Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/323830343a366231303a3a2f33322d3332203d3e20323730333735.roa
File:                     323830343a366231303a3a2f33322d3332203d3e20323730333735.roa (raw, json)
Hash identifier:          Ah/MK61WWYF2IuB1tLQycvQTKQ2NPfzUFfH4+gVOvuE=
Subject key identifier:   37:AF:CE:CD:51:C3:D8:13:EE:01:3C:DA:FC:BA:E5:C7:12:17:C0:49
Certificate issuer:       /CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
Certificate serial:       3B31CC51D0CF2ADBBD634C57FA0DEDCA9DB3AC7E
Authority key identifier: 4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/323830343a366231303a3a2f33322d3332203d3e20323730333735.roa
Signing time:             Tue 05 Mar 2024 19:53:08 +0000
ROA not before:           Tue 05 Mar 2024 19:48:08 +0000
ROA not after:            Tue 04 Mar 2025 19:53:08 +0000
asID:                     270375
IP address blocks:        2804:6b10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:31:cc:51:d0:cf:2a:db:bd:63:4c:57:fa:0d:ed:ca:9d:b3:ac:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
        Validity
            Not Before: Mar  5 19:48:08 2024 GMT
            Not After : Mar  4 19:53:08 2025 GMT
        Subject: CN=37AFCECD51C3D813EE013CDAFCBAE5C71217C049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:4b:99:e9:38:3f:bf:78:78:cb:33:f3:cd:
                    e7:bd:3a:42:5e:07:92:1d:f1:14:7a:0a:69:0f:fa:
                    b0:00:83:bd:42:82:45:db:e7:6b:da:fb:34:c8:09:
                    3d:39:25:fb:c2:99:45:4c:8e:3b:1a:8d:d5:8a:29:
                    f8:fe:cf:e5:6b:5b:1c:ff:76:0c:18:99:11:0f:e0:
                    0e:4c:7d:7d:e7:b6:ca:08:ed:48:f1:a2:6b:58:e1:
                    b5:86:ca:ce:3f:62:0c:02:08:76:50:41:4e:4e:f1:
                    89:a9:05:98:f5:bd:21:4e:64:c3:c4:d9:22:9c:b8:
                    18:02:7b:5c:06:4e:88:4f:bd:5f:e4:09:87:a5:a3:
                    23:44:1b:f6:aa:98:d3:a2:2f:a9:35:80:fb:59:83:
                    29:dc:ab:2d:c6:07:81:6a:88:9b:eb:4b:94:eb:bb:
                    20:9a:7c:c2:ec:90:fa:a8:71:6f:87:76:69:e0:83:
                    30:6d:65:c2:9b:20:2e:25:e6:c5:44:05:d4:40:f1:
                    48:e2:8a:27:6f:3a:b7:8b:4e:d2:dc:08:1b:73:e7:
                    4c:46:e8:ef:62:c7:95:9a:1c:ca:ad:d6:4b:27:1c:
                    76:f5:8f:63:3d:58:cb:02:a5:42:54:96:68:08:2f:
                    6f:a7:7a:4a:71:50:7d:ac:2c:41:e0:42:c9:3c:bd:
                    b7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AF:CE:CD:51:C3:D8:13:EE:01:3C:DA:FC:BA:E5:C7:12:17:C0:49
            X509v3 Authority Key Identifier:
                keyid:4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/323830343a366231303a3a2f33322d3332203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:11:2d:ca:f4:5e:f0:aa:6d:4f:6d:59:82:f8:7c:29:27:85:
         78:f2:ba:f5:ba:9c:33:b1:9d:ff:34:36:c7:4f:72:8e:bd:ea:
         5f:9f:aa:47:20:5b:66:cd:1c:d7:01:ad:2a:fa:6e:c0:15:37:
         dc:17:a7:ed:7a:0b:59:af:1c:ad:50:ab:63:22:a7:d1:77:be:
         0f:ab:03:15:66:9c:1f:6a:6e:b3:01:22:32:c7:76:8a:e4:8d:
         a3:a7:1d:bb:ea:d3:b5:8f:c4:91:35:9d:9c:48:a2:ac:76:6a:
         c3:6a:69:d5:81:c3:fc:67:44:1a:47:b8:df:90:67:14:42:b7:
         95:20:f6:00:81:58:d5:09:59:20:b8:19:40:71:70:59:0c:2e:
         c5:c1:36:8d:54:09:c9:2c:75:07:ac:61:a9:33:8f:02:18:3a:
         46:11:49:35:5e:8c:a7:d0:7a:aa:5a:1c:b3:4d:ef:a3:ba:ec:
         0d:99:9e:7f:be:73:4f:06:a2:d9:fd:e6:18:fd:fd:60:ac:dc:
         7a:db:e8:31:dd:c0:9a:06:da:2e:a2:f8:25:4e:31:e8:f5:d4:
         ec:2f:19:85:39:d9:3c:e8:b0:1a:47:66:f8:96:bb:2f:9a:9a:
         56:0a:03:40:6e:78:cb:4b:a2:6b:70:a3:2c:99:a6:1c:dc:67:
         cc:76:c9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----