Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/323830343a3631303a3a2f33322d3438203d3e20323632353635.roa
File:                     323830343a3631303a3a2f33322d3438203d3e20323632353635.roa (raw, json)
Hash identifier:          0pa0hTBC8356xVN9bYRMYrH7IY5ISsOgFQjirMqds20=
Subject key identifier:   0B:86:FC:B9:D4:2E:67:59:99:37:7B:D2:15:05:49:66:A0:E6:E7:8F
Certificate issuer:       /CN=C98C64D9AE2B76AE930D9CD40C87D80301EED54C
Certificate serial:       10A3261B3645751764E5DD141D786615315E38B1
Authority key identifier: C9:8C:64:D9:AE:2B:76:AE:93:0D:9C:D4:0C:87:D8:03:01:EE:D5:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C98C64D9AE2B76AE930D9CD40C87D80301EED54C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/323830343a3631303a3a2f33322d3438203d3e20323632353635.roa
Signing time:             Tue 19 Mar 2024 18:04:09 +0000
ROA not before:           Tue 19 Mar 2024 17:59:09 +0000
ROA not after:            Tue 18 Mar 2025 18:04:09 +0000
asID:                     262565
IP address blocks:        2804:610::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a3:26:1b:36:45:75:17:64:e5:dd:14:1d:78:66:15:31:5e:38:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98C64D9AE2B76AE930D9CD40C87D80301EED54C
        Validity
            Not Before: Mar 19 17:59:09 2024 GMT
            Not After : Mar 18 18:04:09 2025 GMT
        Subject: CN=0B86FCB9D42E675999377BD215054966A0E6E78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:af:12:af:e3:6b:a1:59:57:42:a0:8b:e0:
                    6e:60:1d:f4:07:b0:ab:87:ac:0f:98:82:78:18:8a:
                    a2:7d:c2:5c:c6:78:7b:e9:db:e1:56:90:e4:48:4a:
                    28:c3:99:7d:61:78:bd:26:3a:6c:39:f7:63:f1:5c:
                    d2:ee:35:b5:3a:ba:4d:57:1f:50:4c:1a:50:7c:58:
                    42:27:65:32:a7:a5:7d:45:84:5c:cd:c8:02:7f:5c:
                    17:73:04:14:9f:4e:9b:7e:90:30:e6:10:02:4f:f6:
                    81:23:32:72:06:76:84:e5:29:c2:e3:64:e4:f7:5f:
                    de:a7:d5:28:e6:b8:59:33:fa:aa:c7:5f:2e:c0:c5:
                    97:6a:62:4b:2f:b4:b3:b3:ec:ec:6d:5b:ba:98:4b:
                    25:8a:68:5e:7b:b9:fb:9b:3c:05:e7:05:e8:5a:27:
                    16:85:fb:7e:9d:00:ce:06:2d:59:3e:69:4e:75:3a:
                    81:cd:2c:b8:77:24:7b:93:2e:39:e5:9d:ed:ac:ff:
                    01:f4:9f:04:4c:08:17:52:66:45:07:73:c8:61:58:
                    f2:34:95:4d:8a:fb:36:b5:9f:dc:a4:6b:64:22:60:
                    8d:c0:e6:6c:18:33:29:7b:49:cf:e1:73:aa:fd:f5:
                    99:4f:5a:98:68:e7:f8:fb:e3:a0:e1:0d:4c:fb:15:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:86:FC:B9:D4:2E:67:59:99:37:7B:D2:15:05:49:66:A0:E6:E7:8F
            X509v3 Authority Key Identifier:
                keyid:C9:8C:64:D9:AE:2B:76:AE:93:0D:9C:D4:0C:87:D8:03:01:EE:D5:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/C98C64D9AE2B76AE930D9CD40C87D80301EED54C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C98C64D9AE2B76AE930D9CD40C87D80301EED54C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/323830343a3631303a3a2f33322d3438203d3e20323632353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:610::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:06:e1:63:c4:d1:e7:bf:bc:a4:4d:d1:35:00:cc:8a:3c:73:
         2c:2c:3d:26:89:18:90:08:fc:63:0b:ca:21:7c:8a:31:4e:2d:
         67:9a:6c:b9:1d:a0:48:ef:a3:c1:b8:39:0e:95:00:f4:e1:ae:
         be:a3:4b:e7:d5:1c:20:9c:5e:94:84:12:9d:96:62:63:b8:a7:
         88:c2:df:eb:45:26:e7:e5:dd:2b:3a:3c:49:75:35:20:92:e2:
         3b:61:0d:5d:0b:e3:10:ba:04:df:c0:dd:e2:44:e0:19:64:a4:
         d3:21:cf:a7:dc:7b:5d:20:7f:ab:04:90:c1:e5:27:61:8f:21:
         b8:3a:c2:98:23:ef:b9:b0:54:e5:c7:da:1a:97:59:26:ca:23:
         7a:f8:52:78:3a:9a:c4:ee:4c:25:c7:7e:48:12:ff:61:8e:0b:
         a5:1f:e5:b7:47:ee:f7:a2:1e:d3:76:ac:93:55:f6:6b:39:64:
         84:36:0b:3d:e6:51:7d:09:15:25:0e:e2:0d:c0:8b:ec:17:b5:
         66:b4:e3:ff:22:07:e4:27:de:e7:49:0f:b4:80:8b:1c:2a:1d:
         56:46:4e:5c:a0:9a:5d:1f:ab:5c:14:34:57:4e:67:6f:1a:8d:
         d0:85:12:cc:f2:84:69:08:f9:d0:1d:80:c4:c8:9d:7e:09:bc:
         3e:5a:28:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----