Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/323830343a353734303a3a2f33322d3332203d3e20323638303534.roa
File:                     323830343a353734303a3a2f33322d3332203d3e20323638303534.roa (raw, json)
Hash identifier:          pvJNpJH/HLjIwYUUOjk+VOhiZZ0zPT/QWXioGBqrGQU=
Subject key identifier:   8E:E8:42:63:38:89:4B:A0:26:88:8E:B7:1B:F7:DD:39:1B:C7:55:58
Certificate issuer:       /CN=246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC
Certificate serial:       34DE82FACE8ABCDAFA66E9DC95A282586B6FA20F
Authority key identifier: 24:65:99:CD:B5:A9:BC:C9:5E:5D:CF:F5:16:8E:E7:70:BE:6A:CC:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/323830343a353734303a3a2f33322d3332203d3e20323638303534.roa
Signing time:             Thu 11 Apr 2024 21:19:01 +0000
ROA not before:           Thu 11 Apr 2024 21:14:01 +0000
ROA not after:            Thu 10 Apr 2025 21:19:01 +0000
asID:                     268054
IP address blocks:        2804:5740::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:de:82:fa:ce:8a:bc:da:fa:66:e9:dc:95:a2:82:58:6b:6f:a2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC
        Validity
            Not Before: Apr 11 21:14:01 2024 GMT
            Not After : Apr 10 21:19:01 2025 GMT
        Subject: CN=8EE8426338894BA026888EB71BF7DD391BC75558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:c1:16:83:a0:5f:d2:9c:87:70:1a:10:6a:
                    26:90:3f:7b:0a:1f:8c:3b:d7:f3:aa:19:0e:72:9d:
                    57:f8:fa:30:65:11:1a:46:c9:4a:35:b6:69:99:8e:
                    77:4b:81:1b:1b:fc:fd:01:1a:26:7a:35:a3:4e:d3:
                    68:9c:cd:dc:82:cf:33:3e:41:d7:41:1e:ae:c3:9a:
                    db:21:90:c3:a7:6a:25:98:b9:0a:a7:c3:d4:ae:7c:
                    72:27:dc:16:d5:f8:69:d5:03:b0:25:88:95:aa:c7:
                    5b:b5:16:eb:68:1b:a4:1d:7e:bb:22:c4:d8:f0:2d:
                    0c:39:49:a1:9d:f4:3c:cd:bf:0e:f9:23:06:9d:d3:
                    2a:05:ed:30:19:64:53:37:8d:b9:aa:d0:fa:79:f5:
                    be:03:d3:9d:3e:bb:94:f0:c7:76:22:20:ab:69:d2:
                    93:58:05:a8:b3:54:1b:49:8c:df:6f:d6:b1:88:78:
                    88:79:ea:46:36:c4:bf:53:36:a8:3c:b5:71:00:22:
                    79:c1:d7:e3:52:5d:82:b9:cb:a6:fc:72:42:31:b8:
                    5e:a9:80:1a:df:59:40:0c:72:72:61:81:b0:94:27:
                    fc:43:20:93:57:aa:20:5f:7f:4f:3f:a1:0a:82:f3:
                    e8:2b:51:fa:3d:5f:06:f5:91:09:ed:31:56:86:4f:
                    95:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E8:42:63:38:89:4B:A0:26:88:8E:B7:1B:F7:DD:39:1B:C7:55:58
            X509v3 Authority Key Identifier:
                keyid:24:65:99:CD:B5:A9:BC:C9:5E:5D:CF:F5:16:8E:E7:70:BE:6A:CC:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/323830343a353734303a3a2f33322d3332203d3e20323638303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5740::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:6e:b3:04:d3:0c:1c:25:bb:22:54:e4:c0:28:9f:32:b8:08:
         72:1b:53:fb:b0:e0:15:a7:e8:ce:14:16:fa:f0:4b:5c:73:29:
         d9:54:f3:95:1e:26:b2:43:d3:b0:35:b0:2c:22:30:4a:97:ed:
         58:69:a5:80:be:ec:1f:41:6f:26:82:09:73:a0:e1:e9:8a:db:
         72:08:48:32:c4:18:01:26:f4:cd:e7:48:58:30:47:f9:84:ab:
         2c:dc:30:17:6c:06:3d:e0:61:c4:fb:43:d6:28:c7:57:f6:a1:
         ab:ee:bb:fd:53:c0:e1:33:3e:92:c7:43:2c:a0:b3:9d:35:11:
         81:8e:5d:67:21:48:71:3b:9c:16:c7:9d:05:f8:f7:84:10:fd:
         d9:00:82:4d:a3:08:3f:86:8f:96:dc:fd:83:4b:63:1e:42:ea:
         1a:ab:18:84:97:f5:04:73:8a:6a:83:e1:02:f9:84:8f:2a:28:
         48:aa:81:9a:d7:58:be:07:64:86:93:fa:f7:c8:53:46:bf:c8:
         0e:5a:08:2d:6e:2b:de:c7:3a:43:6b:f1:41:66:ef:84:4d:ee:
         17:75:b6:9e:ab:42:ed:c4:4c:75:2e:72:88:2f:2c:10:79:80:
         4e:63:a6:5f:28:a0:a1:ff:aa:b7:15:e1:56:83:08:fa:77:7d:
         98:75:04:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----