Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a3a2f33342d3334203d3e20323633363631.roa
File:                     323830343a313132383a3a2f33342d3334203d3e20323633363631.roa (raw, json)
Hash identifier:          eJ/lgXsFqEpthLcyNf7NCFrzGifH4XF0M2Cab37bZeQ=
Subject key identifier:   F9:A1:71:7C:02:8B:68:F8:DD:FA:00:67:1C:E0:AB:4E:02:2B:0B:BC
Certificate issuer:       /CN=1F461E0163E83106F84ADF1433865326051B09F5
Certificate serial:       2C4EA8DBB3251F4938B05260F677139E7BF11D1B
Authority key identifier: 1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a3a2f33342d3334203d3e20323633363631.roa
Signing time:             Thu 28 Mar 2024 18:45:02 +0000
ROA not before:           Thu 28 Mar 2024 18:40:02 +0000
ROA not after:            Thu 27 Mar 2025 18:45:02 +0000
asID:                     263661
IP address blocks:        2804:1128::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4e:a8:db:b3:25:1f:49:38:b0:52:60:f6:77:13:9e:7b:f1:1d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F461E0163E83106F84ADF1433865326051B09F5
        Validity
            Not Before: Mar 28 18:40:02 2024 GMT
            Not After : Mar 27 18:45:02 2025 GMT
        Subject: CN=F9A1717C028B68F8DDFA00671CE0AB4E022B0BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:9f:c9:0e:2c:91:ba:d0:ae:db:91:ec:c4:
                    1f:89:66:24:1e:3c:fc:60:4e:cd:a9:26:a6:91:c2:
                    7c:83:af:fb:b7:2b:49:13:9e:39:50:1d:98:6d:28:
                    cd:e0:d1:fa:8f:ee:cf:9e:06:63:cd:a7:4c:9d:13:
                    f3:27:64:24:19:bd:ce:c3:cd:8d:b9:5b:87:cd:80:
                    87:01:33:6b:38:80:36:9f:ac:84:8b:0d:77:53:c9:
                    7b:4b:6f:50:44:a4:29:2b:66:fe:dc:e8:16:c1:84:
                    a1:86:ec:96:10:f8:9a:86:a2:5c:00:9d:44:bc:e5:
                    35:d7:1a:98:d3:e9:32:8d:9f:07:2e:16:55:5c:38:
                    b1:8e:14:64:55:f0:79:61:12:f8:21:1e:c2:5f:19:
                    dd:e4:4a:05:4e:02:97:22:99:db:f1:33:86:e6:1d:
                    8a:9a:b9:d1:ba:ca:b7:98:8a:cf:83:f0:fe:26:15:
                    c4:2a:e8:ca:f6:d9:c4:95:2e:a1:37:1c:46:55:2c:
                    7a:fd:8b:94:45:2c:39:53:0a:b5:6f:5f:fb:6f:5c:
                    d1:ec:c5:dc:f3:d7:3e:8c:41:af:bd:65:9e:58:9e:
                    f5:51:c2:ee:33:4f:e2:bb:f7:c0:ce:bd:3a:16:e4:
                    26:b9:d5:67:8a:40:02:0c:75:b2:b9:15:71:75:94:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A1:71:7C:02:8B:68:F8:DD:FA:00:67:1C:E0:AB:4E:02:2B:0B:BC
            X509v3 Authority Key Identifier:
                keyid:1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/1F461E0163E83106F84ADF1433865326051B09F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a3a2f33342d3334203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128::/34

    Signature Algorithm: sha256WithRSAEncryption
         1d:92:9a:04:f8:1e:4c:74:97:9b:86:29:be:88:12:08:54:ed:
         88:15:0d:80:d4:b4:a4:c1:87:32:a4:ed:ca:9e:20:61:0f:55:
         8f:73:c9:2b:e9:23:f8:a3:17:af:52:4c:1e:09:d2:5b:a7:d8:
         d9:7c:33:ac:ef:a8:de:32:f5:56:0e:f0:2b:90:86:e0:cd:c5:
         72:dc:8b:8a:c3:27:48:c8:34:ea:e7:74:f7:87:7e:38:4a:69:
         ca:11:b3:c3:88:bd:1d:02:15:87:84:e0:cb:bb:0e:76:e4:ac:
         d5:7a:9e:39:a8:f6:da:38:d2:ac:04:06:62:5b:31:60:c6:95:
         34:3f:94:a4:3d:0f:c6:c0:a2:63:ec:db:ff:e2:b8:21:8e:e0:
         2a:e7:42:69:6b:41:13:a9:b8:9c:b0:30:3a:fd:b2:b2:49:52:
         69:ef:fb:77:e7:0d:db:fa:00:81:e4:63:e7:f2:09:1d:3d:18:
         f2:f3:63:bc:8f:e4:40:83:ed:3b:9e:56:a5:d3:d4:cc:eb:6c:
         02:88:e8:68:ac:ef:45:2c:26:b1:a4:3a:69:3d:b3:b0:ad:de:
         40:90:f4:fe:0e:c1:c3:bf:99:3e:2a:5b:a5:c1:58:c3:28:69:
         e5:e3:06:49:bb:c1:89:89:32:6d:4f:20:4e:58:41:c8:93:84:
         fe:b3:8e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----