Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/323830343a336637633a3a2f33322d313238203d3e20323635383936.roa
File:                     323830343a336637633a3a2f33322d313238203d3e20323635383936.roa (raw, json)
Hash identifier:          C64u0U0JuTEzBnHrRDKZ9qQcP4f7StXlt/+c0EJvRSU=
Subject key identifier:   6A:76:95:D7:2D:63:25:9E:15:E7:5F:C1:16:9F:AF:DD:FD:8D:7A:FC
Certificate issuer:       /CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
Certificate serial:       1FE97B807A2269D207D9E3FC1A4C9C4D5FDFD1B4
Authority key identifier: 77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/323830343a336637633a3a2f33322d313238203d3e20323635383936.roa
Signing time:             Sat 23 Mar 2024 09:58:55 +0000
ROA not before:           Sat 23 Mar 2024 09:53:55 +0000
ROA not after:            Sat 22 Mar 2025 09:58:55 +0000
asID:                     265896
IP address blocks:        2804:3f7c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e9:7b:80:7a:22:69:d2:07:d9:e3:fc:1a:4c:9c:4d:5f:df:d1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
        Validity
            Not Before: Mar 23 09:53:55 2024 GMT
            Not After : Mar 22 09:58:55 2025 GMT
        Subject: CN=6A7695D72D63259E15E75FC1169FAFDDFD8D7AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:7e:cf:14:84:ef:63:56:25:fd:5d:68:e6:
                    e1:09:c6:33:3a:ab:fa:74:c6:14:32:2a:09:50:d0:
                    0a:de:ac:f2:3e:c3:c1:42:2b:73:2d:73:9e:95:5f:
                    25:37:fa:73:d0:b9:a7:7b:5b:60:eb:40:5a:54:84:
                    31:99:b5:95:ab:a7:db:cd:57:49:01:09:98:37:44:
                    d2:99:e3:8a:b6:42:d7:d9:50:28:4a:68:5e:d2:df:
                    98:d4:7b:d0:67:e6:a4:22:48:12:ef:c6:a0:64:90:
                    26:c5:c1:3f:38:8b:e8:f7:cd:fa:66:b5:1b:6e:73:
                    60:48:99:31:a9:fc:30:17:19:0e:19:5d:3b:03:97:
                    c3:32:f9:f2:74:57:20:fa:72:6c:ed:7f:76:ce:4c:
                    9c:be:38:11:fe:70:45:d0:bf:8c:c3:6c:ba:c9:84:
                    37:20:8d:2b:9e:75:a7:1a:6c:e2:24:00:e0:f5:3f:
                    f2:b6:06:5d:d0:ff:04:41:d3:c8:5b:a3:27:a2:e2:
                    db:3d:e6:ef:bb:36:88:ad:a4:17:a8:5d:59:15:79:
                    f2:80:ec:9c:61:65:ba:ad:a8:31:bc:09:5b:02:ac:
                    3e:16:f6:88:0a:d4:73:17:6c:eb:17:43:b2:c3:4b:
                    8f:98:8e:80:e0:38:54:30:d1:7e:b8:76:ed:17:a5:
                    8b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:76:95:D7:2D:63:25:9E:15:E7:5F:C1:16:9F:AF:DD:FD:8D:7A:FC
            X509v3 Authority Key Identifier:
                keyid:77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/323830343a336637633a3a2f33322d313238203d3e20323635383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:50:7c:0b:b7:e4:8c:f7:be:a2:ad:29:d3:45:11:68:30:2f:
         53:da:f9:69:5e:9d:9b:f5:55:17:86:00:28:fa:94:97:25:de:
         5c:bb:a8:d5:6d:44:fc:c3:10:85:9a:a5:1c:6d:10:1f:10:9f:
         2b:3e:cc:11:95:93:c7:43:fb:a9:c6:31:8f:b1:34:c6:f7:9c:
         4c:6c:c8:52:91:db:95:9e:f8:f2:b3:30:93:54:98:0f:32:a0:
         f0:e3:77:8a:9b:12:65:3f:21:c9:da:60:39:89:b0:76:58:bf:
         ad:a4:71:81:6f:cb:0e:4f:50:dc:fe:fa:c7:4f:bd:4d:07:bd:
         79:12:12:08:9a:ef:dc:c9:35:cd:d9:fb:09:e1:83:c1:be:a9:
         fb:02:05:45:21:d9:36:77:68:32:7f:a5:29:9e:d2:fb:80:a9:
         fa:07:73:8e:2b:49:7e:2c:ee:e1:b8:55:7e:13:3f:da:f1:f4:
         c5:f1:f1:63:01:fd:b8:9b:0d:8d:ec:a7:ff:32:44:8e:3f:17:
         f4:e1:30:e8:f6:29:0f:da:38:f4:11:69:e5:ed:57:e8:6d:ce:
         26:4a:3f:90:8a:fe:34:88:21:56:87:bf:30:af:16:37:23:78:
         63:7c:06:cb:fa:10:e1:61:fe:0b:e1:25:0b:d3:04:04:9b:fb:
         29:26:4a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----