:7B:61:65:28:DE:E8:BD:B3:C5:59:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1C01661F76337C537B616528DEE8BDB3C55925.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33322d313238203d3e20323730383738.roa
Signing time:             Thu 28 Mar 2024 18:15:01 +0000
ROA not before:           Thu 28 Mar 2024 18:10:01 +0000
ROA not after:            Thu 27 Mar 2025 18:15:01 +0000
asID:                     270878
IP address blocks:        2804:72d4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:82:b3:3f:45:e8:d2:c3:7b:a9:0c:27:21:df:06:50:f0:01:b3:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1C01661F76337C537B616528DEE8BDB3C55925
        Validity
            Not Before: Mar 28 18:10:01 2024 GMT
            Not After : Mar 27 18:15:01 2025 GMT
        Subject: CN=5B9567045A93F99AFBB28F68FCBCA7D3877EAE42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:00:f0:3f:19:76:48:78:11:5f:d7:19:66:
                    f0:0d:86:be:0a:63:ff:50:67:95:62:17:74:bd:ff:
                    32:b3:38:2f:15:ff:f3:60:c1:f8:07:2f:36:72:74:
                    73:53:3b:1a:38:94:ea:0d:52:76:7a:2a:90:d4:6c:
                    dc:de:a3:47:7b:95:c3:78:7d:df:89:dc:3f:80:94:
                    21:0f:b8:63:4d:a1:21:83:9b:ae:e7:95:54:a8:7c:
                    6c:4a:a1:b7:42:9c:db:62:21:7c:06:c8:0f:bf:e9:
                    14:c2:50:e3:c3:a6:99:46:90:54:ac:57:fb:56:16:
                    6a:c8:00:b3:b2:e1:5d:79:82:9a:f3:e1:10:c7:a5:
                    ad:9b:ec:71:28:1b:7b:71:f0:65:58:56:2e:2e:63:
                    be:35:e9:ab:71:86:1c:08:f9:f2:b8:17:23:88:56:
                    bc:74:ba:4b:ec:13:da:eb:8c:c8:29:07:7c:71:d1:
                    8d:bc:4a:1b:4c:85:f8:88:1f:8f:71:1b:e5:21:3f:
                    b2:56:75:63:52:c2:5e:b5:9e:70:3f:5d:38:c3:4c:
                    5c:51:ad:ad:12:e7:5c:a1:d2:5d:5a:d2:ff:e7:bd:
                    03:4c:22:45:eb:ee:5a:c6:c7:7e:e4:52:0c:c2:8d:
                    34:e4:8e:de:e7:f1:11:6e:64:6d:d9:0a:60:fe:e6:
                    a2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:95:67:04:5A:93:F9:9A:FB:B2:8F:68:FC:BC:A7:D3:87:7E:AE:42
            X509v3 Authority Key Identifier:
                keyid:5D:1C:01:66:1F:76:33:7C:53:7B:61:65:28:DE:E8:BD:B3:C5:59:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5D1C01661F76337C537B616528DEE8BDB3C55925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1C01661F76337C537B616528DEE8BDB3C55925.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33322d313238203d3e20323730383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:66:33:a4:5d:a4:96:0f:20:9e:aa:17:08:1e:d1:00:db:cf:
         8f:29:e6:5e:2a:ac:55:64:68:ac:78:0c:1e:db:fe:1b:b1:18:
         d7:a2:ea:24:8f:6d:3e:37:d8:1f:4e:dd:92:e5:37:1c:f8:38:
         6d:81:d6:d8:95:67:51:ff:59:5e:65:a5:7f:65:a7:22:1e:87:
         e6:f9:18:38:bf:53:58:23:5a:06:82:b3:08:25:da:83:1f:fd:
         80:4a:f4:e9:b9:e3:2b:06:56:76:38:b7:91:2a:ca:ed:b5:20:
         70:0a:de:de:50:d9:e3:5e:14:f8:8a:37:bd:f2:d8:e8:84:f1:
         ed:08:8a:8f:ff:18:f1:6f:fa:0b:0c:65:a8:da:07:18:c4:2f:
         63:f1:b5:12:97:8b:a9:07:c6:fd:1f:4f:5e:5f:5e:7c:1b:21:
         04:22:37:94:97:c9:69:5c:4e:f4:62:97:3b:5b:c8:a3:0d:41:
         9e:93:a8:c9:6a:f8:65:0e:80:37:e4:6b:3a:a3:e3:4e:84:f5:
         b2:c9:6f:5f:00:fb:e2:09:50:1c:3b:f8:58:8f:5b:bc:03:fe:
         2e:65:7f:c2:79:78:9e:11:98:43:07:63:ab:3c:de:d8:24:58:
         8c:e7:eb:9c:21:fd:6a:ba:dd:b6:ba:f7:88:0d:06:a1:9c:80:
         a8:19:7a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----