Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a3a2f33322d3438203d3e20323632343137.roa
File:                     323830343a6532343a3a2f33322d3438203d3e20323632343137.roa (raw, json)
Hash identifier:          jl1TosMQTum0EKfWRiO4a4suP5yCk0pOp2/i22FY9Ik=
Subject key identifier:   DD:A6:49:ED:06:C4:BF:25:CE:21:09:58:7A:68:35:08:14:FF:AD:EB
Certificate issuer:       /CN=40209EB56DBE9B90721379291AA6F10A592354FB
Certificate serial:       29F0D31406C56C6631CF2CFDB5F8BD2E52139579
Authority key identifier: 40:20:9E:B5:6D:BE:9B:90:72:13:79:29:1A:A6:F1:0A:59:23:54:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40209EB56DBE9B90721379291AA6F10A592354FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a3a2f33322d3438203d3e20323632343137.roa
Signing time:             Tue 02 Apr 2024 14:16:43 +0000
ROA not before:           Tue 02 Apr 2024 14:11:43 +0000
ROA not after:            Tue 01 Apr 2025 14:16:43 +0000
asID:                     262417
IP address blocks:        2804:e24::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f0:d3:14:06:c5:6c:66:31:cf:2c:fd:b5:f8:bd:2e:52:13:95:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40209EB56DBE9B90721379291AA6F10A592354FB
        Validity
            Not Before: Apr  2 14:11:43 2024 GMT
            Not After : Apr  1 14:16:43 2025 GMT
        Subject: CN=DDA649ED06C4BF25CE2109587A68350814FFADEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:20:1f:3d:22:02:6c:36:93:b6:b6:ac:41:
                    4d:73:91:b1:b2:e9:1a:d7:09:5f:ec:f4:70:c0:9d:
                    17:1d:f0:1a:8b:dd:13:90:91:47:2f:f8:9a:15:53:
                    82:d3:2d:30:75:b8:4d:c1:b1:17:90:53:0d:4e:1b:
                    65:66:e0:fe:9d:77:89:2a:b5:02:4c:8f:fe:d1:a0:
                    7b:35:49:d8:c9:b8:65:ab:5a:87:38:5a:4e:fa:15:
                    a4:85:2a:fe:c5:b0:73:85:3d:99:31:84:70:52:e5:
                    51:cc:60:d4:12:03:d1:fa:08:5a:61:aa:b2:c9:d3:
                    8a:b6:de:0f:b2:c3:97:46:5d:3d:62:3a:bd:5f:5b:
                    c9:45:7d:0b:16:30:19:3d:f5:ae:d8:b7:ce:9e:20:
                    57:40:32:eb:71:44:98:ea:e0:f4:8e:48:23:ee:e7:
                    21:0d:bc:c0:7b:df:31:fe:bc:3e:fc:47:18:d1:24:
                    b2:65:46:25:ea:ea:d8:17:ea:af:17:f0:a2:79:32:
                    3f:ac:87:f3:3e:da:12:f7:53:d9:97:1a:a5:c9:34:
                    51:f2:cd:6a:14:98:97:7e:4f:3e:d6:73:bb:c7:a8:
                    46:99:89:d0:2d:e5:76:22:c1:8b:2e:68:45:0a:8d:
                    2b:a9:96:42:9e:20:67:99:96:3b:17:ce:57:f1:45:
                    af:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A6:49:ED:06:C4:BF:25:CE:21:09:58:7A:68:35:08:14:FF:AD:EB
            X509v3 Authority Key Identifier:
                keyid:40:20:9E:B5:6D:BE:9B:90:72:13:79:29:1A:A6:F1:0A:59:23:54:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/40209EB56DBE9B90721379291AA6F10A592354FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40209EB56DBE9B90721379291AA6F10A592354FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a3a2f33322d3438203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e24::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:8f:bc:19:28:0d:1e:60:74:c4:d4:59:15:3a:53:57:d7:a0:
         27:2e:f9:e9:af:66:ef:d5:61:9c:81:ed:8a:fa:f4:57:2a:3a:
         e8:2d:85:c1:80:33:1e:8e:16:0f:a0:5a:9f:85:8d:96:ee:dd:
         71:88:94:44:5d:cb:32:1b:35:76:8c:da:17:d7:ac:9c:cf:a9:
         33:73:0d:05:16:a9:da:c8:17:d6:5b:a3:ea:8e:89:62:6e:89:
         d0:32:5a:51:d6:66:04:78:63:bc:e8:9d:09:8f:08:44:44:11:
         35:59:43:35:79:86:15:04:2e:f6:88:b6:b1:0f:9b:6d:33:98:
         ea:b7:91:59:4c:e3:ef:7f:10:2e:ee:54:ea:8e:75:c2:a6:56:
         fa:68:70:86:fb:cf:f3:62:b7:07:be:44:ee:7d:1e:11:6c:ef:
         7e:49:8c:ba:a9:fd:9d:f5:74:fd:7c:c3:f6:82:cd:c7:b7:ea:
         ef:2b:b4:53:05:39:d2:f9:3e:dc:f8:c2:fa:58:f7:ed:f5:b2:
         7d:87:e8:9d:6c:e8:54:25:bb:f1:d9:8f:d4:8d:3e:25:25:da:
         93:66:26:a9:5f:44:95:48:89:4f:12:63:07:26:8b:4c:52:d3:
         f0:6e:5f:99:27:f1:83:0d:a8:1a:e5:a1:88:b0:6f:02:c5:87:
         cc:81:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----