Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a3a2f33332d3333203d3e20323731313131.roa
File:                     323830343a373636633a3a2f33332d3333203d3e20323731313131.roa (raw, json)
Hash identifier:          51E3eeLsAa7HK1p9ntkLPneASXvbcBpPT5VUxSEqMrk=
Subject key identifier:   0C:22:3C:7F:E1:87:5E:01:DF:24:F0:AC:40:E7:F7:E5:0C:98:02:57
Certificate issuer:       /CN=3AD5972290586B5BEB9106DC1754301150A63C87
Certificate serial:       5914C7E1B2F7BC19E7FF7704D254162D6B0041AB
Authority key identifier: 3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a3a2f33332d3333203d3e20323731313131.roa
Signing time:             Wed 20 Mar 2024 19:28:55 +0000
ROA not before:           Wed 20 Mar 2024 19:23:55 +0000
ROA not after:            Wed 19 Mar 2025 19:28:55 +0000
asID:                     271111
IP address blocks:        2804:766c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:14:c7:e1:b2:f7:bc:19:e7:ff:77:04:d2:54:16:2d:6b:00:41:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD5972290586B5BEB9106DC1754301150A63C87
        Validity
            Not Before: Mar 20 19:23:55 2024 GMT
            Not After : Mar 19 19:28:55 2025 GMT
        Subject: CN=0C223C7FE1875E01DF24F0AC40E7F7E50C980257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fd:75:54:f0:62:52:87:84:90:c1:0d:18:25:
                    30:9b:24:e2:28:a4:d8:b7:de:97:ac:0e:54:44:64:
                    80:64:9b:80:26:06:26:31:97:ce:60:a5:8e:16:a5:
                    52:0b:02:49:5e:ac:5c:01:77:19:20:15:f4:97:39:
                    2d:1e:98:1e:7a:6f:b7:98:19:14:e4:e1:08:0b:b0:
                    d0:98:50:fd:22:23:23:32:4b:de:79:ef:7b:23:d8:
                    a7:e6:52:60:3e:7f:1e:1c:ae:59:4b:df:b9:a0:14:
                    97:86:0d:86:05:30:97:ed:da:cb:c4:3e:36:56:66:
                    eb:b3:43:1f:fb:44:00:fc:4e:d0:6a:46:b9:df:28:
                    ce:b8:2e:79:33:8e:8b:25:f0:17:e3:a4:ff:72:51:
                    bc:10:79:91:82:cb:ab:d2:90:cb:09:19:24:4b:b0:
                    bb:59:e8:f0:9a:e3:5a:89:93:48:40:35:bf:b6:53:
                    01:53:b7:ef:43:bf:8a:cf:79:f3:3d:26:16:25:fc:
                    92:45:cc:87:d3:98:bb:86:e2:ca:0b:90:5d:70:95:
                    54:24:ab:fa:7a:b6:d7:c0:c9:9b:a7:5d:dc:b2:9b:
                    10:4f:74:fb:72:a3:4e:3d:d2:f1:7e:3b:e4:5d:b5:
                    21:e5:29:8b:4f:37:f3:a5:3b:77:e7:d8:da:81:b3:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:22:3C:7F:E1:87:5E:01:DF:24:F0:AC:40:E7:F7:E5:0C:98:02:57
            X509v3 Authority Key Identifier:
                keyid:3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3AD5972290586B5BEB9106DC1754301150A63C87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a3a2f33332d3333203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:766c::/33

    Signature Algorithm: sha256WithRSAEncryption
         75:d9:85:6e:67:fe:4b:31:c0:29:4b:df:cf:13:18:e7:7c:4d:
         c0:c0:ff:03:12:f4:68:57:73:2c:09:fe:13:5c:3d:06:37:57:
         13:6f:56:c3:77:09:d8:97:9b:d0:12:6f:12:ef:ad:53:e4:32:
         a0:80:9b:2b:a8:1e:d0:af:01:07:20:0b:41:7c:f8:7a:32:64:
         0d:b4:95:50:5b:23:93:69:73:63:c0:64:0c:84:34:d3:38:04:
         46:f6:0a:e7:9f:c0:3c:76:cd:f2:b9:f0:c8:f1:b2:ad:16:81:
         ba:ba:b1:b8:18:ee:58:7f:0b:e5:42:30:f5:ea:c8:1e:d7:b1:
         43:3e:1d:65:31:76:fa:99:0f:67:49:d2:06:8c:9d:fe:f8:44:
         2e:24:d0:f7:14:12:bc:ea:8e:8a:68:44:c6:97:d8:4f:c0:9f:
         13:7a:2d:a6:78:3e:e0:b2:65:e4:eb:58:fd:8f:99:d4:c0:7e:
         ee:40:26:e7:49:cf:43:36:60:b2:1a:c8:ca:00:1b:84:2d:11:
         39:ba:b6:13:ea:0c:7c:a3:7a:44:58:75:72:ba:59:44:a0:d2:
         ca:6f:10:6e:eb:f1:a5:d1:1a:2f:c3:21:d7:f1:82:af:91:cd:
         cd:36:04:14:27:2c:d8:15:a9:78:d9:bb:20:a1:5e:ec:89:2e:
         b2:9f:02:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----