Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/323830343a3936343a3a2f33322d3634203d3e20323633303830.roa
File:                     323830343a3936343a3a2f33322d3634203d3e20323633303830.roa (raw, json)
Hash identifier:          PyGi602wty8dizdvv4GribIhvY78N4a10SZOUaYCceU=
Subject key identifier:   7F:6F:6B:8B:B2:DC:85:68:18:5E:65:13:11:27:5A:46:5C:96:3B:5A
Certificate issuer:       /CN=EFC6D9641E6897F52BC48673F154FC946766AD90
Certificate serial:       54AB71BB7B2FF989BE4245A214CEF18067457AA3
Authority key identifier: EF:C6:D9:64:1E:68:97:F5:2B:C4:86:73:F1:54:FC:94:67:66:AD:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFC6D9641E6897F52BC48673F154FC946766AD90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/323830343a3936343a3a2f33322d3634203d3e20323633303830.roa
Signing time:             Fri 12 Apr 2024 13:27:05 +0000
ROA not before:           Fri 12 Apr 2024 13:22:05 +0000
ROA not after:            Sat 12 Apr 2025 13:27:05 +0000
asID:                     263080
IP address blocks:        2804:964::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ab:71:bb:7b:2f:f9:89:be:42:45:a2:14:ce:f1:80:67:45:7a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC6D9641E6897F52BC48673F154FC946766AD90
        Validity
            Not Before: Apr 12 13:22:05 2024 GMT
            Not After : Apr 12 13:27:05 2025 GMT
        Subject: CN=3082010A0282010100CCB2BD4EE9347CA568F7BB39A7034C66789D864409F943B911D8C46867D510AC4FC3524FA3457ABB2C65F54ECCBEACD4ABFE9922D9FDC39C62FC3FDF2CE9E0CA5481D9F7F621BABE125E6FC6FD55193FF6B7DC99C4027DA2EF2EDBC8713DE404D172DDE3765CDEFEE365CAE08107280619D8EEDD96033147EEB5514F1DD7C00CAA5A18185D7BA96C569AB694454B013CF5D19E8DD87959D29F0BBFDD56D0B700F3F69D1C23F827E66039D79ADDDA7B74042C649A9EAC5CFF7E9A0E0E5D52622111CC68A39B1A5CD7BC24265B377A858A15659079634D52DF71FE9998AA707AC23300BCD6185FEBAC84F960353B6BE55A2B067D1C34F3F5BFC4945C59E736BAFF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:bd:4e:e9:34:7c:a5:68:f7:bb:39:a7:03:
                    4c:66:78:9d:86:44:09:f9:43:b9:11:d8:c4:68:67:
                    d5:10:ac:4f:c3:52:4f:a3:45:7a:bb:2c:65:f5:4e:
                    cc:be:ac:d4:ab:fe:99:22:d9:fd:c3:9c:62:fc:3f:
                    df:2c:e9:e0:ca:54:81:d9:f7:f6:21:ba:be:12:5e:
                    6f:c6:fd:55:19:3f:f6:b7:dc:99:c4:02:7d:a2:ef:
                    2e:db:c8:71:3d:e4:04:d1:72:dd:e3:76:5c:de:fe:
                    e3:65:ca:e0:81:07:28:06:19:d8:ee:dd:96:03:31:
                    47:ee:b5:51:4f:1d:d7:c0:0c:aa:5a:18:18:5d:7b:
                    a9:6c:56:9a:b6:94:45:4b:01:3c:f5:d1:9e:8d:d8:
                    79:59:d2:9f:0b:bf:dd:56:d0:b7:00:f3:f6:9d:1c:
                    23:f8:27:e6:60:39:d7:9a:dd:da:7b:74:04:2c:64:
                    9a:9e:ac:5c:ff:7e:9a:0e:0e:5d:52:62:21:11:cc:
                    68:a3:9b:1a:5c:d7:bc:24:26:5b:37:7a:85:8a:15:
                    65:90:79:63:4d:52:df:71:fe:99:98:aa:70:7a:c2:
                    33:00:bc:d6:18:5f:eb:ac:84:f9:60:35:3b:6b:e5:
                    5a:2b:06:7d:1c:34:f3:f5:bf:c4:94:5c:59:e7:36:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6F:6B:8B:B2:DC:85:68:18:5E:65:13:11:27:5A:46:5C:96:3B:5A
            X509v3 Authority Key Identifier:
                keyid:EF:C6:D9:64:1E:68:97:F5:2B:C4:86:73:F1:54:FC:94:67:66:AD:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/EFC6D9641E6897F52BC48673F154FC946766AD90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFC6D9641E6897F52BC48673F154FC946766AD90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/323830343a3936343a3a2f33322d3634203d3e20323633303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:964::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:18:d3:0e:55:16:d9:7b:21:7c:11:92:2a:5b:aa:48:34:76:
         c5:1d:04:06:a6:e4:a8:03:b0:70:86:06:13:7c:19:85:08:34:
         92:5b:fc:2b:12:e4:dd:b6:3c:ad:8c:a1:5e:61:72:84:c8:3a:
         64:8f:0d:1b:ac:0c:b1:3f:14:8c:35:69:3e:b0:e8:fc:96:c7:
         0c:a4:d1:c3:2a:51:00:a5:78:6c:26:3c:03:10:0b:80:a8:af:
         23:b3:3b:1f:37:db:82:92:dd:40:6e:3d:ff:4e:7d:5d:3f:c1:
         36:e8:a7:9a:3d:72:58:16:84:2e:05:c0:63:a4:97:ac:1d:4e:
         c6:1f:fb:57:55:13:8e:a4:59:02:4e:11:17:cc:28:ee:4b:c8:
         99:a8:80:5f:04:d4:fb:8d:50:14:3d:d2:19:59:fc:0a:48:35:
         2b:aa:6a:37:c7:36:1d:b2:d8:5c:44:18:fe:01:14:3e:98:fc:
         25:f4:15:ca:68:b5:bd:a8:f6:a3:eb:35:29:3f:b3:b2:6c:6e:
         1e:12:94:47:27:53:18:13:46:96:53:0d:23:d8:3b:b2:21:66:
         86:a7:95:44:e8:05:30:ae:c0:26:4d:39:ac:91:24:9d:c5:fc:
         63:18:ce:4c:30:05:17:e5:a1:c4:75:d0:ce:5b:30:dd:fe:32:
         88:3f:c6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----