Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/323830343a316233383a3a2f33322d3438203d3e203631373136.roa
File:                     323830343a316233383a3a2f33322d3438203d3e203631373136.roa (raw, json)
Hash identifier:          EIgD5hqb1vsodqwqkT0z3YJegNcb5nyzwbD8W7K1peQ=
Subject key identifier:   44:23:8F:6F:01:A5:23:2F:F4:7D:B2:10:EA:59:C3:76:1C:79:B8:EE
Certificate issuer:       /CN=9224C406A7B656802445D7AD5377F0B86C6D456D
Certificate serial:       5E33765CE6793AFDDDB91915612B82C501CA87AB
Authority key identifier: 92:24:C4:06:A7:B6:56:80:24:45:D7:AD:53:77:F0:B8:6C:6D:45:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9224C406A7B656802445D7AD5377F0B86C6D456D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/323830343a316233383a3a2f33322d3438203d3e203631373136.roa
Signing time:             Thu 14 Mar 2024 23:00:38 +0000
ROA not before:           Thu 14 Mar 2024 22:55:38 +0000
ROA not after:            Thu 13 Mar 2025 23:00:38 +0000
asID:                     61716
IP address blocks:        2804:1b38::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:33:76:5c:e6:79:3a:fd:dd:b9:19:15:61:2b:82:c5:01:ca:87:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9224C406A7B656802445D7AD5377F0B86C6D456D
        Validity
            Not Before: Mar 14 22:55:38 2024 GMT
            Not After : Mar 13 23:00:38 2025 GMT
        Subject: CN=44238F6F01A5232FF47DB210EA59C3761C79B8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:09:d2:a4:6e:0d:02:36:90:17:79:f6:0a:
                    b0:b2:3c:9d:a3:be:0a:21:d3:d1:80:68:40:9e:fe:
                    d8:7c:76:40:2f:1d:ac:08:fb:88:81:39:3d:84:a2:
                    39:0b:27:7d:ef:76:20:ef:53:b6:49:8d:d8:cc:ef:
                    fb:7a:d0:59:62:7a:26:88:d4:5b:79:d4:f2:e5:a6:
                    ca:89:91:5d:cd:c3:55:be:0c:b2:06:04:71:cc:05:
                    2d:de:60:26:3e:1f:05:52:16:a6:99:9d:9e:dc:a3:
                    b8:fa:8a:61:0b:fa:41:b9:d3:51:a0:22:af:6d:25:
                    01:8d:b4:25:b0:5c:11:f7:c7:df:c5:f5:4a:f2:0b:
                    6f:50:43:3b:02:5b:ef:fb:c6:b9:7a:b2:54:47:30:
                    76:e3:7d:c2:c7:74:38:ff:08:22:e7:3a:d0:33:a2:
                    38:64:7a:14:86:b2:62:fd:1b:d7:8f:85:25:dc:11:
                    04:4c:c7:22:96:f4:fd:b8:68:c1:36:23:6e:c3:e2:
                    d1:b3:2d:5c:c9:07:b6:f2:40:1c:ca:d3:3f:a9:e1:
                    a0:a6:9e:12:fd:12:98:01:cb:aa:f3:26:36:7b:92:
                    a4:b4:b6:46:72:20:86:d2:2b:83:b9:dc:12:54:e5:
                    31:0d:87:f3:22:d5:c5:43:4a:22:5e:b2:f7:61:e1:
                    ba:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:23:8F:6F:01:A5:23:2F:F4:7D:B2:10:EA:59:C3:76:1C:79:B8:EE
            X509v3 Authority Key Identifier:
                keyid:92:24:C4:06:A7:B6:56:80:24:45:D7:AD:53:77:F0:B8:6C:6D:45:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/9224C406A7B656802445D7AD5377F0B86C6D456D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9224C406A7B656802445D7AD5377F0B86C6D456D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/323830343a316233383a3a2f33322d3438203d3e203631373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:19:e0:b4:e9:27:87:49:29:86:7d:00:e1:f8:63:94:de:54:
         81:be:52:4a:1b:bd:9d:3e:d6:4b:8e:79:20:0f:54:3b:e7:b7:
         02:a2:e8:03:f1:7f:df:dd:df:db:34:9f:9c:75:c5:cf:4d:1d:
         21:c8:2e:a9:30:22:ef:0d:31:2d:a4:dd:1f:97:38:2b:fc:ad:
         ef:af:58:dc:10:47:a8:e3:8d:f6:58:75:ae:52:45:fc:36:f9:
         5b:cc:10:b9:f4:96:ab:fe:8c:d8:71:e4:2f:64:5f:5c:98:92:
         e0:b6:dc:b6:91:82:ce:e1:b6:e2:a3:ec:d4:80:cb:63:1b:90:
         52:d0:f0:fb:6e:00:17:ef:8c:b7:38:48:ad:5b:4c:ee:53:d4:
         9a:85:a8:8a:be:16:83:c9:31:d9:7f:fb:64:c6:84:5b:1d:d4:
         7e:77:b6:26:48:5b:f7:47:6c:83:41:ba:e8:ac:3a:e8:d2:bd:
         1d:28:63:78:c6:52:9d:78:e7:3a:99:e5:ae:9b:6f:be:b1:53:
         d6:e1:bd:c0:fb:fe:cf:25:3e:e9:e5:75:89:d0:d4:6d:8a:4a:
         c6:e4:a7:61:bd:73:27:47:a3:f1:58:c1:2f:68:cf:b8:cd:b3:
         ca:83:b4:17:9a:75:f9:91:b4:cc:d7:39:ca:99:2f:24:fb:33:
         2f:7a:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----