Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/1/323830343a363938303a3a2f33322d313238203d3e20323730323734.roa
File:                     323830343a363938303a3a2f33322d313238203d3e20323730323734.roa (raw, json)
Hash identifier:          R2U3khC64xK4nYDOtFrYmzD7xknRt5onoK2EtSojB4E=
Subject key identifier:   54:90:CF:BB:D8:4E:AD:20:37:9C:73:C0:84:C0:B3:1E:DD:AB:B3:30
Certificate issuer:       /CN=047373399CFBEE82DEED0368B29F232D682D13E1
Certificate serial:       2C7FFC48E94C19C0666237E22932812B06C96915
Authority key identifier: 04:73:73:39:9C:FB:EE:82:DE:ED:03:68:B2:9F:23:2D:68:2D:13:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/047373399CFBEE82DEED0368B29F232D682D13E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/1/323830343a363938303a3a2f33322d313238203d3e20323730323734.roa
Signing time:             Fri 05 Apr 2024 01:22:22 +0000
ROA not before:           Fri 05 Apr 2024 01:17:22 +0000
ROA not after:            Fri 04 Apr 2025 01:22:22 +0000
asID:                     270274
IP address blocks:        2804:6980::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7f:fc:48:e9:4c:19:c0:66:62:37:e2:29:32:81:2b:06:c9:69:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=047373399CFBEE82DEED0368B29F232D682D13E1
        Validity
            Not Before: Apr  5 01:17:22 2024 GMT
            Not After : Apr  4 01:22:22 2025 GMT
        Subject: CN=5490CFBBD84EAD20379C73C084C0B31EDDABB330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:5d:a8:48:fd:b5:b0:a9:27:3d:ba:9c:a2:
                    09:21:68:06:98:98:a1:87:65:fe:00:94:c5:1f:b9:
                    d1:2c:73:8a:3d:d1:e9:21:6f:70:9b:92:5c:eb:8b:
                    d4:61:ae:6a:7c:28:59:ab:4b:09:da:ed:48:83:03:
                    c7:c3:b6:c8:da:7c:f3:ce:86:0d:54:0a:7d:5e:12:
                    22:65:ac:7c:a1:2c:ac:9d:b6:28:c3:9e:0a:c5:39:
                    76:8e:54:25:6e:d2:8a:63:5a:a0:3b:5b:7f:98:15:
                    56:4c:8d:cd:42:22:ee:b0:58:52:a9:4e:77:3a:95:
                    d6:88:5e:16:9a:70:5e:dc:0e:9b:a3:a7:91:59:0a:
                    0a:6c:72:6d:06:90:e1:9a:15:06:45:2f:df:d0:21:
                    a1:e3:84:8d:ae:a8:ab:0e:99:be:d1:fa:1a:c9:e9:
                    c1:5e:8b:2e:a6:08:46:e6:5d:9d:98:ae:6f:52:c6:
                    62:38:3b:66:bb:2a:95:2c:4d:52:56:5c:49:39:a8:
                    bf:85:74:fe:aa:46:44:d6:27:3e:6b:72:2a:be:60:
                    12:10:b3:25:29:91:49:4a:e1:3b:43:53:b6:c1:8f:
                    a9:c7:5f:12:df:82:3f:95:ac:3e:f5:f5:95:b8:a6:
                    7f:f4:11:f6:69:3d:e4:88:95:a6:1c:9f:ba:b7:a1:
                    76:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:90:CF:BB:D8:4E:AD:20:37:9C:73:C0:84:C0:B3:1E:DD:AB:B3:30
            X509v3 Authority Key Identifier:
                keyid:04:73:73:39:9C:FB:EE:82:DE:ED:03:68:B2:9F:23:2D:68:2D:13:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/1/047373399CFBEE82DEED0368B29F232D682D13E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/047373399CFBEE82DEED0368B29F232D682D13E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/1/323830343a363938303a3a2f33322d313238203d3e20323730323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6980::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:88:40:cc:6e:62:68:04:8b:bf:4b:41:c6:ee:07:bf:0c:4a:
         d0:18:61:92:0c:5d:56:52:10:ee:c3:a5:41:eb:e1:f2:af:54:
         2e:e4:c5:44:63:74:36:71:45:7b:fc:8f:47:c6:6c:0c:8a:f6:
         cc:5b:bb:f6:55:a4:85:97:d3:31:72:94:86:ab:6b:83:b9:0b:
         1e:f3:56:20:68:a8:2e:92:5e:24:d1:be:10:9a:46:63:3c:5f:
         6c:ae:25:2f:a8:c1:de:00:ca:76:1c:0e:a1:38:20:92:9c:cd:
         81:22:ab:c5:8c:af:9f:00:f8:0d:05:ab:8a:ad:af:ce:a1:e1:
         aa:36:00:f2:a0:65:31:37:17:86:84:78:c7:73:99:d1:10:22:
         29:19:99:aa:4a:9a:7b:a9:79:c3:a0:00:5e:c1:1f:10:84:06:
         c9:b7:15:10:40:c9:ff:a4:27:54:5e:22:cc:4a:a1:26:29:6e:
         72:92:55:5e:23:30:bc:c7:c6:cc:ac:1f:89:bb:21:fe:37:70:
         c3:59:9a:8f:2d:23:a8:af:fc:f6:dd:de:40:64:9a:7a:b0:cb:
         0a:d4:c8:62:a3:92:fa:09:92:3b:7b:eb:4b:88:a8:44:c9:ce:
         6c:fe:5e:e9:b2:78:4a:b9:79:26:09:8e:f8:16:00:ba:5d:53:
         b3:d1:01:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----