Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a383030303a3a2f33332d3333203d3e20323731313131.roa
File:                     323830343a373636633a383030303a3a2f33332d3333203d3e20323731313131.roa (raw, json)
Hash identifier:          r8VzFSrmTdNeNC1niJTkevrqYnEX2VTH6l9E8e/7RTM=
Subject key identifier:   1C:5B:36:6E:50:25:AA:8F:20:DF:6F:6A:86:9E:05:4D:DB:22:EF:B9
Certificate issuer:       /CN=3AD5972290586B5BEB9106DC1754301150A63C87
Certificate serial:       7526091D5DC850DCD50F5E9C1389F1E045798647
Authority key identifier: 3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a383030303a3a2f33332d3333203d3e20323731313131.roa
Signing time:             Wed 20 Mar 2024 19:28:56 +0000
ROA not before:           Wed 20 Mar 2024 19:23:56 +0000
ROA not after:            Wed 19 Mar 2025 19:28:56 +0000
asID:                     271111
IP address blocks:        2804:766c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:26:09:1d:5d:c8:50:dc:d5:0f:5e:9c:13:89:f1:e0:45:79:86:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD5972290586B5BEB9106DC1754301150A63C87
        Validity
            Not Before: Mar 20 19:23:56 2024 GMT
            Not After : Mar 19 19:28:56 2025 GMT
        Subject: CN=1C5B366E5025AA8F20DF6F6A869E054DDB22EFB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:97:3b:fb:89:1d:09:32:73:3a:bc:ad:48:
                    13:53:2b:0e:71:b3:c4:08:9b:75:e1:bb:b2:d1:f6:
                    16:41:72:1a:04:57:d7:07:04:c0:1e:15:fd:66:bd:
                    97:63:1f:8d:0c:5d:16:6c:1f:8d:d5:58:13:65:57:
                    bd:e2:01:9e:22:cc:5f:d4:50:3e:30:82:60:43:af:
                    49:fc:6c:a5:b8:3c:95:d1:cb:89:9e:07:f0:1d:24:
                    55:b4:70:6e:c5:8f:d2:9b:51:06:ee:4c:1e:64:9a:
                    df:76:93:54:0a:2d:55:57:8e:6e:72:25:c1:46:b5:
                    53:4f:64:18:d3:73:0b:c5:cd:67:9b:52:86:44:75:
                    92:c0:65:d9:31:75:ea:de:48:ff:0f:e5:07:d2:6e:
                    a7:a4:dd:ee:2e:65:ef:ea:0e:a8:fb:97:02:52:60:
                    ed:d0:4a:43:de:e8:66:d7:da:7e:cd:fd:ce:5d:3d:
                    ce:07:1e:0b:54:15:9e:11:bd:d4:04:d7:3a:56:32:
                    7b:7c:b4:09:96:f0:55:7a:3a:f9:60:20:b6:01:aa:
                    b9:0d:73:b3:47:21:c3:77:70:71:30:d8:83:88:4d:
                    b6:2a:2f:b0:b6:c9:34:c5:16:89:f9:73:2e:e0:01:
                    d6:81:5a:2d:d3:78:e6:66:04:3b:13:fe:09:4e:e8:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5B:36:6E:50:25:AA:8F:20:DF:6F:6A:86:9E:05:4D:DB:22:EF:B9
            X509v3 Authority Key Identifier:
                keyid:3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3AD5972290586B5BEB9106DC1754301150A63C87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a383030303a3a2f33332d3333203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:766c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6d:73:22:4f:c4:92:b8:08:b7:e7:be:88:99:fc:70:ae:d8:81:
         47:fa:2f:77:42:e2:dc:7f:7f:6b:c7:6b:09:08:ea:8c:8b:98:
         0e:d1:c8:2d:2f:e1:4b:b4:20:17:52:f4:11:7d:95:00:9e:0e:
         c6:ed:09:6b:a5:95:e1:7d:ac:53:5f:02:e6:7c:ec:27:e8:5b:
         8e:ea:f0:a4:ca:d9:c3:83:34:b6:d7:ba:b7:c2:4d:23:4b:d9:
         21:52:5c:00:23:da:00:59:4e:0d:e4:00:f9:17:aa:5e:34:12:
         d3:b3:7d:19:3f:87:46:8f:19:92:50:5d:ec:95:43:f1:d3:e5:
         66:69:39:90:e0:aa:ed:f1:55:0b:c6:10:0f:38:aa:ea:1d:d7:
         ee:1f:c8:65:21:6b:ea:52:d1:0a:17:63:ca:4b:6d:46:67:99:
         61:18:3a:08:e5:b6:13:65:5a:76:9d:5e:a8:a8:a9:10:07:c3:
         63:98:37:0d:ea:c1:44:53:d4:47:05:9b:d0:5b:df:34:dd:f2:
         1a:f7:73:b2:60:75:ac:bc:af:c0:6a:55:1a:86:aa:9e:27:0f:
         80:91:cd:7c:cd:09:6d:76:09:a2:8a:77:f9:8a:3a:af:e4:bd:
         73:89:a0:32:1d:ee:99:19:6e:02:47:70:8c:a5:4b:05:97:3a:
         6e:70:9c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----