Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/323830343a3531383a3a2f33322d3332203d3e20323632343931.roa
File:                     323830343a3531383a3a2f33322d3332203d3e20323632343931.roa (raw, json)
Hash identifier:          0ktU6MxkTYPp0XUwqSk75TH/eV08/IR0hsNmDl5V3VA=
Subject key identifier:   61:E7:D4:DD:24:2C:0D:73:7F:1A:E7:08:1A:5A:0E:2E:2F:B4:E0:77
Certificate issuer:       /CN=DA66142D6014A7DDF12783F088F14F7F1B3AC9DC
Certificate serial:       52D72E1839D33DB6C5EDDF382E49B1763EE05E8C
Authority key identifier: DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/323830343a3531383a3a2f33322d3332203d3e20323632343931.roa
Signing time:             Sat 30 Mar 2024 14:14:56 +0000
ROA not before:           Sat 30 Mar 2024 14:09:56 +0000
ROA not after:            Sat 29 Mar 2025 14:14:56 +0000
asID:                     262491
IP address blocks:        2804:518::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d7:2e:18:39:d3:3d:b6:c5:ed:df:38:2e:49:b1:76:3e:e0:5e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA66142D6014A7DDF12783F088F14F7F1B3AC9DC
        Validity
            Not Before: Mar 30 14:09:56 2024 GMT
            Not After : Mar 29 14:14:56 2025 GMT
        Subject: CN=61E7D4DD242C0D737F1AE7081A5A0E2E2FB4E077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:af:34:23:82:d1:f2:59:38:89:6c:00:b8:
                    d3:1c:15:29:d5:9f:8c:09:45:2a:7d:28:9e:9f:97:
                    d6:f9:73:76:c7:2e:ed:d9:2e:92:7f:79:fb:90:dd:
                    96:fe:b9:34:ee:2c:83:63:4c:b8:46:ee:32:5a:0c:
                    88:d0:39:ff:40:fb:46:5f:27:39:83:0d:11:7e:17:
                    51:3c:77:65:2a:7e:1d:fe:0e:98:29:18:ee:86:84:
                    09:90:ad:be:0a:74:9a:fd:dd:13:44:e0:a2:80:5a:
                    df:4e:d2:c6:7f:60:d5:97:28:f5:92:bb:23:76:80:
                    57:a1:e4:9f:5b:2a:f3:b7:1d:42:45:0d:80:7a:20:
                    15:b6:33:ef:c3:dc:3a:5c:ba:09:e5:11:01:96:af:
                    c0:ab:5c:1f:f6:f4:ca:f4:78:8d:a7:17:8c:bf:7d:
                    57:11:3a:bf:c8:12:a5:77:f0:bb:b2:25:ef:35:4d:
                    80:ec:f5:0b:db:18:d1:b8:a0:a3:e6:dd:41:af:c1:
                    7b:1b:89:22:d1:2d:dd:d1:08:eb:bc:1b:b0:5e:9c:
                    59:35:38:c1:2b:e8:98:e7:4f:5e:08:3f:04:83:66:
                    90:68:d1:bb:9d:ac:9c:77:b3:b2:28:92:d5:17:24:
                    4e:9c:44:b4:93:49:f7:1a:14:f3:4b:69:ba:ee:a2:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E7:D4:DD:24:2C:0D:73:7F:1A:E7:08:1A:5A:0E:2E:2F:B4:E0:77
            X509v3 Authority Key Identifier:
                keyid:DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/323830343a3531383a3a2f33322d3332203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:518::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:2b:2e:8a:c4:03:54:54:d9:14:d8:00:ba:3c:66:0e:71:
         bd:af:0f:35:4f:02:27:b7:26:df:35:84:eb:75:4e:44:c5:68:
         41:92:47:e8:bc:47:bb:34:2a:a8:5a:09:1c:79:a7:b4:db:88:
         74:38:50:b7:28:56:5b:73:09:29:94:ef:bc:51:da:a1:c5:d4:
         24:22:04:cd:96:fa:f2:88:83:93:8d:46:ff:80:0f:33:78:8f:
         0f:b9:49:f1:ee:76:a1:e1:1b:56:65:c5:cd:64:a5:11:80:19:
         be:22:80:b4:8d:93:f0:84:ee:ca:f5:50:68:a9:80:80:7c:e9:
         a1:b8:47:e0:57:66:10:79:ea:51:ab:c0:50:8e:ad:c0:10:b9:
         af:a7:88:73:c8:45:28:34:8c:b6:74:02:cc:29:15:4b:ba:b3:
         6d:61:2c:85:d9:28:8d:78:6c:a4:14:e6:4b:d3:c4:cb:36:4d:
         5f:03:fd:f4:28:cf:10:a4:7f:0f:ed:ec:f9:49:8f:94:53:9a:
         92:f5:7e:81:9a:f7:03:ae:53:44:be:5e:7a:35:45:56:09:7e:
         f6:e7:9b:85:ea:2d:6e:4b:00:57:67:2d:ac:ea:54:d1:d6:bd:
         d0:1b:26:71:7a:b4:1b:d4:82:94:11:a3:1a:11:82:9e:6a:aa:
         77:69:11:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----