Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/323830343a3138343a343030303a3a2f33342d3334203d3e20323632373439.roa
File:                     323830343a3138343a343030303a3a2f33342d3334203d3e20323632373439.roa (raw, json)
Hash identifier:          1WvR0Zg6qv1HofQlqPw9mVDdV3SfdzcKCBQ36RvWO9E=
Subject key identifier:   79:FA:FA:35:30:2E:F7:EA:49:EF:AC:3A:7C:B9:68:C5:A8:7F:45:AF
Certificate issuer:       /CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
Certificate serial:       03921BEA4EAEB858C85FCD3A8046CBAB417C1BCC
Authority key identifier: 03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/323830343a3138343a343030303a3a2f33342d3334203d3e20323632373439.roa
Signing time:             Wed 21 Feb 2024 14:00:21 +0000
ROA not before:           Wed 21 Feb 2024 13:55:21 +0000
ROA not after:            Wed 19 Feb 2025 14:00:21 +0000
asID:                     262749
IP address blocks:        2804:184:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:92:1b:ea:4e:ae:b8:58:c8:5f:cd:3a:80:46:cb:ab:41:7c:1b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
        Validity
            Not Before: Feb 21 13:55:21 2024 GMT
            Not After : Feb 19 14:00:21 2025 GMT
        Subject: CN=79FAFA35302EF7EA49EFAC3A7CB968C5A87F45AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:24:8c:91:bf:c8:a6:92:99:97:7e:58:89:4b:
                    37:92:e7:7d:2a:b8:99:74:46:f4:a9:1a:66:df:73:
                    81:32:32:ca:2c:1a:15:03:9b:74:9d:5a:cf:75:f4:
                    60:5c:f6:73:f7:f9:be:75:76:97:8c:ee:c6:da:b4:
                    53:f4:d6:b1:35:cd:ad:cf:c4:30:69:2a:a5:23:3d:
                    0f:c7:ad:c4:50:14:6a:17:40:5d:97:01:54:98:50:
                    39:4a:ea:bf:bc:cd:56:ef:d7:74:10:fc:f6:2e:0a:
                    41:c0:76:c9:42:cc:14:da:ce:c2:77:d2:6c:e2:08:
                    41:ef:e6:8b:f6:79:e5:48:45:81:8e:8e:88:e7:45:
                    28:56:a7:6e:4a:8f:a0:2b:92:52:84:a6:f2:d6:ad:
                    53:f8:9b:35:ee:b7:13:84:5d:68:7a:6b:f9:d5:a1:
                    fd:ee:d7:66:a7:cd:08:3f:bb:64:46:e7:9b:65:24:
                    23:ea:4f:03:d9:66:82:f0:98:a8:23:3e:2f:89:83:
                    dd:e1:fe:f2:6e:78:f9:a8:4b:18:fd:30:4c:30:e1:
                    08:c0:5b:21:30:23:ec:af:85:d0:a2:49:4d:36:3e:
                    41:2a:40:30:5a:72:ee:62:b7:0c:dc:4c:de:d9:62:
                    7b:79:67:3d:9c:e8:0f:b8:92:7f:1b:40:89:01:6d:
                    8f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FA:FA:35:30:2E:F7:EA:49:EF:AC:3A:7C:B9:68:C5:A8:7F:45:AF
            X509v3 Authority Key Identifier:
                keyid:03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/323830343a3138343a343030303a3a2f33342d3334203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:184:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5f:1a:53:d7:3a:f0:68:c8:39:44:04:f4:66:79:62:d2:03:73:
         59:01:84:17:d8:a5:ce:92:36:7a:b8:98:58:59:46:0d:0e:5a:
         97:e4:01:76:7e:0f:e6:0d:a2:fe:19:b5:2e:20:f1:89:04:27:
         b5:cf:7c:44:74:b4:e9:9a:96:04:a3:c9:1f:c1:d7:27:6d:f1:
         b7:71:32:1d:35:d2:6e:6e:62:b6:ec:8a:1c:7c:5b:d9:5e:a5:
         5b:29:32:ae:98:28:6c:1e:4a:0e:d9:d1:aa:82:e9:0b:16:e9:
         46:85:b2:64:2c:ea:ae:70:c8:33:ee:70:5f:31:7a:30:36:c6:
         c4:75:51:a7:a7:fe:99:df:05:f9:77:aa:08:4f:b5:9b:75:7e:
         f9:d4:0a:66:00:3d:e3:c5:3d:3d:f5:4d:b0:04:f8:ee:0f:88:
         5c:bc:65:87:17:22:3c:85:d1:de:1b:ce:4f:65:d7:a2:ca:22:
         ff:37:a7:da:6d:5d:11:72:82:4b:1d:91:00:ff:b3:4a:4b:df:
         2c:b3:a6:4e:9e:fe:2a:7b:ee:f8:e6:5f:b2:7d:a4:ed:16:65:
         1f:0b:8a:6b:c3:20:20:c6:8d:0d:5e:93:86:5a:a3:98:96:81:
         a0:20:b2:97:b8:07:b6:eb:69:6f:2a:36:11:88:b5:19:bd:9f:
         c7:9d:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----