Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3/323830343a3963343a3a2f33322d3434203d3e203533303535.roa
File:                     323830343a3963343a3a2f33322d3434203d3e203533303535.roa (raw, json)
Hash identifier:          bAUj1v76fuOr5nBauufqGi0DA8di6ZuzhIJ+zizKvYI=
Subject key identifier:   BE:67:FF:0C:48:DE:E6:7B:35:55:EE:9B:73:55:90:14:AD:C4:BF:0D
Certificate issuer:       /CN=D0F5CFED47B5D992A24E45C4DA19047052992A15
Certificate serial:       11CD969FD684670E183918EFCAD71998E0143EB0
Authority key identifier: D0:F5:CF:ED:47:B5:D9:92:A2:4E:45:C4:DA:19:04:70:52:99:2A:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0F5CFED47B5D992A24E45C4DA19047052992A15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3/323830343a3963343a3a2f33322d3434203d3e203533303535.roa
Signing time:             Thu 11 Apr 2024 13:50:59 +0000
ROA not before:           Thu 11 Apr 2024 13:45:59 +0000
ROA not after:            Thu 10 Apr 2025 13:50:59 +0000
asID:                     53055
IP address blocks:        2804:9c4::/32 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cd:96:9f:d6:84:67:0e:18:39:18:ef:ca:d7:19:98:e0:14:3e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F5CFED47B5D992A24E45C4DA19047052992A15
        Validity
            Not Before: Apr 11 13:45:59 2024 GMT
            Not After : Apr 10 13:50:59 2025 GMT
        Subject: CN=BE67FF0C48DEE67B3555EE9B73559014ADC4BF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:58:9f:7b:07:a9:39:be:bb:b4:6e:fd:3e:
                    fb:79:61:c6:7d:bf:ab:fb:47:0e:d3:61:29:5c:f5:
                    69:1f:29:0f:64:5a:dc:f9:fa:f5:49:3b:70:a3:1b:
                    4c:ce:67:cd:4d:06:7b:31:e6:f9:67:d3:6a:45:d4:
                    a6:b9:aa:a6:31:15:0e:a7:f2:7a:be:6f:41:dd:18:
                    08:32:05:53:ca:b9:1f:3c:9f:c6:61:e9:2c:4c:64:
                    70:6f:7a:00:9b:0a:a6:8a:d1:76:3e:57:1e:28:f7:
                    5f:fa:73:e1:14:5b:f0:bb:b6:c4:a1:5f:9f:17:11:
                    6c:fa:2c:31:be:b0:60:28:a5:f2:ba:d1:fa:2d:30:
                    7d:a1:01:53:17:82:72:d6:e0:8f:05:b9:93:64:a5:
                    a2:77:e0:c1:ff:bb:22:f4:1e:91:33:f4:11:11:60:
                    68:5b:22:53:8e:06:c7:8e:d0:0b:e9:bd:a7:e8:2c:
                    80:c5:d6:1d:12:8c:39:7c:11:9c:96:81:18:8a:de:
                    c3:51:c9:b9:c5:80:a2:b8:63:c3:90:60:dd:fd:8e:
                    ce:90:66:2f:d2:89:05:12:2d:fa:b0:69:1a:99:2e:
                    b0:75:25:23:51:e8:15:3c:62:8b:c5:9e:d6:f5:6b:
                    17:ca:51:3c:ff:d8:32:cb:5b:b3:fa:f0:99:bf:d8:
                    94:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:67:FF:0C:48:DE:E6:7B:35:55:EE:9B:73:55:90:14:AD:C4:BF:0D
            X509v3 Authority Key Identifier:
                keyid:D0:F5:CF:ED:47:B5:D9:92:A2:4E:45:C4:DA:19:04:70:52:99:2A:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3/D0F5CFED47B5D992A24E45C4DA19047052992A15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0F5CFED47B5D992A24E45C4DA19047052992A15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3/323830343a3963343a3a2f33322d3434203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:1a:1d:dd:0f:28:73:32:82:2f:45:b9:f2:8e:eb:80:55:b7:
         82:ad:36:fe:7b:0c:e4:39:d7:e4:98:ed:3f:aa:6f:12:b7:61:
         d4:2f:7e:2f:38:ca:af:3c:c4:54:04:dd:14:b3:e1:4e:ec:70:
         b1:97:fa:f2:ee:99:4a:b9:74:c0:b2:cd:a5:2c:4f:7f:18:24:
         1c:90:65:33:83:5d:f4:06:6f:c8:b7:ba:c5:08:81:b1:33:63:
         a0:89:49:eb:ea:f8:f6:7f:b5:16:80:93:0c:c4:ec:3a:d0:d1:
         4e:c5:6a:a8:19:3f:b5:ae:2d:ab:c6:14:0a:a7:20:e1:6d:24:
         43:47:10:53:36:a0:78:bd:1e:f5:ee:9c:9a:3c:da:e0:c0:7f:
         8f:b9:3c:b2:26:5b:a4:eb:80:df:65:54:f5:a8:2b:e9:90:5c:
         3a:c7:b8:20:2d:a4:8d:6a:25:a1:fb:ac:4f:de:c8:63:76:f3:
         c9:ba:b3:41:b1:a3:64:0c:0c:c2:26:bd:84:6d:df:3a:5b:ee:
         40:6f:ef:ed:2f:eb:63:25:4f:b4:c0:4e:3a:b1:96:d9:7f:90:
         0c:c2:03:cd:46:36:84:b5:ef:5b:32:33:53:06:57:78:1e:d9:
         80:4b:22:b3:53:eb:cc:06:9a:d6:26:e5:71:e6:4d:2b:ae:c5:
         fe:6a:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----