Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/1/323830343a323064383a3a2f33322d3438203d3e20323634353136.roa
File:                     323830343a323064383a3a2f33322d3438203d3e20323634353136.roa (raw, json)
Hash identifier:          NL81MvNUeRsFA2wmjcY1dmJSNHpH3fvhlorL7AgJ5lQ=
Subject key identifier:   CB:4B:D7:C4:DD:29:D7:CE:66:15:CE:53:81:A5:DA:63:0C:18:1A:DE
Certificate issuer:       /CN=B986019EB8FFEE3DDA2D5B20BA50EFC493FC70E6
Certificate serial:       43170DAA3B0C417657B74F949419A4BF1ED80A07
Authority key identifier: B9:86:01:9E:B8:FF:EE:3D:DA:2D:5B:20:BA:50:EF:C4:93:FC:70:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B986019EB8FFEE3DDA2D5B20BA50EFC493FC70E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/1/323830343a323064383a3a2f33322d3438203d3e20323634353136.roa
Signing time:             Thu 04 Apr 2024 18:48:15 +0000
ROA not before:           Thu 04 Apr 2024 18:43:15 +0000
ROA not after:            Thu 03 Apr 2025 18:48:15 +0000
asID:                     264516
IP address blocks:        2804:20d8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:17:0d:aa:3b:0c:41:76:57:b7:4f:94:94:19:a4:bf:1e:d8:0a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B986019EB8FFEE3DDA2D5B20BA50EFC493FC70E6
        Validity
            Not Before: Apr  4 18:43:15 2024 GMT
            Not After : Apr  3 18:48:15 2025 GMT
        Subject: CN=CB4BD7C4DD29D7CE6615CE5381A5DA630C181ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:32:af:33:66:94:d4:b1:bf:73:36:81:99:
                    1e:6a:34:69:d4:ec:02:fd:08:fe:69:ad:46:f6:d9:
                    98:8e:68:99:37:68:d7:7b:ce:49:3c:4b:4e:51:bd:
                    9d:aa:1a:dc:59:84:20:7a:77:a6:f1:e7:73:95:0f:
                    41:87:f4:50:9e:07:fd:9e:0f:b8:36:21:3a:11:40:
                    95:78:c8:94:5f:4c:49:62:b7:0a:b8:0d:93:80:c3:
                    a7:06:51:44:78:20:15:08:c5:f1:bf:b6:40:d2:66:
                    05:7a:1e:1e:ef:e4:ff:cb:2c:c6:53:8a:cb:8e:00:
                    82:5a:21:38:19:f5:78:d2:4e:8e:6b:28:78:04:a6:
                    bc:f0:73:9b:9c:1d:10:d8:05:51:df:0c:59:4b:72:
                    24:9a:12:31:59:a2:db:dc:98:24:fc:c9:b6:ae:e1:
                    44:86:81:a4:54:46:0c:f6:fd:71:26:ba:a9:86:b7:
                    78:5e:f3:8a:51:f5:56:5f:e9:d7:c7:67:78:b5:63:
                    97:3e:72:2e:ba:b8:1f:a4:55:5e:f5:c9:1c:1b:cb:
                    7c:30:6a:4c:d4:38:f5:eb:67:bf:ef:70:ea:cd:73:
                    5b:48:b2:55:17:cd:39:4e:6f:39:68:d1:22:fe:d5:
                    a6:36:06:46:ba:58:fe:fe:e5:6a:52:a6:79:bc:ec:
                    3b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4B:D7:C4:DD:29:D7:CE:66:15:CE:53:81:A5:DA:63:0C:18:1A:DE
            X509v3 Authority Key Identifier:
                keyid:B9:86:01:9E:B8:FF:EE:3D:DA:2D:5B:20:BA:50:EF:C4:93:FC:70:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/1/B986019EB8FFEE3DDA2D5B20BA50EFC493FC70E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B986019EB8FFEE3DDA2D5B20BA50EFC493FC70E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/1/323830343a323064383a3a2f33322d3438203d3e20323634353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:97:46:c4:fc:31:a9:81:11:48:c0:86:cc:f5:59:be:38:87:
         1c:40:c0:1b:07:03:1c:6c:13:57:bf:de:12:0b:a0:96:3b:f4:
         38:22:78:db:dc:85:1d:d0:38:04:fd:0e:49:bd:0a:20:4d:ef:
         d1:c4:00:cd:5b:97:89:2e:6c:17:fc:9e:7a:17:7a:4f:38:30:
         93:52:d4:19:06:50:b2:fd:d3:1d:4f:66:dc:16:6b:51:93:99:
         9f:3c:db:54:9d:3c:18:94:18:a7:b0:4c:58:c4:aa:09:1f:39:
         83:b3:52:95:6b:fa:ce:06:93:ac:4f:e2:4d:34:d2:5a:c7:84:
         dc:a7:5f:a4:8d:da:58:10:82:ab:ec:22:87:17:2c:b4:a2:d1:
         7b:ae:bb:4a:61:a7:01:eb:a7:04:75:8e:90:23:33:cd:2e:4b:
         04:7c:d1:2c:0a:b2:bf:07:c3:67:1a:12:41:95:ac:58:0c:62:
         e1:3b:37:ab:fa:11:3f:88:62:57:e9:51:6b:18:c5:77:a8:fd:
         a7:dd:44:32:04:30:f8:d6:6f:8a:20:25:ac:14:7c:3f:f1:0c:
         30:39:44:2d:1a:04:9d:fc:27:b4:c5:bc:38:51:e6:15:c4:0b:
         c7:32:cc:3f:b9:f5:3f:e7:8f:07:e5:96:d4:89:26:d1:37:fd:
         ef:3b:e1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----