Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/323830343a363435633a3a2f33332d3333203d3e20323639343233.roa
File:                     323830343a363435633a3a2f33332d3333203d3e20323639343233.roa (raw, json)
Hash identifier:          MBuxg1q2PD1uPwe/hrd08eV6fgr+Kg6+QqnPB0DBdq0=
Subject key identifier:   8E:23:C6:31:3D:54:60:FD:B4:E4:D9:E5:F3:41:0D:03:A8:A7:D1:7F
Certificate issuer:       /CN=752DF8A511E583FD16AFDE7868B695CB08BB271E
Certificate serial:       76FE66FF17C10F8A66B862BD35DCFC7774916404
Authority key identifier: 75:2D:F8:A5:11:E5:83:FD:16:AF:DE:78:68:B6:95:CB:08:BB:27:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/752DF8A511E583FD16AFDE7868B695CB08BB271E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/323830343a363435633a3a2f33332d3333203d3e20323639343233.roa
Signing time:             Wed 13 Mar 2024 20:19:01 +0000
ROA not before:           Wed 13 Mar 2024 20:14:01 +0000
ROA not after:            Wed 12 Mar 2025 20:19:01 +0000
asID:                     269423
IP address blocks:        2804:645c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fe:66:ff:17:c1:0f:8a:66:b8:62:bd:35:dc:fc:77:74:91:64:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=752DF8A511E583FD16AFDE7868B695CB08BB271E
        Validity
            Not Before: Mar 13 20:14:01 2024 GMT
            Not After : Mar 12 20:19:01 2025 GMT
        Subject: CN=8E23C6313D5460FDB4E4D9E5F3410D03A8A7D17F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:68:1e:08:24:02:23:3f:5c:74:6c:f6:5e:
                    f1:72:71:07:e5:d6:e6:30:03:51:0a:76:7e:b9:f3:
                    db:b5:7d:1d:b0:71:59:59:cc:b0:78:85:05:87:72:
                    ca:22:60:04:61:5c:4c:95:7c:2f:e8:e8:c7:87:8b:
                    c0:ea:72:97:24:fa:ca:84:f4:be:e9:65:83:16:28:
                    00:8e:6a:fb:74:78:22:e1:1e:40:bb:95:88:6d:57:
                    79:d0:0e:79:aa:d2:e3:73:32:db:7c:af:c6:53:37:
                    01:c9:21:1a:78:c2:b9:7e:5b:b6:ac:ea:f1:28:cb:
                    55:40:3c:7f:ec:0f:14:a5:17:34:fc:3c:8f:8d:52:
                    d0:8c:2d:77:3b:b4:d8:6d:7b:b1:ca:9a:c1:53:5e:
                    04:cb:8a:86:3e:ef:ed:6b:c9:67:ac:b2:85:23:ac:
                    20:7d:eb:b4:9f:7f:65:dc:21:a4:1d:f6:b9:67:9b:
                    93:ff:f3:45:55:a8:4b:e6:ea:fb:af:5b:c8:8b:99:
                    ca:e9:48:3b:27:a6:fd:74:2f:92:50:0a:b8:32:1c:
                    1c:77:73:66:70:84:79:f4:06:3b:8b:05:f2:1e:08:
                    92:4f:4a:22:df:fd:b1:b2:a9:7e:b3:34:96:51:b9:
                    35:3b:77:17:fe:d4:49:d2:89:b6:39:dc:73:cf:bb:
                    25:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:23:C6:31:3D:54:60:FD:B4:E4:D9:E5:F3:41:0D:03:A8:A7:D1:7F
            X509v3 Authority Key Identifier:
                keyid:75:2D:F8:A5:11:E5:83:FD:16:AF:DE:78:68:B6:95:CB:08:BB:27:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/752DF8A511E583FD16AFDE7868B695CB08BB271E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/752DF8A511E583FD16AFDE7868B695CB08BB271E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/323830343a363435633a3a2f33332d3333203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:645c::/33

    Signature Algorithm: sha256WithRSAEncryption
         13:d5:50:54:1e:4a:9f:bd:ad:ee:86:c4:71:02:55:45:b6:3d:
         63:af:db:74:7f:f3:cd:12:87:2d:3a:78:e6:e1:2b:d4:61:de:
         6e:e7:d2:40:5d:50:ca:ee:f2:a2:df:24:45:e6:60:da:2c:51:
         5b:00:62:b4:a5:1f:cb:3a:24:7e:b9:ef:13:c3:98:d5:00:ba:
         18:13:44:ee:d4:3a:df:06:b0:b3:bb:b3:86:b6:d1:a9:52:2e:
         0f:c0:36:67:d4:7a:0d:e2:69:38:60:0b:b2:7a:da:2b:6c:7e:
         76:dd:9b:07:bf:7e:3d:4d:ba:49:38:68:aa:69:a2:b9:9c:45:
         8b:36:be:fa:aa:35:00:36:10:02:0a:75:9c:c3:d8:70:d7:44:
         6e:96:4c:01:ba:ae:b8:4b:b1:c3:35:ce:9b:60:83:49:f0:79:
         64:3d:b3:b6:73:2f:05:31:56:67:4e:16:18:1e:66:b2:f5:f7:
         c7:43:88:c4:64:35:b4:76:d2:71:a7:c7:d6:bd:45:5a:af:9a:
         94:8b:38:ea:69:94:8d:b7:7c:64:f2:f4:b0:58:ab:d1:7c:c6:
         8a:93:2c:2e:a5:01:15:b0:7a:8e:c5:54:3f:39:72:a4:0a:ec:
         c5:f6:34:b3:c1:63:0c:bd:ed:01:57:4f:29:29:10:3f:b7:0c:
         3f:de:b4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----