Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/1/323830343a6463633a3a2f33322d3438203d3e203238363338.roa
File:                     323830343a6463633a3a2f33322d3438203d3e203238363338.roa (raw, json)
Hash identifier:          SLouFbJC0PAtM/BYQ+RbNIxUPRUtI2ve4ELwp9Tk7EY=
Subject key identifier:   8C:64:C0:66:6A:54:EF:9B:7E:F0:4F:66:DE:7C:EA:66:2C:0C:5C:07
Certificate issuer:       /CN=284234ECF3BE74B4E46419CC5F459F26BF9A5B5E
Certificate serial:       71A4C30D2BC23B7EFFE662A28BED6212ECC2C280
Authority key identifier: 28:42:34:EC:F3:BE:74:B4:E4:64:19:CC:5F:45:9F:26:BF:9A:5B:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284234ECF3BE74B4E46419CC5F459F26BF9A5B5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/1/323830343a6463633a3a2f33322d3438203d3e203238363338.roa
Signing time:             Wed 03 Apr 2024 21:34:18 +0000
ROA not before:           Wed 03 Apr 2024 21:29:18 +0000
ROA not after:            Wed 02 Apr 2025 21:34:18 +0000
asID:                     28638
IP address blocks:        2804:dcc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a4:c3:0d:2b:c2:3b:7e:ff:e6:62:a2:8b:ed:62:12:ec:c2:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284234ECF3BE74B4E46419CC5F459F26BF9A5B5E
        Validity
            Not Before: Apr  3 21:29:18 2024 GMT
            Not After : Apr  2 21:34:18 2025 GMT
        Subject: CN=8C64C0666A54EF9B7EF04F66DE7CEA662C0C5C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:b4:46:52:d4:9d:3b:9c:31:2e:f0:7c:af:d3:
                    09:91:70:3d:da:d4:38:ca:f9:63:7f:8c:f0:96:a1:
                    db:d9:3c:b5:00:f9:c3:b4:76:7d:27:7f:b7:31:79:
                    72:a2:de:08:e7:68:58:b6:cd:56:9a:00:7e:ba:6c:
                    2e:e5:8a:b0:50:f3:49:44:a0:87:fe:0e:b4:35:e5:
                    b0:1e:95:4b:7e:09:90:72:e0:0b:f6:8f:e6:a8:8f:
                    69:ed:4c:5f:f1:94:55:47:de:98:77:d3:ef:ec:a0:
                    78:7e:4d:fd:d5:98:b0:6e:d6:37:2f:e0:a4:ee:ba:
                    8c:7c:d8:0e:f8:9b:e3:a2:6b:3c:c4:a2:61:4d:59:
                    98:af:e1:ac:b8:92:9c:b3:45:d3:14:62:29:1a:33:
                    8e:72:ac:98:c6:c7:0e:22:3c:e5:34:d7:63:98:c3:
                    0e:a8:32:99:07:39:b8:fc:dd:ac:19:52:12:48:ad:
                    77:6e:7d:0a:69:46:ae:66:62:dc:23:de:18:d6:b8:
                    ac:20:c0:11:6e:0e:6e:ca:a8:70:cd:23:f4:45:47:
                    32:6b:6d:62:ee:88:40:ad:57:e7:9c:f6:b8:40:5c:
                    d2:2f:09:3f:e7:e0:e4:41:bc:b7:08:42:3a:f8:31:
                    64:5d:dc:f6:9d:e3:4f:c5:ad:15:5f:2d:c7:d8:40:
                    7f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:64:C0:66:6A:54:EF:9B:7E:F0:4F:66:DE:7C:EA:66:2C:0C:5C:07
            X509v3 Authority Key Identifier:
                keyid:28:42:34:EC:F3:BE:74:B4:E4:64:19:CC:5F:45:9F:26:BF:9A:5B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/1/284234ECF3BE74B4E46419CC5F459F26BF9A5B5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284234ECF3BE74B4E46419CC5F459F26BF9A5B5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/1/323830343a6463633a3a2f33322d3438203d3e203238363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:dd:94:97:6f:6e:b3:8d:8f:ce:53:e7:4a:2c:d5:c5:63:e4:
         e8:65:8b:d6:42:c3:88:eb:9a:d7:05:c4:a0:5f:f6:9b:0c:06:
         60:7d:65:55:79:6e:b0:b5:68:da:9d:f2:2e:ea:3e:fa:22:0e:
         6d:9f:87:69:b1:f0:ed:71:f7:d7:4a:5f:db:93:e5:6c:48:7d:
         be:88:47:0f:a9:f5:b0:03:21:43:4a:c7:f7:e3:d0:21:29:4e:
         ec:10:2a:63:41:fb:34:84:da:39:40:aa:a8:36:ec:70:f0:95:
         10:bd:59:e3:6f:3a:e7:9e:24:5f:87:84:e7:fd:28:26:6e:21:
         1d:a1:93:61:bb:6a:0a:a3:e4:c7:fe:5b:3e:1e:06:7b:7e:25:
         5b:6a:d9:b7:a7:d7:79:17:c4:b1:31:61:59:7f:61:68:3d:15:
         3e:42:c4:6a:84:49:97:ab:21:a6:91:dd:61:ce:53:b2:2f:05:
         fb:0d:aa:30:8f:95:50:d5:6c:3b:47:39:71:ee:52:fd:e0:54:
         85:f1:54:f4:a0:6c:c0:31:11:c1:58:0d:2c:69:54:45:92:95:
         84:c7:53:3d:66:30:6f:4b:3f:80:69:98:26:81:8d:cf:5a:82:
         d9:0f:34:ad:78:55:28:65:02:79:65:df:97:af:13:c2:c8:3f:
         47:c4:59:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----